Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/FFF84A263A6911F18AE46050B0833773.roa
File:                     FFF84A263A6911F18AE46050B0833773.roa (raw, json)
Hash identifier:          ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=
Subject key identifier:   79:B5:6B:FB:A2:C8:7C:D8:61:3E:E1:5B:42:A1:27:03:62:30:7C:5C
Certificate issuer:       /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53
Certificate serial:       0A
Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/FFF84A263A6911F18AE46050B0833773.roa
Signing time:             Fri 17 Apr 2026 14:30:37 +0000
ROA not before:           Fri 17 Apr 2026 14:30:37 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     17557
IP address blocks:        151.158.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl
                          rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53
        Validity
            Not Before: Apr 17 14:30:37 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e2440d-c5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:76:56:93:ea:fc:2c:20:93:d2:b4:ed:d5:
                    2c:b6:18:f4:81:14:cb:83:b2:16:7b:31:65:1a:c7:
                    23:14:9e:7e:dc:a5:a2:9f:e1:5f:5e:a2:a3:47:4f:
                    07:f3:ce:0a:40:02:95:e5:b7:d5:b2:cf:0d:c8:ec:
                    6e:80:a6:38:7a:9e:82:d2:96:de:bb:63:b8:86:3d:
                    a3:f3:d2:19:de:c9:d1:82:d0:76:28:65:a8:98:f8:
                    dd:b9:fc:15:49:5d:89:19:f7:64:29:05:f8:56:e0:
                    ff:04:7c:d4:1b:91:1f:22:aa:cc:e0:91:18:a6:44:
                    ac:83:62:ae:c4:43:85:a5:30:d9:dd:3d:64:23:fe:
                    97:7a:e2:6e:f1:d4:a0:f9:a5:35:d2:da:41:70:04:
                    16:6d:91:1c:9a:2b:10:d1:cb:d5:2a:f7:ff:41:3f:
                    23:50:01:95:2f:88:e7:d2:0e:63:9b:40:e3:03:fa:
                    3f:d2:9b:a3:bc:2b:d4:7e:b3:9a:1e:a5:0a:33:32:
                    55:a4:71:18:bb:77:80:fc:86:d1:b5:78:5b:30:ee:
                    e2:52:d8:b8:56:4d:4d:66:06:ca:ec:f2:0f:b3:3a:
                    65:57:30:1a:e2:41:08:f9:61:cc:52:72:d2:e2:9d:
                    29:d4:d1:3b:2d:2a:e0:17:84:b6:27:c7:cc:38:01:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:6B:FB:A2:C8:7C:D8:61:3E:E1:5B:42:A1:27:03:62:30:7C:5C
            X509v3 Authority Key Identifier:
                keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/FFF84A263A6911F18AE46050B0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:76:05:b0:04:3d:42:00:ea:ba:fe:e1:e7:ad:1f:06:4f:7a:
         a0:3e:09:09:27:13:a7:ce:92:7c:50:12:3a:90:f8:08:ac:b9:
         15:a1:fe:d4:2e:4d:5d:24:c7:a4:40:ff:f9:0f:a3:63:10:b1:
         22:bc:bc:64:2d:8d:87:25:a6:7e:57:b5:ae:2f:c4:95:72:1f:
         40:d7:5c:a3:8f:b8:b2:2f:7a:a7:a6:ba:42:1f:c6:d9:53:bd:
         de:3d:07:0f:34:82:4e:06:b5:71:34:d6:6c:06:d6:15:5a:0f:
         44:1e:f5:56:97:7d:55:9e:9d:8e:33:9d:05:74:8a:43:e5:11:
         b2:67:db:ad:3e:cc:f7:6e:54:18:1f:a4:f6:d8:23:61:7c:3e:
         b6:a9:d6:21:8e:05:fc:32:f0:b0:1f:25:9c:68:76:54:64:80:
         99:e9:d4:08:bf:f1:dd:a8:2e:35:4c:2d:18:0a:39:5b:dc:26:
         01:1b:5e:33:01:33:ed:31:47:2c:5a:08:d8:07:40:df:85:81:
         92:71:8b:34:f3:07:7b:94:03:05:43:ed:15:d4:dd:5c:80:1a:
         64:65:21:03:3f:17:ae:9f:91:2a:03:56:4d:2f:66:50:63:e0:
         db:29:43:60:fa:da:7a:63:20:7f:90:2f:ff:69:2c:ba:87:5a:
         05:b4:46:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:49 2026 by rpki-client