Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/1DBC9D405DB411EEA017251AC4F9AE02.roa
File:                     1DBC9D405DB411EEA017251AC4F9AE02.roa (raw, json)
Hash identifier:          MORsfRo625k6Z6J+RgEowsAvarYUIEu/pPax0H0xX08=
Subject key identifier:   2F:33:03:07:93:64:69:92:06:DE:2B:CC:AA:98:50:DC:F2:AA:78:72
Certificate issuer:       /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial:       1EC8
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/1DBC9D405DB411EEA017251AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:19:30 +0000
ROA not before:           Fri 12 Dec 2025 16:13:24 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     18259
IP address blocks:        163.138.241.0/24 maxlen: 24
                          163.138.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7880 (0x1ec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
        Validity
            Not Before: Dec 12 16:13:24 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47522-067b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:5e:eb:61:e5:b7:b7:0c:0a:f3:5d:33:92:
                    43:8c:fa:e8:86:fc:c1:d9:32:e3:cb:42:e9:4b:38:
                    ec:81:75:37:08:80:fc:37:fe:3c:42:33:d2:6a:58:
                    9a:23:87:6a:7e:01:bb:c8:59:4e:f8:bf:ea:5a:d6:
                    51:0e:cf:20:24:ec:44:ce:16:e3:b1:0b:12:6b:ac:
                    90:30:9a:c0:a4:c5:0a:a0:11:8f:17:65:d6:84:bc:
                    8f:7e:17:de:3d:18:6f:44:c5:06:a6:f9:0d:6f:a5:
                    18:c1:a2:61:bf:a5:b9:b1:11:ec:df:7b:d0:ac:6d:
                    6e:81:cd:3a:e9:6f:d6:38:de:0b:aa:14:49:36:e9:
                    6f:28:f4:cf:7a:08:c5:b1:50:50:48:0e:d9:67:c5:
                    0b:c2:66:bf:a1:2c:50:5c:9f:47:dd:4e:43:26:9f:
                    a8:06:f6:4a:f9:3a:df:bb:df:ea:05:cf:7d:9b:f1:
                    43:0b:0a:66:c4:96:ed:a7:5f:16:28:a2:50:56:4e:
                    5b:30:35:b5:55:9e:a3:ff:0c:5d:de:c6:59:73:bd:
                    cc:14:3d:ac:f6:45:2e:b6:3f:56:39:2e:99:ac:ac:
                    37:64:ae:62:8c:ff:12:05:ee:03:37:52:36:e6:f2:
                    4c:f7:d8:68:a3:ad:17:5e:31:be:5c:91:27:00:a8:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:33:03:07:93:64:69:92:06:DE:2B:CC:AA:98:50:DC:F2:AA:78:72
            X509v3 Authority Key Identifier:
                keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/1DBC9D405DB411EEA017251AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.138.241.0-163.138.242.255

    Signature Algorithm: sha256WithRSAEncryption
         c8:32:99:65:50:83:c0:5b:39:3b:de:34:f0:a2:40:c0:57:74:
         92:f4:ac:b8:70:44:e3:58:28:0a:ce:d4:d7:42:04:74:27:f2:
         27:f4:d4:b7:da:58:f6:a4:3c:90:30:83:61:2b:b1:e4:46:a2:
         b7:6d:f5:c7:49:cf:74:c9:ca:4e:01:32:9b:27:84:1a:b0:1c:
         7b:92:02:a5:2b:53:f1:75:6f:05:fd:62:24:16:f2:97:cf:7a:
         a1:0d:64:5b:06:12:33:8a:6f:6f:2d:a1:98:3c:4a:fb:40:9c:
         75:3a:1b:e0:1c:d3:1e:cb:03:af:2c:64:88:6e:9a:2f:c7:41:
         2e:ec:a4:d5:c4:3c:cb:de:53:12:23:c0:c6:0b:5b:d0:d2:1b:
         68:2c:be:45:71:b6:8d:8b:4d:d6:b2:bf:07:5f:00:32:ee:31:
         f4:89:55:70:cb:c1:03:dc:89:53:77:d1:09:41:87:2f:70:03:
         80:83:0b:3f:b4:e6:33:58:9d:a9:96:ca:88:5b:5d:89:14:43:
         69:73:6a:be:92:8f:6b:4c:d5:32:ed:6c:f6:b9:2f:cb:37:da:
         cc:44:e2:4b:a0:65:4e:6d:1b:b9:27:ab:66:77:7c:2a:2e:fa:
         59:0b:68:55:00:fc:53:c0:19:63:5e:12:db:e5:26:fd:47:77:
         86:83:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:45 2026 by rpki-client