Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4BF67550A4C911E782854F50C4F9AE02.roa
File:                     4BF67550A4C911E782854F50C4F9AE02.roa (raw, json)
Hash identifier:          f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=
Subject key identifier:   C4:01:26:CB:5A:75:72:9E:46:9B:F0:F9:E1:F1:30:C4:75:64:8A:57
Certificate issuer:       /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial:       36A4
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4BF67550A4C911E782854F50C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:10:48 +0000
ROA not before:           Tue 02 Dec 2025 14:41:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135345
IP address blocks:        202.69.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13988 (0x36a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
        Validity
            Not Before: Dec  2 14:41:45 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48128-484d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:b0:35:67:00:a1:64:b8:c9:4d:6a:66:c2:
                    e5:db:2a:14:ad:38:2c:da:56:f7:20:91:55:31:52:
                    8a:e6:d6:67:6d:8f:74:9b:82:7b:66:75:91:76:eb:
                    ed:2f:ad:c3:53:cd:0a:c2:41:75:92:6d:ee:8b:36:
                    48:00:25:f5:29:f8:e8:ec:2c:4a:b2:63:70:52:05:
                    3a:2a:a2:d9:2c:03:9c:31:17:3a:49:16:ba:ca:18:
                    11:83:1d:34:8a:21:25:9a:65:93:dc:3f:d0:27:ae:
                    af:a5:87:67:77:02:4a:ac:66:64:97:44:33:7c:10:
                    a2:78:d9:ff:bd:53:bf:99:7f:d9:1a:27:bc:0b:0f:
                    d9:b8:41:e4:c6:e3:49:93:94:6f:25:6b:45:e5:8b:
                    15:02:9c:37:72:13:51:09:7f:16:d4:55:fd:1c:20:
                    17:f8:cb:b3:9d:07:da:5c:09:a8:ca:8a:55:c5:b8:
                    9f:ab:de:82:16:a0:ce:f3:29:5c:6d:93:e1:db:2b:
                    64:4f:82:f0:dc:33:0b:b4:c1:a0:82:b8:a6:fe:0a:
                    03:2a:f5:3e:1f:3e:b9:55:2b:99:61:76:c6:f6:c1:
                    1f:88:cd:79:9a:fe:8d:d7:86:06:f6:24:a9:f1:bd:
                    40:a7:30:7b:6c:ae:70:bc:03:05:0b:02:70:5a:35:
                    11:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:01:26:CB:5A:75:72:9E:46:9B:F0:F9:E1:F1:30:C4:75:64:8A:57
            X509v3 Authority Key Identifier:
                keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4BF67550A4C911E782854F50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:40:b6:34:4c:6a:b5:1b:ed:f4:be:3e:2b:9e:db:1d:b6:3d:
         cd:58:05:a1:49:76:fc:33:07:ce:73:e9:1f:d9:70:3c:c2:ca:
         24:d2:31:df:56:8b:00:02:14:cc:8a:4c:f0:88:f3:4b:b5:ca:
         ce:1a:3d:46:b9:a9:a7:56:37:aa:be:43:55:be:41:7e:e6:f5:
         32:4d:42:cd:d2:cd:4e:a4:b0:f1:96:80:51:c9:8a:29:3a:73:
         eb:2e:1b:77:32:07:b4:9e:0c:f9:19:78:c8:ce:52:75:2e:17:
         bd:67:63:9c:59:c6:1e:39:55:b0:0c:c8:38:8a:fe:ed:af:21:
         32:fd:29:cc:45:82:aa:96:25:36:9d:66:a8:8c:ba:63:f1:80:
         ad:de:f3:8a:ab:cc:61:45:e3:9e:e9:f5:ab:db:fe:bd:35:2f:
         2b:ab:97:67:05:c7:5b:e6:d1:5d:cb:4b:37:51:5e:bd:54:75:
         ca:9f:45:27:b8:88:97:41:ea:9f:87:cb:10:ca:a6:b0:1e:42:
         29:af:a4:68:f7:27:47:ca:34:be:0f:28:22:18:80:a7:db:12:
         74:74:8f:5d:76:51:b1:ef:eb:16:32:58:e5:52:30:c6:60:53:
         98:2f:e8:17:03:63:df:ca:d2:1d:20:3f:ba:bb:10:09:f3:8c:
         40:2a:8e:68
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy
QTM2MkRBRjAwHhcNMjUxMjAyMTQ0MTQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODEyOC00ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1CSwNWcAoWS4yU1qZsLl2yoUrTgs2lb3IJFVMVKK5tZnbY90m4J7ZnWRduvt
L63DU80KwkF1km3uizZIACX1Kfjo7CxKsmNwUgU6KqLZLAOcMRc6SRa6yhgRgx00
iiElmmWT3D/QJ66vpYdndwJKrGZkl0QzfBCieNn/vVO/mX/ZGie8Cw/ZuEHkxuNJ
k5RvJWtF5YsVApw3chNRCX8W1FX9HCAX+MuznQfaXAmoyopVxbifq96CFqDO8ylc
bZPh2ytkT4Lw3DMLtMGggrim/goDKvU+Hz65VSuZYXbG9sEfiM15mv6N14YG9iSp
8b1ApzB7bK5wvAMFCwJwWjURzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMQBJsta
dXKeRpvw+eHxMMR1ZIpXMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE
ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvNEJGNjc1NTBB
NEM5MTFFNzgyODU0RjUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAykWjMA0GCSqGSIb3DQEBCwUAA4IBAQBYQLY0TGq1G+30vj4rntsd
tj3NWAWhSXb8MwfOc+kf2XA8wsok0jHfVosAAhTMikzwiPNLtcrOGj1GuamnVjeq
vkNVvkF+5vUyTULN0s1OpLDxloBRyYopOnPrLht3Mge0ngz5GXjIzlJ1Lhe9Z2Oc
WcYeOVWwDMg4iv7tryEy/SnMRYKqliU2nWaojLpj8YCt3vOKq8xhReOe6fWr2/69
NS8rq5dnBcdb5tFdy0s3UV69VHXKn0UnuIiXQeqfh8sQyqawHkIpr6Ro9ydHyjS+
DygiGICn2xJ0dI9ddlGx7+sWMljlUjDGYFOYL+gXA2PfytIdID+6uxAJ84xAKo5o
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:38 2026 by rpki-client