Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/06FA65A81F2711EF98DA2926C4F9AE02.roa
File:                     06FA65A81F2711EF98DA2926C4F9AE02.roa (raw, json)
Hash identifier:          NZ41GePO+wVrHhL385esVXgxdvkRTvbJf+OBmKNcFbQ=
Subject key identifier:   A5:85:16:AF:A4:87:30:A2:05:14:09:97:C3:EE:B2:C1:D2:EB:C6:4E
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       0198
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/06FA65A81F2711EF98DA2926C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:13:34 +0000
ROA not before:           Wed 17 Dec 2025 04:23:21 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     205019
IP address blocks:        203.56.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: Dec 17 04:23:21 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a465ae-bdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:5f:ed:f9:94:ab:a6:00:67:7c:ae:42:05:
                    20:f8:37:8c:17:0f:50:c8:f2:41:cb:45:d3:fd:88:
                    cd:6a:e7:a7:33:bb:f6:9c:7d:f1:2c:d0:49:10:67:
                    ec:68:17:88:b2:b6:cb:7a:b3:f6:e7:bf:fc:cc:43:
                    7c:19:3e:4b:14:b2:6f:0e:ce:63:ed:0b:93:58:23:
                    e4:b5:17:11:d7:e8:35:df:c3:b6:03:4e:1d:42:5b:
                    70:06:c7:8d:a0:a4:50:74:02:69:a5:3b:97:e9:df:
                    74:d3:76:ef:c6:be:f1:fe:85:40:18:62:7d:43:12:
                    06:44:01:1a:73:05:91:e0:70:03:ba:2b:f2:3e:8f:
                    9d:45:df:1a:bf:c2:cb:5e:43:7d:65:da:05:59:46:
                    cd:32:9b:c0:2a:fb:4d:76:11:86:93:dc:e7:5e:aa:
                    6a:6e:b9:ed:55:50:09:66:b9:6e:42:60:86:d2:42:
                    16:90:83:ec:d7:77:59:f0:52:6c:f6:67:38:26:2b:
                    48:aa:16:15:9f:f3:df:fb:c9:fa:f2:35:50:1a:60:
                    b1:0a:56:29:e6:58:ab:3b:ce:33:20:89:d4:a3:17:
                    86:9f:bf:5a:9c:39:80:2e:77:ce:dc:1d:a3:5f:a4:
                    ac:81:98:9b:a2:32:27:b4:96:98:e0:c6:d6:21:f1:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:85:16:AF:A4:87:30:A2:05:14:09:97:C3:EE:B2:C1:D2:EB:C6:4E
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/06FA65A81F2711EF98DA2926C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ed:02:e2:cb:c0:f9:b2:8d:32:2a:c0:aa:f9:c4:26:b7:87:
         b1:5c:ea:80:8e:10:8a:d4:a0:d2:f8:78:14:ff:d1:ea:57:88:
         3d:27:3e:23:e0:d9:fe:15:0f:92:e6:32:f4:9f:ee:b7:84:9f:
         c4:ea:89:03:63:3b:e1:01:14:9e:96:42:47:82:ba:53:31:67:
         c0:c9:0d:9c:fd:01:b2:63:45:d0:1e:3a:24:2e:80:4a:28:2f:
         e2:40:b4:b7:d6:e6:1f:7d:58:83:67:6b:09:03:3d:bf:91:5c:
         d2:9f:a4:6e:2d:25:da:f0:bb:e0:1c:15:fc:74:fb:c6:4b:71:
         39:96:a9:75:bf:b4:d1:87:c7:41:0d:60:ea:ba:45:2b:cc:db:
         b5:38:00:7c:84:b0:ed:5f:1d:df:8f:74:5e:d3:4d:77:1d:30:
         aa:ed:ad:39:06:11:28:33:da:bf:72:76:2d:44:9c:c4:8a:23:
         56:46:f6:91:af:b3:a2:08:f4:66:3d:70:1c:9d:8e:19:b0:0e:
         24:d6:ad:0a:3b:57:e9:bc:95:da:85:bf:a7:11:62:17:22:27:
         81:1a:b1:a2:f1:d4:65:5e:1e:df:c3:dd:c3:35:25:c9:4f:72:
         ea:b6:aa:db:fe:20:ba:42:5b:b3:bd:52:f4:95:b1:bd:c4:e5:
         c8:bb:be:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB
REMzOEE0OEUwHhcNMjUxMjE3MDQyMzIxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjVhZS1iZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApiVf7fmUq6YAZ3yuQgUg+DeMFw9QyPJBy0XT/YjNauenM7v2nH3xLNBJEGfs
aBeIsrbLerP257/8zEN8GT5LFLJvDs5j7QuTWCPktRcR1+g138O2A04dQltwBseN
oKRQdAJppTuX6d9003bvxr7x/oVAGGJ9QxIGRAEacwWR4HADuivyPo+dRd8av8LL
XkN9ZdoFWUbNMpvAKvtNdhGGk9znXqpqbrntVVAJZrluQmCG0kIWkIPs13dZ8FJs
9mc4JitIqhYVn/Pf+8n68jVQGmCxClYp5lirO84zIInUoxeGn79anDmALnfO3B2j
X6SsgZibojIntJaY4MbWIfGzOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKWFFq+k
hzCiBRQJl8PussHS68ZOMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF
RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0M3MTEvQzdEMUIwNTQxRUUzMTFFRjkwRDIxMjM0QzRGOUFFMDIvMDZGQTY1QTgx
RjI3MTFFRjk4REEyOTI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyzhRMA0GCSqGSIb3DQEBCwUAA4IBAQB37QLiy8D5so0yKsCq+cQm
t4exXOqAjhCK1KDS+HgU/9HqV4g9Jz4j4Nn+FQ+S5jL0n+63hJ/E6okDYzvhARSe
lkJHgrpTMWfAyQ2c/QGyY0XQHjokLoBKKC/iQLS31uYffViDZ2sJAz2/kVzSn6Ru
LSXa8LvgHBX8dPvGS3E5lql1v7TRh8dBDWDqukUrzNu1OAB8hLDtXx3fj3Re0013
HTCq7a05BhEoM9q/cnYtRJzEiiNWRvaRr7OiCPRmPXAcnY4ZsA4k1q0KO1fpvJXa
hb+nEWIXIieBGrGi8dRlXh7fw93DNSXJT3Lqtqrb/iC6QluzvVL0lbG9xOXIu76e
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:20 2026 by rpki-client