Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/83CECDE2F37711EFB7DF5759C4F9AE02.roa
File:                     83CECDE2F37711EFB7DF5759C4F9AE02.roa (raw, json)
Hash identifier:          VLiSpEsf9qV7L6/Fw29gbB6h1KnjaO5VGM7Rak0+JP4=
Subject key identifier:   7F:3C:8E:32:EF:4F:E3:E0:D9:28:DF:6F:29:C1:61:11:88:9E:F8:EC
Certificate issuer:       /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial:       2972
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/83CECDE2F37711EFB7DF5759C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:36:27 +0000
ROA not before:           Sat 10 Jan 2026 16:12:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     214785
IP address blocks:        43.250.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
                          rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10610 (0x2972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
        Validity
            Not Before: Jan 10 16:12:46 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4872b-1fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:6c:8b:d4:73:d0:ad:ab:31:52:9d:84:a4:
                    f8:c4:79:77:d7:77:6b:47:ad:b0:31:d6:33:5f:6c:
                    f3:68:96:09:b3:0d:9e:49:7c:e7:9e:a5:08:0a:28:
                    83:21:42:b3:ec:70:1e:c8:bb:20:98:e5:7e:5d:8a:
                    42:fc:c4:e9:1c:e1:86:71:1d:e8:0d:7f:fb:68:a1:
                    65:c1:d0:cf:8c:2a:bd:b3:cc:38:90:9c:d5:cd:b8:
                    86:c0:fc:00:da:b0:b7:66:51:ab:2a:12:48:a2:5b:
                    73:c1:ef:5e:ac:9d:67:03:35:a9:a5:59:fb:e2:7d:
                    89:ac:46:fc:f8:a6:79:dd:ba:ce:a3:19:f0:c0:9d:
                    62:40:f8:46:25:6b:8d:8b:da:04:92:ef:42:b7:8c:
                    50:e5:8f:9a:f8:e2:81:21:76:c3:3b:3e:2a:81:6a:
                    52:2c:b5:5a:95:29:4f:0d:d8:27:81:81:d0:1d:05:
                    8a:4a:4b:9d:a7:61:02:90:a7:d3:62:f6:d4:22:7e:
                    cf:c2:df:f6:b1:12:4c:fd:27:52:27:25:0a:06:79:
                    5b:39:22:d1:8d:ab:d7:e3:77:07:63:1a:8f:a9:93:
                    58:be:eb:ab:a3:66:ec:e5:28:b8:85:7a:da:be:03:
                    13:de:7b:b1:d5:c7:36:26:68:6e:a8:2a:fd:e4:1d:
                    92:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:8E:32:EF:4F:E3:E0:D9:28:DF:6F:29:C1:61:11:88:9E:F8:EC
            X509v3 Authority Key Identifier:
                keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/83CECDE2F37711EFB7DF5759C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:39:40:6f:5e:59:16:3e:b2:59:79:0f:e6:d7:f6:f3:f0:
         6a:6b:9f:17:c5:8e:46:62:cc:3c:94:63:5f:fc:28:d6:8c:42:
         37:b1:f7:e9:07:5c:4b:a7:af:90:d8:ae:78:51:fb:45:c4:f3:
         99:d7:13:1c:1b:26:de:05:00:b9:e1:fe:20:02:e0:16:86:dd:
         db:e5:10:f1:79:d9:b0:e7:17:52:e1:45:dd:97:3b:b8:ed:3f:
         ce:f1:30:2b:38:c9:ed:f7:76:4d:df:8c:4d:7a:7c:7a:53:c4:
         9d:25:d0:23:17:bf:48:a0:0e:ef:07:45:7a:d9:37:b5:b2:90:
         d5:0b:71:5f:13:0f:cb:3a:bd:a9:15:41:c0:11:1b:d8:a3:71:
         04:87:12:ed:45:1a:80:5b:87:b2:1b:95:72:c3:20:51:94:7f:
         3b:c9:fa:0d:ac:c9:04:06:dc:15:7e:7a:19:e1:cd:97:ac:e5:
         20:cd:89:d4:88:be:9e:e4:52:4b:7d:29:31:6b:38:f7:89:3a:
         1a:52:74:c1:5e:b8:81:d1:a9:52:e9:92:d8:c4:bc:b4:1b:79:
         d8:a8:57:e3:aa:e4:ec:1c:68:93:c1:fd:44:ba:45:14:36:f6:
         2d:b8:85:d7:dc:a5:3c:03:0f:53:67:6f:dc:ee:c1:11:f0:d1:
         26:fc:7d:70
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4
RTkzM0ZEQ0EwHhcNMjYwMTEwMTYxMjQ2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODcyYi0xZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp3Zsi9Rz0K2rMVKdhKT4xHl313drR62wMdYzX2zzaJYJsw2eSXznnqUICiiD
IUKz7HAeyLsgmOV+XYpC/MTpHOGGcR3oDX/7aKFlwdDPjCq9s8w4kJzVzbiGwPwA
2rC3ZlGrKhJIoltzwe9erJ1nAzWppVn74n2JrEb8+KZ53brOoxnwwJ1iQPhGJWuN
i9oEku9Ct4xQ5Y+a+OKBIXbDOz4qgWpSLLValSlPDdgngYHQHQWKSkudp2ECkKfT
YvbUIn7Pwt/2sRJM/SdSJyUKBnlbOSLRjavX43cHYxqPqZNYvuuro2bs5Si4hXra
vgMT3nux1cc2JmhuqCr95B2SwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH88jjLv
T+Pg2SjfbynBYRGInvjsMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG
OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvODNDRUNERTJG
Mzc3MTFFRkI3REY1NzU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK/p+MA0GCSqGSIb3DQEBCwUAA4IBAQC/eTlAb15ZFj6yWXkP5tf2
8/Bqa58XxY5GYsw8lGNf/CjWjEI3sffpB1xLp6+Q2K54UftFxPOZ1xMcGybeBQC5
4f4gAuAWht3b5RDxedmw5xdS4UXdlzu47T/O8TArOMnt93ZN34xNenx6U8SdJdAj
F79IoA7vB0V62Te1spDVC3FfEw/LOr2pFUHAERvYo3EEhxLtRRqAW4eyG5VywyBR
lH87yfoNrMkEBtwVfnoZ4c2XrOUgzYnUiL6e5FJLfSkxazj3iToaUnTBXriB0alS
6ZLYxLy0G3nYqFfjquTsHGiTwf1EukUUNvYtuIXX3KU8Aw9TZ2/c7sER8NEm/H1w
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:57 2026 by rpki-client