Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa
File:                     ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (raw, json)
Hash identifier:          zAMv0UmmZZaLA1G2HxjSfe2feXb463/dF3HBRSpyuhg=
Subject key identifier:   60:EA:38:B6:4B:20:FC:DB:D3:C3:63:67:A9:9A:DD:3B:68:21:B2:2A
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       07EE
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:09:15 +0000
ROA not before:           Mon 10 Mar 2025 21:42:02 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     0
IP address blocks:        202.0.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2030 (0x7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
        Validity
            Not Before: Mar 10 21:42:02 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a4488b-1873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:76:39:f2:a0:9d:3a:1d:fa:d2:05:69:82:
                    72:22:94:1e:c1:e3:a2:e7:78:68:20:4b:3a:75:54:
                    ae:7d:fb:08:ab:f4:fc:12:e8:c1:58:4c:e6:2e:f2:
                    b0:e5:bd:ee:e4:f9:31:d9:48:b6:fa:98:a9:59:89:
                    1e:87:27:06:8e:e4:ff:8d:50:fe:ab:5b:cd:01:99:
                    f2:94:47:d2:67:9b:3a:7e:9f:43:7a:3b:da:ce:b7:
                    00:41:3d:27:dd:34:17:8b:ae:24:2a:ee:e6:be:06:
                    30:dd:8c:3a:38:81:cb:c8:3a:b1:3a:5c:22:ce:20:
                    51:11:6e:bb:94:59:df:e8:16:c1:c0:74:92:db:8b:
                    1c:03:ae:b2:da:e8:36:6f:32:b3:06:3d:e4:40:42:
                    db:2c:7e:c8:6b:24:e0:7f:f1:95:c0:45:85:b4:70:
                    17:48:68:83:03:a3:51:08:c9:11:86:fb:33:24:df:
                    e6:56:6b:02:3d:78:62:66:14:38:a0:c4:6f:c1:2b:
                    71:c3:c9:ec:47:e8:d0:e8:12:c8:c7:f6:2e:b4:01:
                    9d:a8:56:b9:aa:4c:73:82:6f:d3:50:d3:7e:47:25:
                    92:88:d8:56:19:3e:23:cb:86:73:10:4b:42:94:09:
                    6c:38:26:ac:68:94:47:f5:93:4f:55:82:3d:12:e9:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EA:38:B6:4B:20:FC:DB:D3:C3:63:67:A9:9A:DD:3B:68:21:B2:2A
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:a3:1d:6a:b2:62:eb:18:70:ec:23:3b:2f:93:64:b5:95:
         ca:77:39:15:a0:39:d9:40:68:88:a3:3f:64:28:86:60:ac:23:
         0f:71:1d:44:57:d7:ff:8e:7d:95:6a:bf:2d:72:84:39:b2:37:
         30:fc:5a:3e:10:cd:e2:54:8c:fe:de:cf:23:52:36:2c:19:78:
         38:89:c2:2e:27:b8:1e:19:20:b2:d9:cd:34:b7:57:60:7d:f0:
         09:4a:aa:fe:12:c2:1d:78:e5:34:82:7e:e6:b2:3a:e9:de:12:
         ff:98:7f:06:32:79:19:9b:ac:fd:38:0c:61:94:a9:d4:23:e8:
         37:4a:3a:65:b3:80:c6:a3:a3:24:a3:e4:f2:77:5e:6f:a4:a8:
         3d:ed:2b:a0:f5:94:1f:5e:35:3c:cc:09:bf:67:65:79:30:7d:
         d5:51:21:c8:e7:1d:6c:3a:fa:89:65:3c:4e:a2:66:51:91:d7:
         bb:38:23:c1:1b:2b:22:b4:0c:f6:97:1c:07:bb:c4:d5:ee:ea:
         b4:bc:24:04:e1:fd:b3:68:92:a3:79:5b:1d:e5:22:a7:53:61:
         f2:9a:ad:49:74:94:22:6a:ff:94:7a:0d:36:25:3e:9a:06:ca:
         c4:4f:26:c1:a9:a6:c5:52:86:2a:00:95:97:df:2a:b6:93:69:
         37:d4:ec:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQwQkYxMTAvBgNVBAUTKEJFNDYzRkMxOTE5QjQxNDJCMjM4MjgxMzgyN0ZCNzE2
RDZFRTkyODMwHhcNMjUwMzEwMjE0MjAyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDg4Yi0xODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqV2OfKgnTod+tIFaYJyIpQeweOi53hoIEs6dVSuffsIq/T8EujBWEzmLvKw
5b3u5Pkx2Ui2+pipWYkehycGjuT/jVD+q1vNAZnylEfSZ5s6fp9DejvazrcAQT0n
3TQXi64kKu7mvgYw3Yw6OIHLyDqxOlwiziBREW67lFnf6BbBwHSS24scA66y2ug2
bzKzBj3kQELbLH7IayTgf/GVwEWFtHAXSGiDA6NRCMkRhvszJN/mVmsCPXhiZhQ4
oMRvwStxw8nsR+jQ6BLIx/YutAGdqFa5qkxzgm/TUNN+RyWSiNhWGT4jy4ZzEEtC
lAlsOCasaJRH9ZNPVYI9EukBAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGDqOLZL
IPzb08NjZ6ma3TtoIbIqMB8GA1UdIwQYMBaAFL5GP8GRm0FCsjgoE4J/txbW7pKD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBCRi8yN0I3QTI4NDI0
QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFVS3lPQ2dUZ24tM0Z0YnVr
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZrWV93WkdiUVVLeU9DZ1Rnbi0zRnRidWtvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDQwQkYvMjdCN0EyODQyNEMwMTFFQkI2MkI0Mzg3QzRGOUFFMDIvQUNFQkMyOUND
NUI5MTFFQkI0MUZBRjJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAygBoMA0GCSqGSIb3DQEBCwUAA4IBAQCgsKMdarJi6xhw7CM7L5Nk
tZXKdzkVoDnZQGiIoz9kKIZgrCMPcR1EV9f/jn2Var8tcoQ5sjcw/Fo+EM3iVIz+
3s8jUjYsGXg4icIuJ7geGSCy2c00t1dgffAJSqr+EsIdeOU0gn7msjrp3hL/mH8G
MnkZm6z9OAxhlKnUI+g3Sjpls4DGo6Mko+Tyd15vpKg97Sug9ZQfXjU8zAm/Z2V5
MH3VUSHI5x1sOvqJZTxOomZRkde7OCPBGysitAz2lxwHu8TV7uq0vCQE4f2zaJKj
eVsd5SKnU2Hymq1JdJQiav+Ueg02JT6aBsrETybBqabFUoYqAJWX3yq2k2k31OzD
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:33 2026 by rpki-client