Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/4965F84CAFC011EF82BB1055C4F9AE02.roa
File:                     4965F84CAFC011EF82BB1055C4F9AE02.roa (raw, json)
Hash identifier:          5akZ6mHQq1ksNbd/DS/b4qeyRo6TcvJuP9SLF4pNYTs=
Subject key identifier:   66:49:09:8D:C7:FE:9A:EE:70:D2:0F:2C:CB:97:04:3D:ED:72:A3:52
Certificate issuer:       /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial:       F2
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/4965F84CAFC011EF82BB1055C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:14:42 +0000
ROA not before:           Mon 15 Dec 2025 05:24:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153391
IP address blocks:        160.191.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
        Validity
            Not Before: Dec 15 05:24:58 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43bc2-e024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:63:12:c1:3d:2b:d1:9d:43:5e:41:fd:f9:
                    94:89:8d:1b:02:28:2d:6a:75:7d:aa:b8:83:ce:57:
                    21:12:3e:e8:0b:23:db:65:5b:66:c8:ee:fb:17:f5:
                    7f:ee:29:41:8b:08:ba:21:84:64:5d:87:1e:63:3e:
                    45:88:88:dc:5e:34:94:0a:6b:ea:f0:74:aa:89:32:
                    b7:bd:f9:34:7d:f4:69:cf:b2:ae:2e:4e:fa:40:e2:
                    2b:93:76:48:27:93:c4:ab:1b:a2:64:dc:fd:79:01:
                    b6:12:c0:1c:bd:e5:b3:95:d3:66:81:43:fe:6d:7c:
                    41:16:6c:26:50:5d:b1:06:6a:23:15:1e:93:f6:38:
                    ad:b1:82:3a:b5:a6:98:1c:15:ed:7c:fa:d3:14:07:
                    bd:8a:91:f4:91:41:49:a4:8c:72:43:bd:77:ea:ed:
                    cf:59:0e:da:32:7c:0c:2b:1e:3c:c4:88:01:d1:3b:
                    c2:80:dc:aa:b0:3b:dd:43:0f:29:f6:00:c4:bf:90:
                    45:8d:7f:f1:aa:79:0c:07:63:4b:67:8f:1c:00:36:
                    c8:3e:29:3f:04:12:a7:d3:ad:e4:50:75:48:49:44:
                    77:b4:04:8f:a1:90:e7:1b:20:49:10:a2:69:1d:9f:
                    f5:b2:26:56:54:8e:21:15:ae:0e:7b:dd:c0:b8:75:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:49:09:8D:C7:FE:9A:EE:70:D2:0F:2C:CB:97:04:3D:ED:72:A3:52
            X509v3 Authority Key Identifier:
                keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/4965F84CAFC011EF82BB1055C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:af:f4:0d:cf:6e:63:5a:3c:a9:d6:5b:df:4b:71:c9:b3:13:
         fe:de:9a:20:20:45:d9:b8:cc:42:61:23:09:70:b6:a6:ac:36:
         85:37:06:05:63:7d:d9:20:e7:e8:7d:3d:71:96:8b:f6:ab:4c:
         24:b1:1e:4c:f5:72:e2:37:06:6e:48:48:99:c6:e6:2c:a6:e0:
         38:54:a7:5e:86:09:a3:df:b6:e0:75:32:90:a4:36:a4:12:67:
         7f:bb:72:43:7b:4e:9f:46:63:65:a5:bd:2c:43:aa:58:d4:fd:
         cd:82:b1:91:ff:a6:7c:5f:20:3e:b1:97:57:67:14:81:5f:69:
         9a:ea:e1:ba:7d:04:db:2e:88:33:0a:17:76:94:5f:92:da:f4:
         35:84:c4:45:cb:56:f2:be:1f:3c:e2:66:8e:e7:27:3e:7a:f4:
         96:d1:ac:0e:6c:ea:47:8c:66:31:95:53:44:80:aa:60:1a:c9:
         80:7b:5d:8f:4e:1f:a4:00:ed:dc:07:9b:b0:64:7f:42:72:72:
         3d:b4:36:ec:ae:38:81:59:2a:79:34:78:12:67:41:a4:06:65:
         e7:cf:f0:d6:35:ba:cf:04:91:41:23:83:22:10:93:bb:ef:36:
         ac:fa:36:3a:8e:ed:1c:62:a0:44:c6:90:6b:3a:02:18:d7:94:
         5e:95:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:12 2026 by rpki-client