Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F7292614459D11EDB62F422FC4F9AE02.roa
File:                     F7292614459D11EDB62F422FC4F9AE02.roa (raw, json)
Hash identifier:          bCRyr/Eh9TWiiT+D6rm/5acZTsgayhcRQXEpVl/CUcs=
Subject key identifier:   E8:5E:14:3F:AA:40:EF:4A:83:77:EE:95:96:A5:89:9C:E9:2E:C7:82
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3764
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F7292614459D11EDB62F422FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:08:20 +0000
ROA not before:           Wed 08 Oct 2025 14:40:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     210334
IP address blocks:        175.29.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14180 (0x3764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48ea4-fcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:ae:d2:63:bf:dc:3f:b5:c9:c3:c9:ac:16:
                    fa:80:af:08:36:29:24:f7:92:be:89:a5:2d:d8:52:
                    ff:c0:b6:9d:f1:86:a8:96:08:a8:03:53:f7:b4:5d:
                    a9:7e:d2:64:34:be:83:1d:07:43:2b:03:dc:68:78:
                    f8:4d:c7:15:70:96:af:f2:8f:a9:01:76:1e:8a:ad:
                    4c:1f:cd:7e:ee:7f:c2:7d:ad:c3:a1:b9:8a:8b:56:
                    db:8e:a4:e3:a6:e6:71:80:b2:f7:e5:a3:3f:da:ae:
                    53:3e:33:50:3f:7f:d5:39:ba:2c:4f:59:38:35:51:
                    11:36:4d:bc:16:4b:ba:6f:ea:e5:1e:18:c1:89:6d:
                    66:22:14:46:06:5b:e4:4a:14:0a:d5:8d:fe:29:0b:
                    23:36:e3:89:a1:28:e2:af:c9:5b:5e:26:45:6d:aa:
                    40:67:6b:68:df:61:00:02:96:7e:ba:91:b5:f3:43:
                    2d:01:c2:91:13:89:6a:bc:02:16:2a:06:ca:9f:74:
                    ff:bb:2a:d0:64:85:f4:05:36:b0:05:e7:20:e5:35:
                    2d:c5:25:e3:b0:98:cd:1d:73:59:8c:38:91:33:a8:
                    da:3e:72:62:e4:ee:69:1d:51:15:13:af:b3:51:41:
                    c9:1f:e1:b8:bc:26:57:49:52:13:ec:e5:89:1e:80:
                    f9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:14:3F:AA:40:EF:4A:83:77:EE:95:96:A5:89:9C:E9:2E:C7:82
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F7292614459D11EDB62F422FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:af:84:28:67:16:c5:4d:20:7a:ea:8d:19:eb:d4:4e:e0:7a:
         bd:7f:8e:ff:31:55:b6:79:6c:5a:bb:83:c0:37:39:f3:24:00:
         3b:4b:eb:99:5c:aa:9c:58:63:ef:34:1a:7d:55:aa:bd:a9:0a:
         51:4b:34:8b:0a:56:78:7c:38:fe:ed:74:17:81:3d:2b:cf:1a:
         a3:32:0c:6e:f3:e7:ab:12:8c:a6:60:2c:f3:09:83:fe:36:7b:
         fb:83:f6:24:9c:53:98:ea:de:08:5b:85:9c:59:63:b3:50:c8:
         66:c9:aa:43:dc:fd:5b:c0:60:b0:2e:30:7d:11:9c:4f:d4:e6:
         bc:f7:86:6b:a0:6a:c1:4b:df:d1:4d:5b:e8:96:da:f7:a8:49:
         d0:f2:e1:52:b5:32:35:ca:b1:a6:5c:3a:ae:e8:25:c8:4f:92:
         ee:21:f2:81:8a:61:c8:d6:08:54:08:37:d3:98:ec:b3:37:f1:
         73:b4:14:1a:cf:09:47:01:ce:0f:8d:e9:b0:34:e3:03:a1:73:
         31:6e:52:d7:7e:98:48:e9:69:b2:be:c3:f9:7a:c3:e8:26:0c:
         27:c4:f6:67:85:f2:2f:1f:01:ed:f2:b8:46:5e:f9:45:db:2d:
         e5:1a:09:38:a3:73:4c:4c:d0:33:67:60:b8:b4:79:73:a2:a2:
         57:45:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:50 2026 by rpki-client