Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/11BAFC08E09911EAB8D3B833C4F9AE02.roa
File:                     11BAFC08E09911EAB8D3B833C4F9AE02.roa (raw, json)
Hash identifier:          ZCk+fEsQHe2jlnBNkTm2b7TPnu7HbyKCFYwP585vSWU=
Subject key identifier:   08:42:16:04:8B:76:4A:8E:E2:AF:EF:F1:7E:1D:5F:BA:2A:25:1C:1A
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       3146
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/11BAFC08E09911EAB8D3B833C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:54:12 +0000
ROA not before:           Wed 30 Apr 2025 15:52:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17451
IP address blocks:        180.87.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12614 (0x3146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: Apr 30 15:52:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a47d44-8627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:1b:e0:75:b3:9f:c6:8f:98:76:8c:26:df:
                    e8:bb:a2:fd:90:97:4b:36:dd:dc:5f:b7:55:69:aa:
                    0f:5a:17:3b:83:7b:a8:1f:11:71:a0:d4:9b:a6:a8:
                    25:71:85:2e:76:31:8b:ed:03:20:82:82:be:bb:58:
                    76:db:56:cb:cb:ce:30:6d:74:fc:3f:1a:84:f6:27:
                    e6:a5:72:67:fb:3f:ce:8c:98:a0:6c:67:b2:b3:ff:
                    db:40:6e:28:95:40:52:aa:59:c9:8e:c0:ae:3e:d7:
                    9c:92:16:99:62:0c:e6:be:c5:59:af:66:44:93:4d:
                    cc:3d:8f:12:2c:5e:59:89:80:77:84:7d:f9:4a:29:
                    e1:e4:f3:05:70:83:88:df:e3:f9:48:32:cd:b3:e4:
                    3b:f1:a1:7a:c0:cf:b3:39:6d:d7:db:bb:53:8c:67:
                    be:7a:e7:98:33:40:7c:70:00:6c:41:3c:44:99:02:
                    69:67:ac:06:75:a9:d6:b0:d1:c9:20:f8:04:14:8a:
                    64:29:fd:84:b3:3f:84:5a:3c:26:5e:6e:7f:8f:52:
                    22:11:54:f1:00:aa:44:83:16:d8:9e:56:82:70:5d:
                    78:69:ce:d7:c3:5e:36:f6:07:1f:89:85:c2:ea:43:
                    a2:a1:6d:19:2b:e2:bb:42:23:73:7a:af:b8:25:f6:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:42:16:04:8B:76:4A:8E:E2:AF:EF:F1:7E:1D:5F:BA:2A:25:1C:1A
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/11BAFC08E09911EAB8D3B833C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.87.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:60:4d:12:2e:57:b2:1c:40:3c:da:2e:c9:65:65:e1:e7:38:
         83:ca:2d:96:ed:08:87:a1:65:74:bc:5f:d8:f5:7e:fb:f6:2d:
         f6:38:d5:e7:47:d2:f6:83:1b:d4:1a:cb:a4:fe:eb:15:d5:95:
         f4:d2:2d:4e:46:a3:cd:b0:b2:59:39:bd:d9:6e:bd:46:fe:79:
         31:e5:0a:2e:53:e0:81:05:3f:cd:a0:39:5e:9c:11:40:3f:5e:
         d3:3f:57:19:11:33:d4:0f:88:d7:15:81:59:a9:59:72:e1:6f:
         66:f0:31:77:8f:f3:5f:4d:38:8d:e7:84:85:c5:00:66:a4:23:
         ab:45:2e:08:76:c8:9b:ff:4d:c0:9b:39:c1:00:fe:a1:54:99:
         b1:3e:b5:d7:3b:41:90:c8:d3:73:05:c4:a4:19:01:33:c9:39:
         5d:81:d2:ec:02:f8:6a:18:51:29:46:a1:66:41:19:b3:68:c9:
         ab:7b:e9:16:63:18:f1:78:43:8f:f0:d2:56:1a:7b:8a:8a:d7:
         eb:cb:78:17:41:1e:48:2d:6c:83:82:4f:c3:23:aa:ae:f6:74:
         6a:29:34:c0:92:69:66:b1:4d:fb:06:a8:ad:1b:bb:50:fe:c4:
         7c:56:f4:a7:b4:fb:54:57:d3:b0:29:12:1f:4b:f3:57:76:21:
         70:cd:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:36 2026 by rpki-client