Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/FAF25932427711EEBEA02D22C4F9AE02.roa
File:                     FAF25932427711EEBEA02D22C4F9AE02.roa (raw, json)
Hash identifier:          XW6xQ4m33bll1QQo6ExM0djcwBQb4VCBIwadzzbBLqg=
Subject key identifier:   1C:C0:1A:84:37:B4:F9:DB:59:64:EB:23:9D:21:86:58:16:82:CC:8B
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       378E
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/FAF25932427711EEBEA02D22C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:28:39 +0000
ROA not before:           Sat 22 Mar 2025 15:00:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138368
IP address blocks:        119.156.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14222 (0x378e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar 22 15:00:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48556-e6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:13:73:d7:ca:21:7b:41:45:64:59:12:eb:
                    53:a0:83:30:b8:4b:08:e1:4c:71:80:2f:e6:37:4d:
                    9b:a7:4c:86:80:7f:c9:ad:f4:85:41:3f:b4:93:44:
                    02:03:27:9d:26:16:d1:18:98:f1:8a:2f:e5:d7:a2:
                    69:94:54:0f:f3:52:ab:cf:2b:5c:88:a3:d6:88:33:
                    52:7d:07:e3:91:a9:40:f3:c4:cd:79:3c:f0:86:2d:
                    59:fb:29:b9:49:04:4c:56:e8:32:3f:31:d0:57:f7:
                    44:b5:15:61:4d:a4:2a:90:de:a4:e0:92:4e:bd:43:
                    09:46:68:a0:f2:ad:71:b5:e3:fb:c7:10:01:0b:d6:
                    3a:73:85:0b:e4:17:15:e6:d3:05:9d:58:6c:c6:b7:
                    be:5c:e0:7c:0c:86:9c:24:98:2b:62:6f:56:d4:35:
                    a1:83:8d:92:09:48:d6:33:ae:f7:59:ed:88:af:45:
                    54:55:40:96:0b:f3:f8:8e:be:1e:02:d6:b5:2d:16:
                    0f:10:cf:16:64:55:5f:e4:c9:f9:60:45:25:a3:1b:
                    cf:95:f3:0f:07:0e:69:05:4b:ad:ba:1c:ca:6d:06:
                    a5:3d:83:c5:9a:26:ed:48:dc:57:38:6f:49:92:5b:
                    8b:1e:6e:72:e1:72:50:77:4c:48:26:b7:0e:0c:d0:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C0:1A:84:37:B4:F9:DB:59:64:EB:23:9D:21:86:58:16:82:CC:8B
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/FAF25932427711EEBEA02D22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.156.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:8d:27:e7:93:71:04:b4:f7:d4:18:1a:cc:f0:64:aa:1b:
         12:5a:be:cc:22:c7:c5:d6:bf:8f:b8:9e:19:75:9f:bb:17:e1:
         bc:80:84:5b:8a:50:29:8a:66:38:44:2f:89:c3:a5:46:69:7b:
         3d:11:52:3b:0d:19:b1:56:85:d9:1d:7d:f9:85:c8:16:44:79:
         41:0c:32:f0:35:5f:8a:60:df:67:1e:41:16:d1:37:8e:43:28:
         de:6a:e1:22:32:f4:34:86:08:88:ea:68:eb:ee:f3:f8:32:5d:
         8a:88:b7:6b:48:0b:bc:67:ea:f1:60:9d:3b:3a:4a:79:8c:04:
         46:7d:0c:67:fd:79:d5:ac:8f:fe:27:ed:46:2e:21:c2:e8:29:
         76:75:2e:8b:62:65:34:b9:f4:57:c9:06:5b:52:ef:c4:68:50:
         c8:e5:4c:8b:a5:61:dd:a3:48:23:8c:b7:bf:37:88:8c:d8:eb:
         47:2e:b7:03:a3:50:ae:b6:0a:e1:77:0c:31:42:b1:64:f9:e3:
         29:3d:ae:80:a9:bc:01:fd:84:cf:96:86:11:17:c4:2e:42:ef:
         8b:e0:57:0e:95:02:5f:5c:0e:b6:2d:1a:6f:f7:bc:22:09:42:
         69:39:2c:9c:81:8f:dd:0d:fe:b5:2e:12:90:0c:12:b0:43:0b:
         d9:72:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:50 2026 by rpki-client