Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/35941A5CF49D11EFBD8ACC0EC4F9AE02.roa
File:                     35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (raw, json)
Hash identifier:          wQKEuHToTuUnv81JQA3xZAcXZQ1kmn5Px72o26Nat+k=
Subject key identifier:   44:F5:C9:CB:D4:C4:8C:D8:28:AF:BE:74:CE:86:B1:81:0C:A5:A2:A0
Certificate issuer:       /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial:       01DC
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/35941A5CF49D11EFBD8ACC0EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:00:50 +0000
ROA not before:           Fri 21 Mar 2025 04:09:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     7575
IP address blocks:        192.245.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
        Validity
            Not Before: Mar 21 04:09:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a41c61-3863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:7d:09:d0:2f:bb:8f:26:35:a1:f5:26:00:
                    71:15:f8:3e:6a:65:f6:8c:9f:43:dc:66:f3:23:7e:
                    98:2b:cf:92:93:36:9f:f8:b0:d5:71:0e:55:64:78:
                    7a:44:c6:b3:02:4a:fb:d5:ea:19:60:54:0c:b5:0c:
                    e7:ee:82:ff:30:48:99:ee:6b:7d:30:74:12:a6:43:
                    3b:ad:78:fe:e6:d9:44:18:64:82:c9:18:f8:11:6a:
                    c8:ac:78:00:3f:17:26:f1:14:db:63:d4:49:f0:b7:
                    b2:e1:d6:be:cb:2a:c4:da:08:e2:5e:c1:3b:4f:df:
                    be:eb:da:58:cd:92:9c:4a:02:ad:f9:89:09:44:a2:
                    eb:60:05:58:3d:d1:03:d3:75:75:20:a5:53:38:95:
                    0c:47:3c:cb:e4:67:39:75:1c:a0:08:72:a4:8d:bd:
                    36:59:fd:a9:f8:0d:70:fc:c5:d5:6d:a0:af:92:98:
                    09:5d:5e:f5:7f:92:7f:56:3a:25:8e:8e:96:9e:8b:
                    af:45:dd:4a:4c:49:9e:70:dc:05:bf:fe:22:39:27:
                    80:f7:af:d7:1f:92:11:8b:99:9c:d3:ca:fd:86:0e:
                    82:3e:01:46:f5:7a:5c:d9:ea:33:27:ef:73:22:cc:
                    03:5f:74:3e:e6:85:b9:7d:ec:fc:af:a3:23:cc:90:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:C9:CB:D4:C4:8C:D8:28:AF:BE:74:CE:86:B1:81:0C:A5:A2:A0
            X509v3 Authority Key Identifier:
                keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/35941A5CF49D11EFBD8ACC0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:36:c0:52:0e:95:58:0a:30:f9:24:07:e5:38:68:ba:36:
         03:dd:c0:51:7a:08:a1:ad:72:0e:e3:47:f1:b9:74:c0:4a:37:
         a6:7f:07:a9:b5:56:58:0c:87:ff:83:dc:75:f9:fa:2b:5a:e0:
         02:1d:99:ac:95:90:a6:5d:47:d4:5a:31:b7:b7:99:a5:37:9e:
         f1:4e:81:03:d1:54:0c:0e:50:43:25:39:d1:10:b0:00:d1:1d:
         c3:b6:93:da:15:af:32:6f:57:b0:b3:e6:33:ed:a9:68:ab:60:
         2f:3b:92:6c:d8:ca:7c:b6:ba:2b:79:32:ea:e3:18:13:94:43:
         e1:54:90:b6:27:2e:d0:dd:cf:1c:be:ed:52:4e:36:a3:a6:61:
         06:fb:7c:c1:d3:aa:ce:dd:86:ae:16:42:66:7c:a2:a4:b2:e3:
         4f:fb:3e:c7:82:91:5a:97:1c:e8:bd:7c:43:44:94:5c:a7:6b:
         59:fd:20:f7:90:d3:19:b0:8e:f4:3a:2b:ce:aa:3a:3c:44:8f:
         db:d8:20:a1:ad:b4:d7:44:9b:b6:16:ac:fb:7b:8e:0f:c5:5d:
         72:7f:21:88:71:16:b7:e6:b0:2a:56:9a:61:4f:3d:45:bf:c4:
         2f:22:f5:71:a7:72:3f:96:65:80:50:80:82:7d:fd:65:e5:e0:
         9d:31:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:45 2026 by rpki-client