Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/F685154E343511F194D2A58293833773.roa
File:                     F685154E343511F194D2A58293833773.roa (raw, json)
Hash identifier:          gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=
Subject key identifier:   8F:E1:FC:D8:1E:69:27:7B:F9:F4:0E:CE:9F:72:EA:46:8C:5A:57:EC
Certificate issuer:       /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
Certificate serial:       04
Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/F685154E343511F194D2A58293833773.roa
Signing time:             Fri 10 Apr 2026 14:38:52 +0000
ROA not before:           Fri 10 Apr 2026 14:38:52 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     45466
IP address blocks:        203.8.109.0/24 maxlen: 24
                          203.170.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl
                          rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
        Validity
            Not Before: Apr 10 14:38:52 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69d90b7c-72c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:10:55:e5:8b:7d:60:f2:19:fd:94:3b:ed:
                    e4:a3:42:6c:a0:d2:c9:96:a5:be:26:f9:bb:f5:d4:
                    77:4c:3c:4a:ae:0a:08:8a:b3:c4:52:61:28:10:d5:
                    45:29:99:db:92:f4:f0:b8:06:cb:cd:4e:a9:62:c2:
                    fa:f9:09:3b:e2:5e:6e:2d:c6:20:43:05:a7:b2:13:
                    fc:45:38:70:31:bc:52:19:7c:85:cd:24:06:28:a3:
                    e8:b2:96:b2:2b:b2:f9:b4:d7:89:b2:6f:f8:c9:d4:
                    09:fd:b4:c6:38:35:8b:4c:11:e4:a4:9c:34:68:ca:
                    0f:1b:1e:5f:ba:1a:37:bf:51:f6:e0:c1:ac:2e:42:
                    6f:61:49:39:bd:f1:26:2b:77:21:e1:5e:4e:57:b8:
                    03:87:75:69:7c:5f:d7:e3:6a:3a:99:d2:1c:bf:ad:
                    f2:4a:bc:7a:17:b7:57:a2:9c:a2:34:75:d4:e3:bd:
                    03:8a:c4:28:70:6d:ca:17:a8:8b:92:3e:84:be:fa:
                    8d:3a:23:e5:15:b5:c5:43:56:06:17:8f:7a:c9:29:
                    ab:76:17:86:7d:86:95:77:91:49:41:bb:4d:50:d1:
                    21:58:6a:19:08:c6:22:da:1f:6d:ab:fa:2c:d1:58:
                    f8:ba:0c:a6:f6:a7:8b:77:5b:28:d0:0f:0a:12:eb:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E1:FC:D8:1E:69:27:7B:F9:F4:0E:CE:9F:72:EA:46:8C:5A:57:EC
            X509v3 Authority Key Identifier:
                keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/F685154E343511F194D2A58293833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.8.109.0/24
                  203.170.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:6f:a8:d6:6b:16:9c:66:80:07:75:87:48:60:62:46:7c:
         46:3b:3d:49:31:c1:e8:41:36:46:0b:62:4f:44:42:ab:0c:dd:
         ae:1f:fa:89:e4:88:16:eb:42:b4:5c:d0:73:da:3d:31:f4:2b:
         28:5b:0c:68:67:62:30:7f:a8:44:04:e9:38:83:70:fe:a4:47:
         6e:64:12:4f:f7:39:b9:7c:2c:8b:11:44:d3:ad:0d:9e:71:81:
         13:fe:2e:80:e9:c3:8b:bf:86:45:8d:af:e1:31:cb:50:95:7b:
         cf:9c:0c:25:85:d2:d0:ed:ea:ef:ad:3b:50:b9:71:03:2f:e5:
         7d:13:b6:15:85:6b:7e:1d:47:b1:22:7a:13:d9:76:29:9e:cc:
         65:45:55:cd:04:15:5d:66:e4:c3:05:46:7e:41:7f:f6:bb:b9:
         a0:b7:ad:4a:39:48:a5:bd:b2:c6:12:7a:49:8d:4b:d9:55:aa:
         40:09:45:9c:ab:34:9e:22:fd:05:ba:92:6d:81:cd:3f:58:0c:
         2f:eb:1d:d1:7f:d7:20:e7:3a:85:1b:3e:17:70:ef:76:7c:69:
         89:d9:00:57:7b:15:69:72:e6:d3:f3:74:e2:5c:ad:01:38:74:
         bf:17:45:25:49:22:d6:53:e7:48:04:2c:ef:0f:7e:18:5c:1d:
         8f:46:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:20 2026 by rpki-client