Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/ABD937089D6511F0A6A3E74BC4F9AE02.roa
File:                     ABD937089D6511F0A6A3E74BC4F9AE02.roa (raw, json)
Hash identifier:          5zJXRvPWX0oO/+YChL7iaTRy6kpXfQLWY1KW7kQ0BS4=
Subject key identifier:   5E:29:27:FB:1C:F1:71:EF:30:4E:F0:DF:30:2E:A0:C0:A7:DA:92:44
Certificate issuer:       /CN=A91BD939/serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
Certificate serial:       53
Authority key identifier: A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/ABD937089D6511F0A6A3E74BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:17:29 +0000
ROA not before:           Mon 06 Oct 2025 04:13:27 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141767
IP address blocks:        157.119.70.0/23 maxlen: 24
                          2001:df6:2840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl
                          rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD939, serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
        Validity
            Not Before: Oct  6 04:13:27 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3d9f9-0cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:97:38:8d:c2:df:f8:3c:c7:89:57:c9:2a:
                    d4:78:5b:c6:18:a3:69:3f:22:a6:45:02:a1:99:7e:
                    b6:08:b2:89:b0:b6:3f:eb:91:e9:af:71:38:72:1d:
                    5a:a7:ae:57:02:20:ba:a0:9a:9f:1e:5f:8a:ef:dd:
                    3e:2c:33:66:01:f7:ca:65:4e:d9:d3:cc:bd:53:2e:
                    03:d4:9b:6b:85:5e:d1:db:6a:2b:bb:1e:b3:cd:a4:
                    b6:a7:54:8f:f5:08:15:8e:f2:23:7f:a4:cc:b1:c0:
                    ab:b3:18:c8:40:3c:22:1e:1a:2a:85:9d:01:38:1b:
                    6b:46:0c:07:84:5d:1f:6d:38:ef:d1:8f:0c:6c:c7:
                    df:99:17:0a:65:c6:d6:10:e9:ab:ae:28:c5:8a:b7:
                    1f:ae:25:ad:2f:5e:0f:b8:58:c3:21:34:5e:d5:26:
                    6a:e6:2c:5a:bf:60:f5:95:50:c4:dd:bb:b4:28:e9:
                    c9:fb:7a:93:68:fa:4c:e8:3b:7a:18:db:fd:80:e8:
                    a1:f1:ba:6e:a9:60:07:af:36:d0:68:d8:08:22:70:
                    c9:f7:3c:c1:20:70:9f:bf:d1:5b:99:48:38:04:74:
                    f3:f9:66:15:e5:29:c3:40:c8:51:58:bf:e0:44:a7:
                    9e:c6:13:08:5d:f1:b1:d3:ba:78:8b:e9:a5:21:ea:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:29:27:FB:1C:F1:71:EF:30:4E:F0:DF:30:2E:A0:C0:A7:DA:92:44
            X509v3 Authority Key Identifier:
                keyid:A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/ABD937089D6511F0A6A3E74BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.70.0/23
                IPv6:
                  2001:df6:2840::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:7a:77:d5:80:ba:f7:0f:1d:ed:9e:d5:6f:ac:7e:29:6b:
         ca:4d:67:c6:f7:ae:56:c7:e0:9c:c3:65:16:35:de:96:1a:78:
         2b:9c:9f:0a:39:b0:72:35:d7:9a:7a:c7:8a:b2:a3:ef:be:54:
         41:c1:93:df:9d:38:a2:bf:97:ad:54:84:7c:02:bd:ab:b4:26:
         0a:dc:c4:49:59:57:21:87:bd:ec:57:d7:c3:9e:03:eb:66:df:
         c9:af:79:ff:73:7d:9e:42:c0:49:1a:b6:df:8c:b2:35:e7:d2:
         46:f4:21:80:c3:2e:3b:39:36:aa:98:3b:c3:61:8a:e4:d5:14:
         0f:6d:f6:36:11:06:4b:95:d6:81:e3:9a:9f:75:ca:35:a9:dd:
         9d:e1:91:bc:e0:a8:89:ed:f4:bb:f9:64:de:5a:d2:78:36:b5:
         a6:7d:b9:c5:95:7f:96:f1:d9:1c:de:82:7d:51:c7:c3:51:75:
         65:e2:8b:2a:68:2b:6c:19:94:4f:e4:b0:24:ff:9d:1e:bf:c8:
         ee:1c:62:73:9d:2d:62:9e:14:fb:45:17:e3:32:67:c2:a6:ca:
         f6:32:c0:fd:1d:a0:2e:7e:b8:29:60:9c:3e:fd:7d:d5:62:cc:
         e6:fe:15:a8:6e:02:75:82:86:00:ee:d3:13:33:06:94:21:e7:
         57:2c:39:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:16 2026 by rpki-client