Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/F4ABC602F57411E9B18D9325C4F9AE02.roa
File:                     F4ABC602F57411E9B18D9325C4F9AE02.roa (raw, json)
Hash identifier:          VIRmL951A2w0+MXfiiwjWiaHXlAvoYt8IPFvgYt8GJ8=
Subject key identifier:   8D:31:1F:92:DE:5C:CD:B2:81:5E:9E:96:CA:D8:79:5D:A8:6D:06:E4
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       3660
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/F4ABC602F57411E9B18D9325C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:18:38 +0000
ROA not before:           Wed 04 Jun 2025 15:10:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     45532
IP address blocks:        114.130.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13920 (0x3660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jun  4 15:10:52 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a474ee-940b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:a6:3e:4c:4e:74:a4:98:c1:a0:09:04:92:
                    a3:09:8c:56:a3:64:6e:e7:16:f4:f2:9b:37:21:74:
                    2f:c3:ff:4e:e8:b5:c1:06:74:20:5f:71:54:1f:3c:
                    4d:94:a1:ee:20:5d:a1:e9:6a:fc:ea:68:51:1d:b4:
                    8a:06:b7:c9:35:4b:82:f3:14:ed:fc:a4:da:8f:6a:
                    5a:54:46:f9:09:fc:27:10:51:10:76:dd:40:a9:1b:
                    b3:2f:a2:90:87:f4:0b:2d:85:a7:3b:77:d2:3e:58:
                    81:45:87:84:65:69:26:7a:50:29:23:d2:38:66:83:
                    0c:39:0c:e9:72:d3:ef:49:37:17:c1:b4:d8:a1:d6:
                    7a:c5:3f:f7:90:a2:39:e3:53:ef:db:6a:79:55:3f:
                    d3:95:73:3c:bd:c6:1c:60:44:47:88:b9:c4:d5:56:
                    a5:a2:48:ae:82:59:b4:22:16:af:75:f3:e8:71:e7:
                    4d:ba:d6:6f:b4:05:77:19:60:a2:dc:89:35:de:70:
                    2f:d5:7d:1e:f9:13:f9:7b:90:61:ec:cd:49:eb:29:
                    64:4f:ae:f1:3f:7b:4d:5f:30:43:ed:97:0e:b8:74:
                    de:68:54:92:38:fe:81:12:5f:ce:45:cb:5d:69:0c:
                    25:20:08:13:46:ea:f5:92:a0:b7:bb:d6:d0:b6:ad:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:31:1F:92:DE:5C:CD:B2:81:5E:9E:96:CA:D8:79:5D:A8:6D:06:E4
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/F4ABC602F57411E9B18D9325C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:3e:b4:fe:42:0d:1b:5b:f9:05:9b:d4:16:ad:3a:1d:05:a1:
         8e:60:76:9f:1b:5f:4a:bb:85:6f:96:cc:1e:61:99:7a:f2:77:
         81:94:20:23:9d:a7:36:cb:6e:e0:db:33:ca:3c:ea:03:c4:c5:
         40:d1:3d:56:dd:a4:98:2f:63:11:e6:71:e8:d3:90:48:14:e0:
         23:c9:0a:fc:21:28:fa:38:0f:a8:75:57:2a:14:04:46:38:8f:
         84:2a:72:37:c1:d9:69:5c:9a:23:fe:c6:26:76:63:2b:69:ca:
         b2:5e:47:4e:99:17:c1:0b:8c:53:2f:70:2c:c4:d3:c8:d8:1d:
         e7:98:90:23:d3:8b:ce:58:99:a0:ab:74:7d:2b:91:df:ed:72:
         3a:a9:68:13:de:85:62:0d:4c:8e:1f:6b:34:82:00:75:2b:3a:
         5a:f5:d8:2d:e9:e7:ef:d8:87:d7:7b:ab:1e:2b:6f:44:38:a7:
         d7:93:cf:45:ae:1a:f5:72:ad:f6:a4:26:7c:43:c6:22:4b:4c:
         51:72:02:5d:2f:53:12:a3:56:6a:4b:4d:05:ad:5f:eb:f0:e2:
         72:45:ff:e1:d9:13:40:9a:5b:54:b2:f4:77:b2:28:4b:f4:e2:
         62:f1:96:1c:d1:e5:54:84:15:45:00:ac:59:0a:4f:f4:a9:ca:
         b4:e4:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:58 2026 by rpki-client