Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/159F22549D1B11ED96607C22C4F9AE02.roa
File:                     159F22549D1B11ED96607C22C4F9AE02.roa (raw, json)
Hash identifier:          UZ/sDYWhUU8n3wLtjpyLN8Vx46G+xjeN+IlTnHCxK80=
Subject key identifier:   87:6E:53:AE:7C:68:14:87:5F:61:C4:89:5A:D6:9E:23:DF:89:74:14
Certificate issuer:       /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Certificate serial:       1072
Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/159F22549D1B11ED96607C22C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:19:29 +0000
ROA not before:           Fri 30 May 2025 17:41:12 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18231
IP address blocks:        2400:f640::/32 maxlen: 32
                          2400:f640::/48 maxlen: 48
                          2400:f640::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl
                          rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4210 (0x1072)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
        Validity
            Not Before: May 30 17:41:12 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a404a0-1680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:89:d6:ad:ad:02:87:15:05:12:44:0d:50:
                    62:0d:d0:67:7d:8e:18:48:dc:71:82:a0:41:4b:2d:
                    66:7d:a2:37:a4:2f:4b:8f:8c:73:c9:d7:a0:3b:76:
                    dc:3a:a9:5c:16:fd:ec:cd:fb:eb:af:64:c4:42:c1:
                    81:52:40:fc:c3:3e:ed:8b:d6:ab:8e:58:3f:a8:3c:
                    30:b9:f0:35:33:ee:ee:97:d3:2d:5f:29:2b:f1:e3:
                    2f:cb:dc:a6:14:df:ca:9b:19:bc:b0:81:19:f5:bf:
                    e3:00:39:0c:8e:f7:9a:65:5c:bb:3c:a0:d0:34:33:
                    04:27:30:fe:6a:64:18:97:af:b6:0b:05:bf:0b:79:
                    fb:21:66:f6:37:69:bb:66:ad:4d:ac:29:d0:3c:92:
                    73:cd:4a:ba:15:fb:ee:60:1a:97:75:de:cf:b1:33:
                    5b:5d:09:60:ab:09:25:78:a0:57:54:e1:a6:fa:6d:
                    60:f2:4b:9b:85:13:eb:a8:86:a7:94:e7:00:7f:a6:
                    10:50:34:3f:b3:2b:b8:2b:44:a0:eb:4d:05:c2:68:
                    80:ff:ba:28:e1:97:f8:ea:0f:dd:c2:8b:2b:1d:55:
                    f3:0a:28:66:53:c3:a9:83:e1:fe:07:2f:e6:20:18:
                    97:19:b4:35:e7:6a:83:72:24:e9:77:eb:60:ef:d1:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6E:53:AE:7C:68:14:87:5F:61:C4:89:5A:D6:9E:23:DF:89:74:14
            X509v3 Authority Key Identifier:
                keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/159F22549D1B11ED96607C22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f640::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:7e:71:2e:5a:da:06:34:c5:fc:41:99:28:23:75:58:52:e8:
         4a:b0:ab:8f:7d:5f:41:16:f3:0b:a4:db:ee:38:ca:de:c1:8a:
         88:ac:da:8e:75:0e:9a:55:58:27:d7:1a:b9:df:2b:b5:22:70:
         42:61:69:de:7e:90:8f:14:97:05:c6:ec:58:81:f0:60:56:a6:
         f9:59:47:73:78:04:81:d1:5e:7b:0e:47:6d:25:51:0b:bc:37:
         3d:10:07:18:86:81:63:05:09:1b:5d:26:44:da:57:89:d8:c3:
         34:e5:c0:65:27:e2:d2:37:0f:62:0d:2d:d2:ff:fb:2b:61:5a:
         00:25:71:19:23:94:11:da:4a:0b:2d:4a:3e:1b:48:f4:6e:ba:
         90:f7:0e:72:d0:ce:c4:94:3e:67:ef:b4:17:2e:e8:2a:a4:d0:
         3c:ac:19:8d:cc:07:2f:73:68:98:25:bd:f6:5d:9e:19:63:b2:
         fd:57:1c:0e:a1:58:c3:bd:12:fc:ba:11:b0:18:01:57:ce:ff:
         83:87:df:1d:ea:67:98:d0:a3:bc:e2:76:0e:0f:d8:bb:0d:d8:
         14:4b:c2:1a:98:59:2b:53:6d:69:e0:ba:e2:b6:3e:d6:52:43:
         4e:b1:18:f1:45:82:cc:82:00:a6:88:2e:94:c8:25:5b:4e:70:
         ec:5e:01:d5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICEHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4
MjE1MzQ0RkIwHhcNMjUwNTMwMTc0MTEyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDRhMC0xNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxFSJ1q2tAocVBRJEDVBiDdBnfY4YSNxxgqBBSy1mfaI3pC9Lj4xzydegO3bc
OqlcFv3szfvrr2TEQsGBUkD8wz7ti9arjlg/qDwwufA1M+7ul9MtXykr8eMvy9ym
FN/Kmxm8sIEZ9b/jADkMjveaZVy7PKDQNDMEJzD+amQYl6+2CwW/C3n7IWb2N2m7
Zq1NrCnQPJJzzUq6FfvuYBqXdd7PsTNbXQlgqwkleKBXVOGm+m1g8kubhRPrqIan
lOcAf6YQUDQ/syu4K0Sg600FwmiA/7oo4Zf46g/dwosrHVXzCihmU8Opg+H+By/m
IBiXGbQ152qDciTpd+tg79FBZQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFIduU658
aBSHX2HEiVrWniPfiXQUMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx
NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTc5M0EvNzZBRjMzNEM1MTY5MTFFOUE3OUMxRTgxQzRGOUFFMDIvMTU5RjIyNTQ5
RDFCMTFFRDk2NjA3QzIyQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAD2QDANBgkqhkiG9w0BAQsFAAOCAQEALn5xLlraBjTF/EGZKCN1
WFLoSrCrj31fQRbzC6Tb7jjK3sGKiKzajnUOmlVYJ9caud8rtSJwQmFp3n6QjxSX
BcbsWIHwYFam+VlHc3gEgdFeew5HbSVRC7w3PRAHGIaBYwUJG10mRNpXidjDNOXA
ZSfi0jcPYg0t0v/7K2FaACVxGSOUEdpKCy1KPhtI9G66kPcOctDOxJQ+Z++0Fy7o
KqTQPKwZjcwHL3NomCW99l2eGWOy/VccDqFYw70S/LoRsBgBV87/g4ffHepnmNCj
vOJ2Dg/Yuw3YFEvCGphZK1NtaeC64rY+1lJDTrEY8UWCzIIApogulMglW05w7F4B
1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:08 2026 by rpki-client