Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/199F588CE21711EE913F3E62C4F9AE02.roa
File:                     199F588CE21711EE913F3E62C4F9AE02.roa (raw, json)
Hash identifier:          ddXLbsnNUJaK9PsrG7ysG03ljzK1G3ktx48YRWrpG8U=
Subject key identifier:   41:13:DA:A9:F8:51:AA:B2:CC:99:79:BB:28:0E:6A:B6:73:AA:B1:AE
Certificate issuer:       /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial:       0178
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/199F588CE21711EE913F3E62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:04:50 +0000
ROA not before:           Tue 29 Apr 2025 05:42:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139808
IP address blocks:        202.37.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
                          rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
        Validity
            Not Before: Apr 29 05:42:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a41d52-c1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:d2:1e:72:06:05:b9:63:9c:a7:ca:3b:1c:
                    11:f9:b3:64:05:9d:01:b1:e7:c3:5c:7a:7b:12:54:
                    b8:71:db:00:54:b8:cf:6f:e6:77:0a:2a:7a:90:1c:
                    8b:a2:bf:d9:08:a4:8b:49:3a:a2:67:3a:72:f5:c7:
                    17:aa:ae:cd:73:a2:8b:7a:40:5a:82:64:9c:4c:fa:
                    02:d5:08:15:39:4b:05:c3:57:8b:ca:58:9c:d3:f0:
                    3c:91:2d:4b:c9:02:75:96:f0:76:aa:60:26:32:cd:
                    fb:57:19:09:fb:75:84:67:92:c7:07:08:c7:9a:ef:
                    df:16:d3:63:81:13:e1:46:1a:7d:e9:25:eb:ce:aa:
                    8d:9c:f8:8e:ab:3f:f3:3d:c5:5b:da:02:9e:19:4d:
                    a6:00:f2:21:fb:c0:88:52:ae:c2:e1:50:8f:28:2a:
                    d9:d6:71:91:50:8b:0a:df:bc:6e:07:d3:27:54:7f:
                    6d:81:e6:9d:33:af:fd:03:de:c5:5c:a2:2e:33:80:
                    8e:dc:d0:a1:9f:40:3a:06:6b:9d:6f:9f:85:0e:87:
                    6e:6c:f6:5d:ef:77:b8:87:20:f1:7e:85:94:70:6a:
                    02:18:8b:e1:4c:0e:83:e5:54:f4:a9:ac:b1:56:0f:
                    2b:9a:0f:ea:47:ba:01:f4:78:09:53:ec:21:81:36:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:13:DA:A9:F8:51:AA:B2:CC:99:79:BB:28:0E:6A:B6:73:AA:B1:AE
            X509v3 Authority Key Identifier:
                keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/199F588CE21711EE913F3E62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a1:de:bf:74:f8:0c:42:62:27:79:62:34:14:3c:32:09:b2:
         40:59:22:cb:99:c0:2e:4e:dd:63:cd:ed:77:89:91:7a:ad:e5:
         19:72:30:35:a0:c1:d9:74:44:16:d9:23:71:2f:2f:00:e8:4c:
         a2:f2:13:81:c5:61:05:db:49:91:cd:c2:5f:73:dc:be:42:64:
         f0:8e:7f:04:f0:fc:71:da:12:63:8a:af:82:3d:78:ce:c1:d5:
         3e:46:d4:e1:24:f2:0f:a8:cd:c2:99:7f:ed:43:4e:0c:97:b9:
         55:6c:35:44:ca:0d:4f:bb:1c:cb:b6:5b:d7:a1:4d:fd:75:59:
         ad:8f:4e:a6:ed:07:c0:98:0c:92:c6:26:f0:07:d8:b2:74:a0:
         b8:dc:f0:09:f5:00:59:70:55:b0:b2:f0:b5:ee:1a:2a:77:81:
         9d:b3:db:bf:80:2c:80:93:05:0b:b4:34:b8:51:f7:1c:72:89:
         53:19:1a:d8:c0:f8:af:6a:bb:44:33:7d:53:af:75:16:cd:a7:
         fd:0c:8f:fb:a8:c7:03:d8:3f:27:c5:e4:03:ec:0e:3a:0d:9e:
         c1:5d:07:d8:be:e5:72:39:ac:e4:06:d9:e9:30:90:a2:ab:4a:
         bc:f8:f3:a8:58:fa:ce:a5:b7:1b:2d:ac:9f:64:e0:af:a7:62:
         3f:9a:90:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy
OTFDNDdCQUYwHhcNMjUwNDI5MDU0MjA1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWQ1Mi1jMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQrSHnIGBbljnKfKOxwR+bNkBZ0BsefDXHp7ElS4cdsAVLjPb+Z3Cip6kByL
or/ZCKSLSTqiZzpy9ccXqq7Nc6KLekBagmScTPoC1QgVOUsFw1eLylic0/A8kS1L
yQJ1lvB2qmAmMs37VxkJ+3WEZ5LHBwjHmu/fFtNjgRPhRhp96SXrzqqNnPiOqz/z
PcVb2gKeGU2mAPIh+8CIUq7C4VCPKCrZ1nGRUIsK37xuB9MnVH9tgeadM6/9A97F
XKIuM4CO3NChn0A6Bmudb5+FDodubPZd73e4hyDxfoWUcGoCGIvhTA6D5VT0qayx
Vg8rmg/qR7oB9HgJU+whgTY9LQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEET2qn4
UaqyzJl5uygOarZzqrGuMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx
MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkYyRkQvNjM4RDYyQTBFMTEyMTFFRUFDNzg2MTM4QzRGOUFFMDIvMTk5RjU4OENF
MjE3MTFFRTkxM0YzRTYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyiXYMA0GCSqGSIb3DQEBCwUAA4IBAQAhod6/dPgMQmIneWI0FDwy
CbJAWSLLmcAuTt1jze13iZF6reUZcjA1oMHZdEQW2SNxLy8A6Eyi8hOBxWEF20mR
zcJfc9y+QmTwjn8E8Pxx2hJjiq+CPXjOwdU+RtThJPIPqM3CmX/tQ04Ml7lVbDVE
yg1PuxzLtlvXoU39dVmtj06m7QfAmAySxibwB9iydKC43PAJ9QBZcFWwsvC17hoq
d4Gds9u/gCyAkwULtDS4UfcccolTGRrYwPivartEM31Tr3UWzaf9DI/7qMcD2D8n
xeQD7A46DZ7BXQfYvuVyOazkBtnpMJCiq0q8+POoWPrOpbcbLayfZOCvp2I/mpDs
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:36 2026 by rpki-client