Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/4944017C8FAF11F0B59F0948C4F9AE02.roa
File:                     4944017C8FAF11F0B59F0948C4F9AE02.roa (raw, json)
Hash identifier:          LH5rCnW4AlRTA7oXpdl4war9anlv1eQFsMx7zEz8aDs=
Subject key identifier:   FC:1D:DB:15:8F:F5:25:AC:EB:76:E5:68:05:7E:FF:4F:38:F3:AB:77
Certificate issuer:       /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial:       0954
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/4944017C8FAF11F0B59F0948C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:41:44 +0000
ROA not before:           Fri 12 Sep 2025 08:05:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153259
IP address blocks:        164.90.73.0/24 maxlen: 24
                          164.90.97.0/24 maxlen: 24
                          164.90.104.0/24 maxlen: 24
                          164.90.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388 (0x954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
        Validity
            Not Before: Sep 12 08:05:46 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47a58-783a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:4e:59:51:bb:97:d4:21:38:f5:d4:d5:5c:
                    d1:9b:df:be:15:af:08:20:f5:a6:4f:04:b4:6a:c8:
                    b4:6b:b8:5d:a9:88:d2:9f:2e:dc:84:a8:dd:35:4a:
                    9a:ec:42:a9:54:05:f2:55:a7:74:7e:56:ae:fc:45:
                    b0:09:9d:09:92:0d:e5:43:6b:ff:53:91:85:15:32:
                    dd:c8:2e:77:5a:93:4d:37:af:40:30:dc:e5:13:ca:
                    d1:91:05:a2:bc:97:f9:a8:65:e7:c2:e7:af:78:60:
                    32:01:ab:60:33:82:b2:6e:d5:ac:4b:7b:99:ce:59:
                    e0:9f:b2:f7:4e:b8:09:08:29:27:cf:88:66:32:86:
                    38:a7:0c:48:14:87:43:4d:7e:7b:a5:60:37:95:d4:
                    cc:e6:8a:9d:de:b8:ff:82:b8:fd:41:e7:7f:24:c8:
                    04:bd:dd:b0:9c:e7:a3:55:85:06:a3:1e:0d:c2:af:
                    77:59:1f:1f:22:3a:98:d1:1a:a3:c3:70:b1:af:64:
                    81:ee:f3:37:d5:30:99:8c:4e:22:69:7e:a5:64:0e:
                    b7:29:5f:6a:b9:d1:4c:0f:e7:34:87:0c:75:89:d9:
                    e2:b8:ac:9b:46:55:a6:3d:be:9e:bf:64:8b:ae:6e:
                    98:e9:3c:90:c4:b5:60:e6:ef:87:ae:52:92:52:90:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1D:DB:15:8F:F5:25:AC:EB:76:E5:68:05:7E:FF:4F:38:F3:AB:77
            X509v3 Authority Key Identifier:
                keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/4944017C8FAF11F0B59F0948C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.90.73.0/24
                  164.90.97.0/24
                  164.90.104.0/24
                  164.90.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:91:ca:30:1b:58:08:59:ca:89:7b:86:5e:09:e7:c3:76:19:
         67:3d:c8:55:ce:b2:ae:84:5b:37:67:4e:d0:cb:f1:19:c2:7f:
         5f:c9:4c:4d:37:71:52:e5:b2:24:27:a4:d1:a4:91:15:c0:62:
         3c:97:22:df:27:52:18:42:07:04:41:a1:06:84:f8:c8:62:58:
         56:75:17:b1:1f:cb:49:ed:9a:36:ce:fb:db:1d:d3:70:0b:40:
         28:e3:87:27:96:43:ee:93:57:5f:76:08:04:57:21:b5:7c:f4:
         6f:ce:10:39:79:b7:8c:f1:a8:90:2c:b1:21:3e:7d:88:a9:18:
         c6:d8:47:b3:44:67:14:87:96:f5:70:cd:78:0b:a7:9c:ec:fb:
         80:26:00:73:93:cf:43:9d:76:77:f8:b0:b3:e1:b1:2d:a5:0f:
         2a:80:02:98:78:bc:c0:f6:45:7d:60:d5:0e:e7:91:1a:b4:0b:
         81:b8:65:e3:3c:82:4a:be:8b:ee:4f:b0:60:2d:df:93:d6:86:
         6e:f2:30:65:8d:9b:cc:5d:bf:a5:ac:e4:f9:88:92:05:08:37:
         d0:3c:e7:b6:ac:fc:55:12:29:46:f5:88:78:93:e5:93:a5:c9:
         6d:30:6c:65:3f:69:c7:10:b1:fe:cb:07:4e:3f:1d:45:39:84:
         66:e1:7f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:16 2026 by rpki-client