Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/083D60F0EFC311F0ADB9FC6F726F56BC.roa
File:                     083D60F0EFC311F0ADB9FC6F726F56BC.roa (raw, json)
Hash identifier:          fF8JE+CeDWGa0Zd7+3JcEIODMXv324fSErOhGifycP8=
Subject key identifier:   59:37:1C:C9:17:18:16:1E:E2:81:9A:F9:A1:DC:5A:B4:C4:5B:2C:68
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       22E8
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/083D60F0EFC311F0ADB9FC6F726F56BC.roa
Signing time:             Sun 01 Mar 2026 18:46:00 +0000
ROA not before:           Mon 12 Jan 2026 14:28:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9457
IP address blocks:        220.158.206.0/24 maxlen: 24
                          220.158.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8936 (0x22e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Jan 12 14:28:58 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48968-7dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:0e:c4:be:1e:6a:d2:74:b8:11:77:97:d1:
                    e8:fd:81:63:f8:bb:dc:c1:f7:98:f4:93:65:34:1a:
                    38:bb:a2:d2:f3:ea:2e:7b:53:99:f8:03:b3:95:6c:
                    f1:3c:78:8c:f1:50:50:14:1c:28:3b:3f:ea:ad:4e:
                    6c:8c:ae:3a:a0:e6:1f:06:12:79:5f:e1:14:4c:f7:
                    46:7f:57:0b:5f:a3:05:ae:13:f1:bd:28:97:8e:d9:
                    de:cb:92:ba:07:ed:5d:9c:73:d3:94:8d:3d:77:be:
                    87:35:2f:71:cf:c3:a1:33:1f:b7:fe:66:22:8a:0a:
                    0f:7c:6b:37:e7:f5:aa:0f:64:b4:f2:c2:fc:e7:ec:
                    f3:24:30:eb:f8:cf:17:b3:f7:39:10:be:44:dc:15:
                    73:ab:46:77:65:fb:e1:b0:5e:c5:3b:60:6d:45:e6:
                    88:0f:b5:27:c9:d1:fe:d6:2b:57:5a:24:87:98:32:
                    86:9a:11:02:c0:9b:c6:9f:cd:48:bf:9f:8c:ed:05:
                    74:bb:18:f0:74:53:be:6f:6b:20:d6:1a:a0:f0:42:
                    95:9f:01:1d:82:5f:45:6d:63:83:72:79:6d:94:9f:
                    b9:8a:fa:c3:1e:a2:11:db:bb:04:23:4f:ba:94:d1:
                    ec:e6:71:bb:9b:09:09:20:61:24:52:e4:03:66:87:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:37:1C:C9:17:18:16:1E:E2:81:9A:F9:A1:DC:5A:B4:C4:5B:2C:68
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/083D60F0EFC311F0ADB9FC6F726F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:3d:12:0c:02:11:08:3e:48:76:eb:5a:0c:b7:bd:be:9e:
         fb:41:5c:dd:6c:02:5a:dc:ce:29:f0:73:10:c5:92:0b:b1:64:
         28:23:32:b8:2c:de:88:0b:47:2e:bc:b2:dc:02:e0:0b:59:f6:
         0f:c9:2d:51:0a:44:54:0c:4d:44:0f:cb:10:b4:2f:8f:d7:93:
         6b:31:60:ce:80:78:88:52:a8:59:88:17:9c:84:35:93:bd:34:
         61:d0:68:04:42:60:b6:17:3b:55:34:7d:b9:45:06:8e:ae:ca:
         45:9d:d9:97:fc:fc:75:9b:37:49:9b:74:7d:8d:66:40:06:57:
         54:7e:64:f8:83:65:bd:82:6c:8c:75:87:6c:f3:94:52:1c:53:
         a7:6a:38:59:65:97:c1:24:c5:93:5d:75:9a:7c:a1:62:eb:c9:
         5c:bb:d1:83:51:d9:fe:e5:f0:de:12:2a:02:02:83:b0:ea:32:
         36:a4:1b:ee:e3:a2:63:de:09:b4:c6:31:2d:1b:e3:ea:ff:52:
         5f:aa:bf:fd:c2:64:8c:d4:29:ae:35:d6:3b:11:30:5d:36:bd:
         56:b1:27:5a:48:df:95:ff:a9:4c:90:3d:26:6c:72:93:42:36:
         85:18:bd:ae:14:fd:2d:8a:52:b1:47:78:a4:2c:70:d5:2e:79:
         af:da:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:42 2026 by rpki-client