Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/4210D4508CD711F0A2DFAA45C4F9AE02.roa
File:                     4210D4508CD711F0A2DFAA45C4F9AE02.roa (raw, json)
Hash identifier:          3NSD584QPTE2VoYUm/1Xe+49n3Loa2OiOqOtqQcrZ6c=
Subject key identifier:   B6:D7:07:9A:15:9F:91:F1:BC:62:F5:6A:50:BF:F3:29:39:9F:95:60
Certificate issuer:       /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
Certificate serial:       C2
Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/4210D4508CD711F0A2DFAA45C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:06:31 +0000
ROA not before:           Mon 08 Sep 2025 17:14:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153737
IP address blocks:        163.223.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
        Validity
            Not Before: Sep  8 17:14:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f387-6d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:58:e0:33:55:d2:40:2c:86:f9:3e:7a:28:
                    96:de:18:22:7b:05:da:78:83:8c:d9:95:33:70:af:
                    9a:98:fe:5e:13:7d:7b:fc:63:a0:f2:97:ff:69:4b:
                    a2:ec:b0:2d:c1:dc:fd:5f:0e:bf:82:0e:1e:14:e7:
                    8e:0f:ad:10:14:55:9d:58:4a:89:a3:df:48:a6:fb:
                    29:66:ca:ca:2d:32:88:47:19:80:2a:78:04:42:a8:
                    4a:52:34:7f:7c:ea:c7:07:6f:38:6c:37:37:c7:9a:
                    b5:6b:86:cf:d8:31:1d:c3:e9:47:8d:b9:ef:1c:24:
                    b9:aa:2b:5e:8b:23:21:e3:d7:e8:ee:a8:b6:6f:6e:
                    dd:87:2c:5e:5d:0e:3d:c9:ba:1b:03:19:ba:2b:b9:
                    4c:79:de:bd:c8:75:7b:67:76:b4:2e:9d:41:79:34:
                    34:e2:b5:45:47:4b:c2:9d:9e:20:38:4a:40:a5:7c:
                    54:49:8e:fd:d6:cd:aa:79:f4:c3:b2:58:78:26:90:
                    93:07:d1:d0:cc:87:3d:3f:6e:85:f6:2e:4d:44:fd:
                    ef:51:61:d7:58:8a:f5:3b:9c:c6:a9:7a:b5:65:3d:
                    83:30:b9:7a:02:d4:48:3c:41:d1:c0:7d:f8:c9:1d:
                    dd:8f:a6:76:35:b2:20:d3:57:42:64:15:6a:df:59:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D7:07:9A:15:9F:91:F1:BC:62:F5:6A:50:BF:F3:29:39:9F:95:60
            X509v3 Authority Key Identifier:
                keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/4210D4508CD711F0A2DFAA45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:27:00:d1:cf:db:6d:31:89:bc:1d:8e:50:33:c2:d0:e4:a0:
         d8:8b:ad:a7:2d:8e:69:af:fb:65:16:92:2a:4f:ff:69:0f:fb:
         0c:00:8c:4f:7d:07:62:1a:62:ae:16:42:e0:21:59:8c:61:1a:
         d0:c8:be:8a:a7:5c:7c:0d:5b:6c:e6:1e:f6:4b:5a:7d:77:bc:
         e4:a8:90:7e:6f:b0:38:dd:11:f5:8e:29:7f:71:b0:e2:0d:65:
         45:56:2a:7b:a7:80:27:9d:20:44:74:fa:7d:0e:2c:08:0e:f9:
         7e:22:c3:3e:1f:39:85:67:08:f2:db:59:17:d7:b5:c1:b1:c5:
         2d:10:b8:d1:99:b6:3b:98:72:5b:e2:b9:85:ef:6d:ce:82:a0:
         9a:07:1a:9f:6a:df:77:a0:7e:14:1b:a2:11:30:28:9b:d5:ef:
         30:8b:ad:a5:34:f8:04:ba:d6:e1:c7:c5:f9:64:9b:b4:21:aa:
         c5:f5:a1:f3:58:56:50:84:e9:33:5a:67:88:6b:56:87:b9:59:
         69:bf:05:a1:12:1d:e8:69:06:ca:67:e4:ee:95:be:e1:dc:97:
         3a:69:11:2f:20:a3:64:99:f4:9d:e9:90:dc:74:12:62:05:59:
         3c:64:76:fc:fb:f9:0c:86:73:99:0c:55:f8:ec:49:77:de:d8:
         1a:70:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:19 2026 by rpki-client