Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F721F6B08C5611E792848B4AC4F9AE02.roa
File:                     F721F6B08C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier:          9gIlVUVnVNmYm0bLzGl5b38yoqx/v/vATXeAALoSuAs=
Subject key identifier:   E5:57:52:A7:C6:70:A2:28:CC:D2:1D:8A:64:21:F5:8C:20:5F:A2:74
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28AC
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F721F6B08C5611E792848B4AC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:20:19 +0000
ROA not before:           Tue 31 Mar 2026 16:20:19 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     55413
IP address blocks:        122.55.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10412 (0x28ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Mar 31 16:20:19 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf443-004c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:14:7f:ad:47:7d:5d:2f:3c:44:03:9d:68:
                    95:08:aa:fa:5b:b1:ac:7d:cf:2b:0f:62:d7:e8:76:
                    07:0d:71:c6:06:11:7a:4b:18:b0:40:9b:55:a6:29:
                    c5:52:a7:c9:cb:ff:71:2d:50:48:67:57:ca:30:8f:
                    54:b0:57:5e:36:a3:6b:ea:57:8f:2d:c7:90:6d:ee:
                    75:45:c5:89:9a:86:4b:df:67:62:8c:51:73:e9:18:
                    3c:b0:ec:5b:ca:d9:a4:7c:1d:b8:ef:53:bf:6e:d4:
                    dc:00:ed:e1:4d:60:af:1b:7a:42:ba:88:43:f9:c8:
                    b5:3c:09:03:90:be:53:61:b3:39:1e:5e:10:45:15:
                    4e:44:5f:3a:30:44:cc:6d:6d:7f:92:89:94:f9:04:
                    fa:8b:95:48:09:8f:78:ea:1e:b0:23:ff:f0:36:6b:
                    0e:49:e2:e6:36:1b:49:18:92:9a:ef:0e:a8:bf:c8:
                    e2:d5:48:c3:59:c8:1c:ae:21:8a:a4:b6:a9:d9:bf:
                    ac:2c:5a:48:2a:94:38:10:ca:21:02:e1:3b:cf:dd:
                    b4:61:ff:62:35:e9:35:2d:db:62:07:fc:b2:2c:ab:
                    c4:ae:b1:63:41:3c:e9:f0:ec:44:a1:3c:1f:8b:79:
                    f3:53:ab:1a:a4:73:5e:2c:35:ec:0a:27:fa:43:58:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:57:52:A7:C6:70:A2:28:CC:D2:1D:8A:64:21:F5:8C:20:5F:A2:74
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F721F6B08C5611E792848B4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.55.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:98:8d:53:28:d4:25:8b:82:70:54:ea:cf:1c:32:76:6f:93:
         f3:e9:7c:17:9c:79:14:61:1b:a5:a3:ba:67:cf:d3:72:d1:97:
         25:e1:f2:01:a1:55:02:a2:1f:8f:f4:2a:f2:98:4e:da:a3:1c:
         b4:ea:e8:70:4f:43:2f:a6:81:de:c3:d6:c9:9b:06:8e:42:92:
         93:b2:fc:29:7c:ea:7e:f3:af:00:5f:fe:c0:60:cb:48:e5:24:
         92:26:51:28:7d:cf:77:b7:29:26:ad:14:e8:70:59:b7:6f:b7:
         c8:bb:5c:c8:3e:df:b1:82:97:93:3f:c1:6e:aa:5c:0f:85:fc:
         00:69:41:95:22:51:33:5a:1f:c0:ae:82:66:5b:7d:f3:07:f4:
         8e:3d:80:f8:87:b0:16:18:42:13:54:5b:25:84:b0:73:0a:00:
         14:46:f3:92:f8:59:a3:bd:c0:c6:16:40:b8:ac:ae:27:75:1f:
         5e:52:42:2c:22:69:61:6e:ae:c3:4e:72:5a:f3:fe:40:fe:31:
         5d:98:6f:b5:b5:7f:58:16:81:6b:fd:ec:97:e3:50:92:1e:36:
         72:2f:7b:42:f2:e0:3d:a4:d1:98:c6:e8:23:7a:c5:72:4f:f6:
         f5:0c:75:e5:22:58:aa:c0:34:cf:ae:78:4b:97:0d:af:27:40:
         4f:87:67:7b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjYwMzMxMTYyMDE5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNiZjQ0My0wMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhSoUf61HfV0vPEQDnWiVCKr6W7Gsfc8rD2LX6HYHDXHGBhF6SxiwQJtVpinF
UqfJy/9xLVBIZ1fKMI9UsFdeNqNr6lePLceQbe51RcWJmoZL32dijFFz6Rg8sOxb
ytmkfB2471O/btTcAO3hTWCvG3pCuohD+ci1PAkDkL5TYbM5Hl4QRRVORF86METM
bW1/komU+QT6i5VICY946h6wI//wNmsOSeLmNhtJGJKa7w6ov8ji1UjDWcgcriGK
pLap2b+sLFpIKpQ4EMohAuE7z920Yf9iNek1LdtiB/yyLKvErrFjQTzp8OxEoTwf
i3nzU6sapHNeLDXsCif6Q1iA1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOVXUqfG
cKIozNIdimQh9YwgX6J0MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjcyMUY2QjA4
QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAejcGMA0GCSqGSIb3DQEBCwUAA4IBAQDHmI1TKNQli4JwVOrPHDJ2
b5Pz6XwXnHkUYRulo7pnz9Ny0Zcl4fIBoVUCoh+P9CrymE7aoxy06uhwT0MvpoHe
w9bJmwaOQpKTsvwpfOp+868AX/7AYMtI5SSSJlEofc93tykmrRTocFm3b7fIu1zI
Pt+xgpeTP8FuqlwPhfwAaUGVIlEzWh/AroJmW33zB/SOPYD4h7AWGEITVFslhLBz
CgAURvOS+FmjvcDGFkC4rK4ndR9eUkIsImlhbq7DTnJa8/5A/jFdmG+1tX9YFoFr
/eyX41CSHjZyL3tC8uA9pNGYxugjesVyT/b1DHXlIliqwDTPrnhLlw2vJ0BPh2d7
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:27:11 2026 by rpki-client