Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/78123422B0CD11E58B55FC73C4F9AE02.roa
File:                     78123422B0CD11E58B55FC73C4F9AE02.roa (raw, json)
Hash identifier:          w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=
Subject key identifier:   9F:8D:FF:89:AD:2D:D7:A0:BE:0E:E0:CF:A7:BD:44:1D:AB:8B:F7:AE
Certificate issuer:       /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial:       36A3
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/78123422B0CD11E58B55FC73C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:10:47 +0000
ROA not before:           Tue 02 Dec 2025 14:41:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132844
IP address blocks:        121.58.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13987 (0x36a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
        Validity
            Not Before: Dec  2 14:41:44 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48127-584c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:b5:50:ce:c4:07:2e:28:d0:2b:00:f5:32:
                    1c:31:4e:b4:ea:33:fb:a5:00:03:7a:13:e5:02:62:
                    b2:d6:61:e2:78:37:6e:33:7a:25:d8:9c:a8:f6:ad:
                    1c:36:36:59:3b:86:bf:9b:99:d4:d6:40:17:a6:32:
                    2b:a3:2b:7b:63:f7:12:7e:64:bd:37:b1:11:46:74:
                    72:9e:83:8c:e1:1c:1d:26:fe:be:89:9b:28:52:2a:
                    7c:52:64:ca:ef:ad:1f:dd:a3:20:f8:a3:d2:b3:a3:
                    0b:da:3b:7b:9b:bd:2a:14:81:1b:42:7b:03:e8:fe:
                    73:b9:a6:f8:3f:37:c3:85:fb:fa:b4:c9:b0:6c:ba:
                    7c:fa:75:a1:e4:1d:86:bf:22:a8:ca:db:c6:77:2c:
                    ea:dc:15:71:7c:5e:88:0b:68:43:ae:db:04:09:c8:
                    dd:25:f3:a1:b0:65:60:c8:ba:b6:f1:35:e8:91:f5:
                    9a:67:8a:28:ae:50:2c:dd:a6:94:93:d0:50:bb:fc:
                    3e:ef:3c:7d:16:e8:31:f0:3a:38:a7:15:40:f2:e7:
                    33:5f:ef:a8:ad:7c:fc:c9:b9:10:29:fa:4f:f2:42:
                    4e:df:08:f1:d5:c1:0c:ab:c1:51:72:d3:77:ce:de:
                    c1:9b:e3:5c:6a:39:0a:e4:2a:ea:78:6e:86:e2:8b:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8D:FF:89:AD:2D:D7:A0:BE:0E:E0:CF:A7:BD:44:1D:AB:8B:F7:AE
            X509v3 Authority Key Identifier:
                keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/78123422B0CD11E58B55FC73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.58.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:bc:31:64:67:6a:4d:62:15:77:7b:8e:1f:52:a5:a0:8d:d7:
         7d:ee:80:44:a8:ac:b1:c0:a1:e8:c2:ab:c3:65:15:f7:c9:b1:
         52:d6:07:57:87:46:76:b5:22:35:cb:0f:fd:16:8f:c0:99:25:
         f3:d4:f2:b8:cd:57:37:ba:75:7a:28:33:f6:c2:eb:2b:ea:ce:
         5c:cb:e0:88:aa:20:7d:9c:5d:86:bf:08:9e:da:c6:1f:43:45:
         bf:aa:9c:20:02:36:54:49:42:30:06:4e:3b:b9:3f:a9:47:22:
         bf:0a:94:12:75:d5:7b:d1:81:b7:05:75:cb:90:96:0e:a3:c5:
         26:8b:fa:33:ee:72:d2:ce:3b:76:69:5b:65:f5:b1:2a:ef:18:
         ce:9a:b3:59:70:f4:2a:fa:c2:3c:4e:25:94:06:10:63:7e:9f:
         59:65:61:d3:61:66:e1:25:c7:d0:18:53:4a:f3:e5:6d:75:d0:
         b2:96:7e:df:e6:ae:ca:cb:8f:81:47:09:cd:b8:78:de:b6:a7:
         98:ed:ca:6c:ec:a2:4d:df:84:e7:f8:e3:2f:ad:b9:16:a4:ac:
         f7:7f:20:f5:1d:05:7d:4b:1d:37:80:0a:0d:ea:96:60:c9:e8:
         a1:0f:0a:ae:bc:eb:f1:84:8b:17:55:67:ab:17:9b:de:89:8c:
         56:f5:d0:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy
QTM2MkRBRjAwHhcNMjUxMjAyMTQ0MTQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODEyNy01ODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvc+1UM7EBy4o0CsA9TIcMU606jP7pQADehPlAmKy1mHieDduM3ol2Jyo9q0c
NjZZO4a/m5nU1kAXpjIroyt7Y/cSfmS9N7ERRnRynoOM4RwdJv6+iZsoUip8UmTK
760f3aMg+KPSs6ML2jt7m70qFIEbQnsD6P5zuab4PzfDhfv6tMmwbLp8+nWh5B2G
vyKoytvGdyzq3BVxfF6IC2hDrtsECcjdJfOhsGVgyLq28TXokfWaZ4oorlAs3aaU
k9BQu/w+7zx9Fugx8Do4pxVA8uczX++orXz8ybkQKfpP8kJO3wjx1cEMq8FRctN3
zt7Bm+NcajkK5CrqeG6G4otm1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ+N/4mt
Ldegvg7gz6e9RB2ri/euMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE
ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvNzgxMjM0MjJC
MENEMTFFNThCNTVGQzczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAeTrxMA0GCSqGSIb3DQEBCwUAA4IBAQBgvDFkZ2pNYhV3e44fUqWg
jdd97oBEqKyxwKHowqvDZRX3ybFS1gdXh0Z2tSI1yw/9Fo/AmSXz1PK4zVc3unV6
KDP2wusr6s5cy+CIqiB9nF2Gvwie2sYfQ0W/qpwgAjZUSUIwBk47uT+pRyK/CpQS
ddV70YG3BXXLkJYOo8Umi/oz7nLSzjt2aVtl9bEq7xjOmrNZcPQq+sI8TiWUBhBj
fp9ZZWHTYWbhJcfQGFNK8+VtddCyln7f5q7Ky4+BRwnNuHjetqeY7cps7KJN34Tn
+OMvrbkWpKz3fyD1HQV9Sx03gAoN6pZgyeihDwquvOvxhIsXVWerF5veiYxW9dCe
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:12 2026 by rpki-client