Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/142EA3A84FEF11EF9A822A21C4F9AE02.roa
File:                     142EA3A84FEF11EF9A822A21C4F9AE02.roa (raw, json)
Hash identifier:          +IiDJrJDZjfTDVaNaVFck8CXBCtBN8BQSnselReBcxI=
Subject key identifier:   C6:D8:37:6C:FD:91:F0:2D:BB:B3:C3:10:7F:3D:30:3E:5C:C2:0E:2B
Certificate issuer:       /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial:       03E7
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/142EA3A84FEF11EF9A822A21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:26:19 +0000
ROA not before:           Thu 05 Jun 2025 01:08:19 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151499
IP address blocks:        202.12.87.0/24 maxlen: 24
                          202.12.88.0/24 maxlen: 24
                          202.12.89.0/24 maxlen: 24
                          202.12.90.0/24 maxlen: 24
                          203.0.12.0/23 maxlen: 24
                          203.3.124.0/22 maxlen: 22
                          203.4.226.0/24 maxlen: 24
                          203.12.236.0/22 maxlen: 22
                          203.12.236.0/24 maxlen: 24
                          203.12.237.0/24 maxlen: 24
                          203.12.238.0/24 maxlen: 24
                          203.12.239.0/24 maxlen: 24
                          203.14.152.0/24 maxlen: 24
                          203.14.153.0/24 maxlen: 24
                          203.14.154.0/24 maxlen: 24
                          203.14.155.0/24 maxlen: 24
                          203.14.158.0/23 maxlen: 24
                          203.27.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
        Validity
            Not Before: Jun  5 01:08:19 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a44c8b-43e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:0d:b8:7e:d4:b8:7d:45:d6:14:18:67:09:
                    cd:02:d8:0d:7f:55:8f:89:c9:48:e2:21:24:62:2a:
                    55:57:36:2f:93:69:e9:dc:9c:99:34:67:ce:44:99:
                    6e:7b:b8:fd:77:6f:43:80:74:f9:de:63:d1:e3:f7:
                    66:e2:61:65:a0:b6:73:3a:d3:99:07:6b:cc:43:74:
                    80:cb:f7:e1:eb:54:fb:a3:01:64:78:5c:cc:04:0e:
                    55:30:88:80:9d:da:9f:c1:93:66:4c:57:6c:ad:11:
                    25:67:a2:36:02:60:75:02:91:aa:8c:07:84:d8:54:
                    ff:98:f0:18:2f:26:c3:4d:8a:c7:d5:bd:35:5f:16:
                    04:38:da:4a:8f:1e:a6:6e:f1:cf:17:69:40:37:7f:
                    70:8a:b6:d7:88:bc:ef:ed:5e:c6:0a:86:23:40:9a:
                    3f:36:02:55:7a:47:0b:7b:d3:97:73:90:9e:c1:68:
                    90:27:b4:00:ed:58:85:46:90:67:ff:89:c1:1e:ae:
                    8f:b3:f7:ba:d9:f0:6c:0b:da:7e:d7:b1:7d:3e:5f:
                    8f:ed:3e:1c:2b:37:64:7f:14:b5:ef:fe:e7:3b:07:
                    0c:42:b3:2c:4a:ae:52:2e:a7:be:c4:fe:e0:66:a0:
                    94:5a:8d:f3:2e:80:8b:87:43:90:e0:80:15:77:ca:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D8:37:6C:FD:91:F0:2D:BB:B3:C3:10:7F:3D:30:3E:5C:C2:0E:2B
            X509v3 Authority Key Identifier:
                keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/142EA3A84FEF11EF9A822A21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.87.0-202.12.90.255
                  203.0.12.0/23
                  203.3.124.0/22
                  203.4.226.0/24
                  203.12.236.0/22
                  203.14.152.0/22
                  203.14.158.0/23
                  203.27.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:62:e4:81:7b:ef:5d:87:4e:a2:ee:91:9b:27:fc:45:b3:9e:
         e8:5b:2a:0a:d3:b4:97:83:b4:bd:ff:f3:08:c6:7e:d1:c2:14:
         6d:96:4f:3c:35:21:ff:f0:0d:05:fb:9c:9c:61:5d:51:f5:bd:
         70:b9:ce:b0:40:38:0f:d4:34:3a:56:d9:ff:95:ed:11:45:4c:
         5a:85:32:c4:bf:ec:2b:70:9c:6f:be:be:65:e4:06:76:ee:f1:
         d2:36:05:c4:bb:40:13:ad:e7:dc:7c:6c:1b:6d:22:97:7f:46:
         4e:f1:f6:4f:44:64:f1:27:f5:ae:2f:ba:bb:4f:0e:d1:af:2e:
         f1:c6:13:e3:50:71:47:c0:75:cc:24:f0:58:44:c6:9c:00:be:
         65:32:da:fe:91:8b:8d:1d:8e:87:c6:a5:2e:45:8d:39:37:c5:
         f0:ee:34:c5:6b:4f:ab:24:c4:9f:a7:26:91:f4:7d:1a:63:03:
         de:62:2e:99:ea:d7:63:28:5c:19:4c:69:f2:02:82:03:19:75:
         99:98:e0:9e:4d:87:3d:c9:a7:01:b4:83:43:3e:11:60:a7:ff:
         82:c1:57:de:be:cc:b5:d5:f8:75:62:0d:9a:4d:51:94:73:ab:
         91:46:cd:ba:bf:2d:02:f0:e4:cf:66:eb:a7:4f:90:dd:58:4b:
         a8:a2:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:21 2026 by rpki-client