Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa
File:                     81ACB3888C9611EE88DE0726C4F9AE02.roa (raw, json)
Hash identifier:          TqThcjGCZdcUCFCB5iBMES4y4Hmtcv0QzeWoAJ38VUs=
Subject key identifier:   7F:E1:0B:7E:D5:B0:35:3A:F2:25:87:63:F4:6B:BC:A8:C8:2B:D1:54
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36BA
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:45:33 +0000
ROA not before:           Tue 02 Sep 2025 15:01:17 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135027
IP address blocks:        117.121.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14010 (0x36ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep  2 15:01:17 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4894d-cd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:a8:92:6e:4b:c2:d9:a4:4b:f5:f5:b1:2d:
                    8f:d6:5b:0d:fc:37:85:a1:ee:fd:d5:44:26:17:32:
                    b5:97:ec:73:df:5c:13:3f:15:62:8c:ce:2f:93:6f:
                    a1:36:56:89:82:ed:b7:20:6f:e3:3e:d7:a2:28:af:
                    2c:37:c6:a5:12:f9:1d:cf:52:be:86:72:a1:82:34:
                    02:5b:21:d7:62:39:8d:d6:4b:f1:89:94:31:4c:55:
                    66:a0:05:0c:fb:e7:cc:e1:d1:17:eb:1d:30:53:dc:
                    24:8a:10:0e:69:35:cc:20:75:2d:be:34:72:4f:82:
                    61:9c:19:3c:30:86:fd:40:2d:fd:f8:41:ba:1a:1a:
                    68:d8:c0:c1:ea:b9:02:d3:97:41:3e:85:7a:5c:4e:
                    ee:db:dd:e5:9a:64:69:24:15:c4:0f:a8:a6:ba:71:
                    ee:8c:10:69:e1:13:5f:ca:ea:04:e7:27:ff:a6:ff:
                    06:78:17:02:37:cd:ef:df:5b:60:44:a4:47:fb:76:
                    c9:8b:32:9b:3c:39:b5:6e:bf:24:da:33:5b:61:61:
                    28:9b:70:75:f7:c8:ff:20:80:9c:69:fe:73:7a:3c:
                    53:8b:d1:3c:f0:94:7a:3c:bb:be:49:d9:cc:5b:fd:
                    94:b7:49:10:d5:81:84:a6:45:61:3c:ee:de:e0:04:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E1:0B:7E:D5:B0:35:3A:F2:25:87:63:F4:6B:BC:A8:C8:2B:D1:54
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.121.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:12:3c:32:84:6f:0a:84:c4:09:99:d3:55:36:ad:b1:0f:
         30:2a:3a:b6:22:3b:a3:99:03:1b:4a:ac:50:73:a4:fd:e0:04:
         d0:54:1e:27:05:83:11:22:8c:59:c5:da:a2:93:99:b3:99:07:
         b2:49:bb:45:79:f5:ec:61:17:c0:65:2e:ed:49:90:b8:74:be:
         64:1f:1d:d2:02:0b:ca:38:1b:4e:59:71:38:86:ef:8b:a9:19:
         1c:2b:53:2d:b6:14:b4:e8:9b:8f:c7:b1:0a:59:d8:f1:03:85:
         57:42:f7:f0:83:bd:09:09:00:da:95:a7:64:4b:ec:2f:e7:e8:
         c2:f3:a7:26:5e:04:12:09:e7:ef:34:ec:da:4a:61:20:7a:41:
         90:45:df:a2:8a:f4:70:73:bf:8a:42:5c:22:29:a6:6a:01:8c:
         01:b6:2b:8e:ab:30:a3:97:90:69:12:53:3e:d4:9e:0d:b4:d5:
         dc:11:a2:da:8a:63:eb:50:ca:cc:57:5c:de:71:c2:6e:88:d2:
         4a:ce:8f:ad:1b:6d:24:e3:fa:57:6f:20:e8:01:bc:6a:2e:1f:
         41:b2:b2:e6:56:aa:21:65:3d:2e:52:b3:da:1e:b5:56:03:f8:
         d1:cd:1a:2a:ad:8c:2a:fb:30:9e:27:3d:96:4d:c5:d2:6e:fc:
         99:9a:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:12 2026 by rpki-client