Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
File:                     AEA7C9C0818911EA81577016C4F9AE02.roa (raw, json)
Hash identifier:          huSx5kpORQn0tkU4TRAPmVkFRxR4g/qvraibL4XJAo8=
Subject key identifier:   57:A2:99:20:C8:EA:F0:AC:DF:3D:BB:C1:89:9B:5A:2D:CF:60:73:BE
Certificate issuer:       /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial:       1924
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:27:50 +0000
ROA not before:           Tue 26 Aug 2025 16:23:20 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45352
IP address blocks:        212.8.230.0/24 maxlen: 24
                          212.8.231.0/24 maxlen: 24
                          212.8.254.0/24 maxlen: 24
                          212.8.255.0/24 maxlen: 24
                          212.92.102.0/24 maxlen: 24
                          212.92.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6436 (0x1924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
        Validity
            Not Before: Aug 26 16:23:20 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a422b6-6657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:29:4d:f6:91:30:b5:aa:b3:00:0e:1d:66:
                    d0:0e:99:20:e2:ec:76:13:57:7c:44:3e:8b:80:10:
                    88:0e:8f:ec:ad:2a:34:73:8b:be:4a:10:eb:03:74:
                    d1:3d:1e:c9:1f:4c:6c:43:10:c1:bd:f7:43:fc:03:
                    36:bd:03:75:3a:db:90:2f:2c:9c:aa:3e:fc:c0:e3:
                    08:88:a1:3e:9b:d8:60:e6:ae:9a:47:4b:9e:34:48:
                    0e:1f:d7:2b:3d:ee:de:c3:20:f0:35:b0:c0:24:3d:
                    a9:25:97:23:1a:18:71:65:b2:4e:cf:c7:d1:54:85:
                    99:4d:82:ab:71:4c:ff:8f:83:57:0e:96:50:9c:71:
                    ed:fe:9d:3e:29:fd:f8:36:e8:bf:34:5b:f4:1f:da:
                    18:b2:65:69:dd:80:28:80:fa:ec:f3:b4:6f:0f:46:
                    10:50:71:ce:59:fe:54:a6:5f:0c:b6:e5:ce:91:a4:
                    9b:62:0e:4b:9f:7b:04:aa:aa:7e:20:b0:83:b3:ed:
                    82:29:36:87:60:c3:70:e8:13:de:58:cc:7d:57:cd:
                    07:df:a4:5d:b2:e0:15:ad:10:66:5d:f1:77:f4:5b:
                    fa:3f:fa:dc:30:39:bf:74:75:23:48:59:c8:f2:fa:
                    60:c2:a7:6a:c5:26:5a:f0:44:20:49:a5:3c:b4:fc:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A2:99:20:C8:EA:F0:AC:DF:3D:BB:C1:89:9B:5A:2D:CF:60:73:BE
            X509v3 Authority Key Identifier:
                keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.8.230.0/23
                  212.8.254.0/23
                  212.92.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:a9:00:7d:e3:3f:79:e5:b6:19:74:91:36:eb:4e:78:c7:10:
         fc:d0:e1:a0:43:1a:3f:7e:54:c5:df:c6:9e:ab:23:1e:4b:1b:
         33:64:c3:a8:b4:59:95:26:66:b6:db:39:00:32:54:00:9a:96:
         ae:14:d8:c9:ae:88:1a:ff:e7:60:21:e8:6d:09:75:17:2f:81:
         e1:e5:71:f3:d4:a5:86:73:4f:e3:aa:8e:eb:50:b3:10:1b:97:
         45:43:4f:c2:78:33:3b:a1:de:f6:c5:73:ff:82:c1:18:32:2e:
         07:54:f5:87:16:72:6f:1b:6c:4a:bf:dd:db:d2:a3:2a:aa:2f:
         09:00:22:90:cf:6d:2a:a6:f4:85:45:36:49:1c:41:98:59:84:
         aa:a0:4f:a0:77:3b:92:1f:7d:c3:43:e3:23:6d:ab:8f:7f:c2:
         63:7b:88:8a:a9:53:1a:66:11:d4:7b:57:9b:b3:35:9a:80:7f:
         82:a3:63:e1:43:fa:bb:ee:f8:e6:98:e2:e4:54:a6:0d:b3:1a:
         5f:7d:5f:f9:08:04:7a:48:45:d3:62:2b:6e:24:39:e6:39:89:
         6a:be:a1:f1:9b:ec:df:ac:a3:3d:34:72:29:29:93:5b:4d:4d:
         8a:7e:3d:40:99:1b:cb:e0:01:55:ad:9e:61:ec:8f:8b:3e:49:
         2a:85:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:36 2026 by rpki-client