Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/330CB090A69A11F1B62FFE123411F970.roa
File:                     330CB090A69A11F1B62FFE123411F970.roa (raw, json)
Hash identifier:          MdN5x9COPAkOWErVD4b+gG1Gk95Xd26pJgYkE2yZ/Uo=
Subject key identifier:   19:1F:9E:6F:A0:FF:CA:65:A2:6E:2B:64:6D:9A:0F:76:E1:36:79:C0
Certificate issuer:       /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial:       367F
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/330CB090A69A11F1B62FFE123411F970.roa
Signing time:             Wed 02 Sep 2026 06:47:44 +0000
ROA not before:           Wed 02 Sep 2026 06:47:44 +0000
ROA not after:            Mon 31 Mar 2031 00:00:00 +0000
asID:                     24555
IP address blocks:        220.247.144.0/20 maxlen: 22
                          2001:df9::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13951 (0x367f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
        Validity
            Not Before: Sep  2 06:47:44 2026 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=6a97c690-55c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:50:b7:a3:b6:f6:3c:7b:a5:66:8c:a1:03:
                    ab:66:02:7f:55:14:c3:5f:b9:6a:71:eb:22:c4:68:
                    fa:e8:fb:e8:84:f1:f5:c9:f4:91:8d:36:ea:82:a7:
                    a3:0e:b3:b5:67:52:74:0e:57:03:65:dc:99:6f:d4:
                    63:32:71:db:f2:35:3c:ac:c5:e4:9f:25:fe:ea:9f:
                    da:56:da:76:d4:df:63:d3:57:53:6d:b1:49:f8:fc:
                    3f:90:05:b0:a5:56:e9:94:4e:19:74:00:01:46:72:
                    6b:dd:6a:ea:7c:87:1d:2c:e9:61:26:ad:25:4e:0a:
                    b3:1c:34:fc:01:ac:db:ee:8b:6a:55:4f:ad:dd:18:
                    19:42:c3:0e:8e:d2:a3:06:dd:3c:a0:72:17:d3:88:
                    c0:38:02:2b:29:4c:2f:34:fc:97:b3:50:4c:b8:dc:
                    be:04:04:2b:ef:01:b5:97:19:6c:0c:0b:55:97:a2:
                    53:2a:61:7a:ce:70:a3:91:12:60:a9:12:0b:f6:0f:
                    2a:70:d4:f0:1e:42:52:ce:54:10:0a:9a:7e:24:3a:
                    b3:6f:dd:96:af:ed:97:0f:d4:b0:60:37:af:fa:27:
                    3a:fe:14:a2:c7:77:e8:f5:c3:ed:43:ee:36:d7:28:
                    44:bf:7b:32:d6:a0:cc:ac:4d:be:75:8d:7d:f5:cc:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1F:9E:6F:A0:FF:CA:65:A2:6E:2B:64:6D:9A:0F:76:E1:36:79:C0
            X509v3 Authority Key Identifier:
                keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/330CB090A69A11F1B62FFE123411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.247.144.0/20
                IPv6:
                  2001:df9::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:2e:eb:1b:0c:34:24:5e:44:0b:ea:d0:f2:02:41:eb:f2:91:
         03:64:2f:1f:32:95:67:62:63:34:77:68:34:04:4a:d6:5a:2b:
         88:7a:b5:02:5a:a1:c3:82:27:f0:9f:af:33:ca:0a:6c:86:d0:
         c4:41:a8:46:0f:47:48:cf:ff:b6:04:e4:b7:0c:a5:51:22:d9:
         0a:0a:6e:3b:d8:c3:cd:14:40:4e:f7:9f:e4:0b:f4:f3:47:fc:
         e2:84:10:5f:66:d6:6b:cf:c4:c6:0b:41:64:1c:9d:ff:f9:b5:
         49:7d:41:76:dc:ad:a8:a5:7e:53:d4:23:2d:4d:6b:46:99:8e:
         89:a3:cc:6d:e3:69:b2:b0:4e:1d:44:d1:85:24:15:5e:d8:be:
         14:3f:59:fe:54:26:e6:49:91:bb:84:e3:f0:36:6b:67:ef:50:
         21:11:7e:a1:bd:77:9d:a9:e2:cc:9a:72:1e:18:8c:bd:4e:f5:
         fa:f1:3a:d4:28:06:dd:ed:20:e6:90:e6:55:c5:d7:78:c2:49:
         38:00:e5:08:a1:42:34:96:1d:e7:15:ab:92:ae:ac:76:63:10:
         41:24:9c:e8:7c:21:42:b8:31:a9:a9:81:0d:d9:37:5a:3f:05:
         71:eb:3f:62:d1:01:7a:19:26:95:f9:07:37:ee:28:df:1a:1e:
         b2:2b:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:47 2026 by rpki-client