Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/9B1ABC54486111E8AA9B1B45C4F9AE02.roa
File:                     9B1ABC54486111E8AA9B1B45C4F9AE02.roa (raw, json)
Hash identifier:          5g3UB7PkGdv29Z5SCWubN0v2fUQJ0C7K/L9HhQY3p7Y=
Subject key identifier:   E8:16:91:32:83:BD:08:CD:70:CE:7F:12:E2:3C:39:B9:66:9B:10:90
Certificate issuer:       /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial:       21EF
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/9B1ABC54486111E8AA9B1B45C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:39:55 +0000
ROA not before:           Fri 28 Mar 2025 16:24:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58621
IP address blocks:        43.243.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
                          rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8687 (0x21ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
        Validity
            Not Before: Mar 28 16:24:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a441ab-eda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b1:20:e9:55:4a:3f:19:58:57:2f:1c:19:a8:
                    4a:62:50:ca:cc:cb:28:44:cf:72:f8:2e:92:a7:5e:
                    23:44:94:cd:30:e5:84:b3:5a:8d:a2:f1:62:f7:76:
                    02:1b:21:b1:2b:bd:06:7f:fc:8e:17:6b:06:7e:5e:
                    9c:11:6f:e1:85:58:45:29:1e:88:1b:48:a3:6d:6b:
                    a2:0a:d9:e9:31:b7:1f:75:f6:21:fa:1c:95:4a:53:
                    65:79:4c:ba:22:fa:82:56:ef:3e:fc:47:8b:45:da:
                    33:3d:6c:66:22:84:20:32:67:a0:de:a4:d3:c5:ff:
                    c3:39:51:83:3e:54:bc:4b:94:a5:51:55:be:a7:5e:
                    8d:40:87:d6:9e:cd:19:0b:f3:80:02:d9:18:cc:19:
                    c6:90:f4:76:f2:cd:d0:72:17:18:c0:94:42:f7:15:
                    f5:5b:9b:18:e4:45:ca:8b:74:7b:e8:df:61:8e:b9:
                    a4:8b:9c:ad:39:33:55:cc:66:04:77:7b:9e:12:97:
                    ef:29:f3:a6:b9:cd:3d:88:db:dc:2f:18:da:5b:ba:
                    54:5f:0f:b6:67:cc:ea:e1:8e:4c:c6:ce:e2:36:e9:
                    26:7d:01:bc:e3:f3:6b:3a:8f:f3:0f:21:33:92:9b:
                    bb:08:a0:71:8f:e0:3b:ed:ec:af:d3:69:d6:37:5e:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:16:91:32:83:BD:08:CD:70:CE:7F:12:E2:3C:39:B9:66:9B:10:90
            X509v3 Authority Key Identifier:
                keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/9B1ABC54486111E8AA9B1B45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:4c:be:ef:83:f5:c2:44:57:9d:82:a1:7e:a7:60:33:86:
         e7:15:62:80:62:54:88:93:ce:10:ca:50:23:8e:2d:59:78:bc:
         36:2e:2a:05:f8:56:ee:63:57:ef:57:d8:0f:93:70:f2:7b:b8:
         61:8f:c6:be:2b:71:a5:ab:a4:3c:f7:5e:5c:71:b7:50:1d:06:
         11:26:e1:ca:38:66:c2:8e:df:09:52:6a:fb:c7:6e:50:f7:3c:
         79:04:d2:92:e6:31:8a:fe:95:77:3b:fd:90:17:3e:6b:cc:b9:
         84:7b:cd:f7:3d:cd:63:40:34:f0:ff:a6:2c:df:d1:98:98:c8:
         af:15:c7:49:0c:9c:6c:ab:cf:df:a9:11:50:34:d0:cc:81:b8:
         28:9c:e5:41:89:f7:c2:41:4c:1f:55:13:98:37:31:28:cf:b8:
         70:70:af:63:dd:97:9b:00:85:72:b1:29:00:0b:4f:75:5f:74:
         ab:14:87:7f:22:0c:f6:a4:70:5c:92:4c:ef:81:26:d6:2a:f3:
         d0:e5:18:fd:ed:af:3f:0a:ef:e4:ee:ed:97:9b:12:ea:6e:c4:
         a1:b2:d8:2e:33:92:22:0e:e3:7e:d0:ae:2f:bb:a7:a7:a3:45:
         e0:f9:9a:1b:7e:af:0d:be:e9:05:c5:16:6f:14:c0:b4:b4:8e:
         85:8a:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:53 2026 by rpki-client