Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/850C91D6001811F18252CD21426F56BC.roa
File:                     850C91D6001811F18252CD21426F56BC.roa (raw, json)
Hash identifier:          H0q+xb6eVx4tPSPvPAYInq6UBtaoioP2tniqAH87wyc=
Subject key identifier:   9F:27:1A:87:7B:EA:5C:21:D8:07:26:8B:BC:AD:BD:90:EB:15:77:6C
Certificate issuer:       /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Certificate serial:       2B
Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/850C91D6001811F18252CD21426F56BC.roa
Signing time:             Sat 11 Apr 2026 08:43:23 +0000
ROA not before:           Sat 11 Apr 2026 08:43:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4686
IP address blocks:        180.235.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
        Validity
            Not Before: Apr 11 08:43:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69da09ab-1d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:6a:c1:49:32:38:4a:b5:60:09:6f:55:ec:
                    21:49:5e:d0:64:e6:29:21:87:39:ba:02:4e:3b:ae:
                    40:2a:8f:5c:80:2f:fe:ba:e6:6c:22:27:b2:6e:04:
                    df:5e:60:8d:aa:4c:43:51:fa:c6:04:5b:fd:f0:75:
                    bb:9d:f4:a3:b4:ce:a4:73:d9:a8:e1:b4:14:3b:8f:
                    c2:cd:91:5e:e0:dc:62:15:47:4c:f5:15:52:97:a4:
                    9f:62:61:45:9c:21:ae:35:f3:22:cc:51:78:8e:e0:
                    b8:b1:db:4d:73:f9:09:be:fb:51:b7:18:ab:7a:fc:
                    b9:1b:7a:67:17:41:27:0e:70:66:42:4c:5f:e7:6e:
                    d9:7f:a1:d8:c9:7c:e1:3e:39:17:1b:c0:29:11:2c:
                    a8:2f:8d:c7:7b:dc:0f:7f:b0:b5:fd:48:0e:31:e0:
                    a7:94:65:69:c9:00:4a:d8:7e:ee:c9:c8:e2:6c:f8:
                    1d:ac:47:c2:35:9e:43:a7:b6:a0:41:cc:82:25:a0:
                    6c:92:22:a5:8a:42:bc:b1:79:84:ad:02:f3:97:11:
                    98:a0:ea:b5:0d:ef:d4:01:13:bd:07:80:b1:f2:b9:
                    b8:48:5f:92:fb:45:dc:58:9a:75:29:67:c9:c7:b4:
                    ae:b3:7c:80:67:0f:ff:f6:00:e4:f3:53:01:4d:52:
                    24:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:27:1A:87:7B:EA:5C:21:D8:07:26:8B:BC:AD:BD:90:EB:15:77:6C
            X509v3 Authority Key Identifier:
                keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/850C91D6001811F18252CD21426F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:45:18:97:44:81:82:3c:4e:f7:66:8f:89:8f:29:3d:6f:
         5e:5d:49:80:23:76:fd:f6:d9:94:78:1e:43:4f:af:50:3e:03:
         0d:97:23:77:17:1c:06:67:ee:d2:e2:fa:a7:ca:c4:6e:3f:0c:
         7c:82:f2:48:64:85:d2:fe:49:19:90:b0:1b:1d:2a:d5:1c:54:
         de:b5:d0:c1:e9:90:1b:47:0c:37:c2:b3:80:96:2f:86:66:22:
         50:24:1d:19:96:60:7a:c7:27:01:e3:8e:eb:75:3d:fb:db:84:
         63:70:78:bc:c6:ef:8e:04:b7:ab:d9:23:65:a8:b0:0e:73:0d:
         b4:bb:31:82:7d:53:20:2e:a1:67:0c:2a:26:04:19:4c:2a:ec:
         ff:f6:4c:77:b2:e4:d5:b3:b0:39:3b:3c:8c:5a:be:60:a6:af:
         10:ad:a2:2f:90:b7:be:bb:5c:6f:e2:9d:e5:4b:91:1f:a8:7b:
         35:24:68:27:bc:db:3a:23:a1:6b:9c:7a:94:30:f4:dc:80:cd:
         a5:2d:44:d2:27:7e:c0:37:fb:c7:be:bf:17:52:74:78:fa:00:
         a5:72:20:fd:2a:68:5b:85:c9:11:81:dd:06:4f:79:58:50:28:
         25:d8:cb:41:74:ca:f0:77:96:4d:63:a4:c4:2e:50:ad:70:ce:
         b6:a1:59:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:17 2026 by rpki-client