Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/F255E05612DB11EBBE14D853C4F9AE02.roa
File:                     F255E05612DB11EBBE14D853C4F9AE02.roa (raw, json)
Hash identifier:          vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=
Subject key identifier:   18:36:7A:9E:E2:E9:6C:19:6A:31:23:88:3A:FF:ED:FE:4F:D6:D0:40
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       08CB
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/F255E05612DB11EBBE14D853C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:03:36 +0000
ROA not before:           Tue 16 Dec 2025 21:17:28 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     209557
IP address blocks:        2406:9dc0:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2251 (0x8cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Dec 16 21:17:28 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47f78-eef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:fe:86:af:f4:e3:49:b1:e6:ac:d8:ec:c7:
                    7f:ab:3e:1e:67:6a:dc:ff:92:df:7e:a6:34:7d:4b:
                    9e:e5:32:0a:68:56:47:92:ca:45:06:53:a9:a7:5d:
                    f6:74:ab:1a:ba:89:66:6d:ff:d2:35:a4:59:57:06:
                    d3:e5:40:5b:a5:19:9b:52:43:b3:3d:52:83:c4:d3:
                    d0:5f:91:c9:b0:54:18:fe:01:19:3a:e4:c0:a1:c2:
                    c0:34:c2:d7:ff:1c:14:98:91:03:f7:25:ee:91:77:
                    cc:06:98:6c:b9:76:65:c6:a4:c1:d6:91:32:76:9d:
                    c8:ce:33:ca:de:a7:ea:e0:f4:90:b3:3c:36:29:e2:
                    5e:ab:d2:83:22:16:9c:91:44:e9:8d:84:55:4c:75:
                    2b:8c:c8:2a:b6:ce:74:04:7d:4f:8d:97:e5:40:5e:
                    6f:ae:db:4a:db:8a:f2:d7:26:ae:ce:91:88:99:9b:
                    c6:8f:60:b3:d8:32:6b:22:1f:04:89:63:f9:9d:88:
                    3f:b9:52:d7:51:b4:b8:8a:e2:8f:f2:fa:00:5b:aa:
                    59:a7:86:ed:51:8e:de:a9:55:56:9a:8d:6b:95:b7:
                    f0:3a:25:06:d7:a3:1d:97:42:83:7e:8d:57:f9:35:
                    a7:6e:3d:c8:e5:bb:5c:43:5f:c8:c8:8c:d9:a4:c9:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:36:7A:9E:E2:E9:6C:19:6A:31:23:88:3A:FF:ED:FE:4F:D6:D0:40
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/F255E05612DB11EBBE14D853C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9dc0:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:d0:5b:bc:80:91:24:f2:89:5d:66:54:e5:11:64:63:15:
         12:cf:e8:2d:56:9b:05:f1:1e:6c:87:cc:6e:41:ec:db:73:8a:
         41:d9:46:e7:7d:f0:14:c5:5d:c6:97:02:ac:94:45:10:b4:a3:
         36:f4:1c:4b:b7:b5:95:49:87:e8:8e:37:9f:ea:fc:5e:b4:58:
         10:6c:f0:2e:08:80:f9:b4:dd:b2:1e:fa:a8:af:d1:73:90:79:
         8c:8d:a6:14:64:3d:99:ae:68:e6:38:df:0b:1a:74:94:c3:a7:
         24:b0:76:e3:9c:a3:ca:02:8d:7f:3a:87:c5:f3:00:02:18:28:
         6e:00:79:55:03:66:9e:58:b4:d5:33:42:33:d2:ac:a8:8d:f8:
         1c:e6:02:3f:91:c9:a0:f2:ac:87:14:2b:2b:ea:83:a4:68:83:
         96:2c:24:cd:d0:f0:f5:ba:be:dc:0a:47:65:17:86:c2:9e:ac:
         9f:f7:d1:4b:b1:10:83:2b:b6:03:6b:e7:eb:65:6b:23:49:b8:
         48:03:a8:8b:76:94:a6:52:bb:21:73:c3:ea:4f:01:c6:9b:4a:
         e2:d6:c5:11:ac:65:43:da:fa:3b:71:64:22:1d:be:c5:2e:7e:
         02:bd:2a:19:ef:18:9b:65:05:1e:5a:90:3f:9a:fe:a4:c8:24:
         1c:06:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:26 2026 by rpki-client