Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/F4B9363CD97C11F0998DA3C49DD3641D.roa
File:                     F4B9363CD97C11F0998DA3C49DD3641D.roa (raw, json)
Hash identifier:          VfJC1uL3SDtxI0jb1ThMloxDt/b6TXqC47eyeyvo+WI=
Subject key identifier:   A7:52:D5:61:CD:22:12:9F:AB:5B:68:8F:01:7B:1E:5B:F6:EA:4E:44
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       22E7
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/F4B9363CD97C11F0998DA3C49DD3641D.roa
Signing time:             Sun 01 Mar 2026 18:45:59 +0000
ROA not before:           Mon 15 Dec 2025 06:11:55 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135402
IP address blocks:        220.158.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8935 (0x22e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Dec 15 06:11:55 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48967-d567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:89:24:ed:e9:79:cf:30:fc:7d:80:c0:a5:
                    05:aa:43:01:94:95:e2:b9:34:82:c2:e5:cc:9c:24:
                    b8:a7:78:3f:65:56:31:30:76:b3:9e:01:81:d9:f3:
                    24:86:d4:d3:6f:47:a2:75:95:7c:b1:ab:18:25:5e:
                    8c:a6:da:f0:32:f5:37:d1:c7:9e:c4:82:71:93:be:
                    f4:a5:30:ad:39:bd:5b:f5:76:d4:ec:5e:d0:ee:56:
                    6a:d2:69:cf:4e:6a:b3:32:50:ca:42:34:e1:03:35:
                    ce:0c:70:b5:79:aa:9b:97:cb:98:3b:a3:e8:10:ff:
                    7d:34:01:c7:d7:39:01:ad:36:a5:1a:23:9e:2f:3b:
                    e0:f6:7d:44:33:42:38:90:35:96:79:54:78:78:5e:
                    c4:44:fd:25:ab:a0:3a:7a:57:6b:c1:12:77:c2:29:
                    67:e9:44:08:fe:24:a9:63:07:fe:0d:79:af:cc:40:
                    75:cf:b2:d4:3e:34:6d:19:a9:b0:59:7f:19:bb:fb:
                    7c:d8:47:41:0c:78:fe:4b:8a:6f:e5:3f:ca:f6:40:
                    95:7d:b2:c6:fe:5a:e9:7c:03:16:c9:17:b2:70:b5:
                    aa:1c:69:9a:39:7f:a5:8c:54:b4:4e:e2:26:18:20:
                    ea:56:22:93:e3:38:c0:b0:35:d3:66:65:54:e3:57:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:52:D5:61:CD:22:12:9F:AB:5B:68:8F:01:7B:1E:5B:F6:EA:4E:44
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/F4B9363CD97C11F0998DA3C49DD3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:8f:fb:cf:36:41:9c:06:7d:ae:70:9e:b3:cc:a7:43:8d:65:
         d3:40:a6:96:fa:31:4c:9f:84:d1:2a:8f:c3:b2:9f:75:57:ae:
         a9:24:2c:6a:33:9f:48:4b:5c:84:ed:60:ba:3e:fa:16:99:06:
         8d:d6:56:70:62:5d:06:5a:6d:60:ee:d2:94:bd:49:bb:f1:97:
         7f:a4:ef:2f:1f:0d:3e:f0:b2:44:90:59:c3:3e:b6:a3:2e:24:
         41:8c:4e:22:2c:d5:b5:d4:ce:e3:c5:01:2f:b5:cb:e8:ac:31:
         df:fe:3f:36:cb:c7:1b:31:47:11:7f:08:5a:86:0d:64:bc:89:
         fc:af:25:b6:27:63:36:f7:b2:3a:ca:09:66:35:60:02:f6:15:
         9c:79:8b:e7:10:58:37:5b:1e:05:bd:cc:2f:40:c6:eb:da:d3:
         15:74:8e:81:dc:6a:0d:28:d5:f0:85:ad:eb:2f:2d:9a:dd:b8:
         79:62:03:ab:45:c9:44:34:cf:2c:5a:cb:8a:07:c8:05:26:d3:
         a6:bc:d2:fa:cb:b4:61:4b:b2:c4:f2:55:d7:24:88:bb:f8:72:
         de:44:f4:de:f3:58:d7:02:cd:3a:5c:16:f5:7b:cc:34:de:6d:
         68:6b:14:35:f1:e3:c0:3f:01:cd:ec:86:ae:c9:07:d5:3c:31:
         93:16:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:37 2026 by rpki-client