Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/2FAD450250E411F0A6B4892AC4F9AE02.roa
File:                     2FAD450250E411F0A6B4892AC4F9AE02.roa (raw, json)
Hash identifier:          nSGDtntTI10V99CiLXg25N7qck9wAUFqZHUSobcXLhM=
Subject key identifier:   B4:75:D8:DF:95:4F:15:DF:5B:1F:71:8D:92:07:7C:05:9F:84:97:7F
Certificate issuer:       /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial:       012D
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/2FAD450250E411F0A6B4892AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:24:58 +0000
ROA not before:           Sun 01 Mar 2026 07:24:58 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     36352
IP address blocks:        121.46.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
        Validity
            Not Before: Mar  1 07:24:58 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3e9ca-432a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:e7:1c:51:78:31:96:b8:40:e1:99:6c:d9:
                    4b:d1:59:78:01:8a:95:83:8c:3a:1c:6d:de:7d:2d:
                    18:60:0c:4b:59:68:b7:07:c5:2e:d6:88:9a:80:ab:
                    0e:3a:ed:6a:ae:d7:47:c7:c4:e3:f3:1d:23:e4:68:
                    29:fa:a4:95:62:7f:89:1b:72:c7:cf:30:0e:cf:3f:
                    78:16:c4:ee:fa:b3:5e:1a:10:c3:6a:3b:6d:6c:01:
                    e8:ce:da:84:f3:2f:1c:82:d2:eb:9a:00:9a:70:8f:
                    5f:0e:53:24:d6:77:46:87:c2:ee:f9:78:1b:14:42:
                    55:9b:c2:06:8c:5e:5f:75:8f:0d:75:40:d3:4a:a1:
                    c7:04:6b:9e:05:76:2d:87:cb:de:3f:7a:79:4f:74:
                    2b:42:cf:48:cb:58:52:24:c8:d7:72:30:ef:8e:cf:
                    f0:df:72:13:c2:2c:ec:74:5a:25:04:fc:92:f3:f1:
                    01:82:aa:38:cd:e8:3f:b6:2f:14:97:0e:1c:28:d9:
                    6f:4f:47:19:44:5b:40:b1:28:3c:7d:ab:dc:b9:3b:
                    21:a1:59:bc:bd:c7:7a:59:43:70:73:95:27:ee:7c:
                    ab:3a:d2:bf:4c:cf:47:40:25:bd:74:17:9f:05:ea:
                    c9:dc:ad:5d:3c:77:d3:e8:6d:60:c7:00:27:56:25:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:75:D8:DF:95:4F:15:DF:5B:1F:71:8D:92:07:7C:05:9F:84:97:7F
            X509v3 Authority Key Identifier:
                keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/2FAD450250E411F0A6B4892AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:63:ec:2e:76:01:33:14:b1:05:e0:bb:d1:4a:72:32:d9:93:
         33:c2:31:11:60:01:e7:d3:d2:94:34:90:bd:33:3f:f9:5d:35:
         f4:06:88:ee:c0:db:b8:69:8b:b3:bb:ca:43:57:2b:9d:af:44:
         4f:fd:6f:e0:c0:41:51:bc:d7:39:31:6c:a4:5d:70:f9:8c:a0:
         1f:98:1a:89:81:1c:3e:bd:2e:ce:fb:12:97:d4:2e:95:78:2f:
         d2:56:27:3a:4d:87:aa:73:90:c4:a5:5d:08:f6:88:d5:3b:bd:
         11:c2:6b:e9:5e:db:62:ae:15:56:b8:a9:7b:bf:f2:e0:9f:7f:
         34:c1:85:6f:b0:83:0e:bd:b8:ce:ab:22:8f:5d:17:b5:86:cd:
         2d:8d:1b:83:e4:01:51:98:3c:6f:0a:e2:ef:f2:12:9d:3e:c0:
         76:bc:62:88:95:f3:35:6e:c0:93:57:9f:76:ee:61:bd:6d:5a:
         61:92:9e:26:bb:b5:07:ad:66:c2:06:5c:c3:c4:b6:fe:20:0d:
         d7:60:d4:c3:a7:84:40:bc:0a:5d:e4:b2:5c:a8:ef:df:fa:7e:
         81:a5:70:dc:96:a0:9e:98:f1:8d:64:30:07:c2:db:ff:af:6d:
         dd:55:a3:be:62:e4:34:bb:7a:8a:6d:22:8f:f2:f7:1a:7b:75:
         44:d9:df:ac
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y5RjUxMTAvBgNVBAUTKDg3QjFFRTNFOUVFMkFEMUExMTNGMjdBMkE1NEUyQzBC
OEQ1QUZCMzQwHhcNMjYwMzAxMDcyNDU4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTljYS00MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4znHFF4MZa4QOGZbNlL0Vl4AYqVg4w6HG3efS0YYAxLWWi3B8Uu1oiagKsO
Ou1qrtdHx8Tj8x0j5Ggp+qSVYn+JG3LHzzAOzz94FsTu+rNeGhDDajttbAHoztqE
8y8cgtLrmgCacI9fDlMk1ndGh8Lu+XgbFEJVm8IGjF5fdY8NdUDTSqHHBGueBXYt
h8veP3p5T3QrQs9Iy1hSJMjXcjDvjs/w33ITwizsdFolBPyS8/EBgqo4zeg/ti8U
lw4cKNlvT0cZRFtAsSg8favcuTshoVm8vcd6WUNwc5Un7nyrOtK/TM9HQCW9dBef
BerJ3K1dPHfT6G1gxwAnViXb0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLR12N+V
TxXfWx9xjZIHfAWfhJd/MB8GA1UdIwQYMBaAFIex7j6e4q0aET8noqVOLAuNWvs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlGNS84QjkyNkQyQTVC
OUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJSb1JQeWVpcFU0c0M0MWEt
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3SHVQcDdpclJvUlB5ZWlwVTRzQzQxYS16US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Y5RjUvOEI5MjZEMkE1QjlFMTFFRjhCRjkxNzVCQzRGOUFFMDIvMkZBRDQ1MDI1
MEU0MTFGMEE2QjQ4OTJBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCeS5QMA0GCSqGSIb3DQEBCwUAA4IBAQAXY+wudgEzFLEF4LvRSnIy
2ZMzwjERYAHn09KUNJC9Mz/5XTX0BojuwNu4aYuzu8pDVyudr0RP/W/gwEFRvNc5
MWykXXD5jKAfmBqJgRw+vS7O+xKX1C6VeC/SVic6TYeqc5DEpV0I9ojVO70Rwmvp
XttirhVWuKl7v/Lgn380wYVvsIMOvbjOqyKPXRe1hs0tjRuD5AFRmDxvCuLv8hKd
PsB2vGKIlfM1bsCTV5927mG9bVphkp4mu7UHrWbCBlzDxLb+IA3XYNTDp4RAvApd
5LJcqO/f+n6BpXDclqCemPGNZDAHwtv/r23dVaO+YuQ0u3qKbSKP8vcae3VE2d+s
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:23 2026 by rpki-client