Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/905F258E24F211EEA0863328C4F9AE02.roa
File:                     905F258E24F211EEA0863328C4F9AE02.roa (raw, json)
Hash identifier:          7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=
Subject key identifier:   F2:C0:60:E7:A5:69:FF:67:D8:68:7D:24:18:10:47:30:B7:0B:31:AC
Certificate issuer:       /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial:       05EF
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/905F258E24F211EEA0863328C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:36:43 +0000
ROA not before:           Mon 02 Feb 2026 23:19:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     45396
IP address blocks:        203.9.179.0/24 maxlen: 24
                          203.9.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
                          rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
        Validity
            Not Before: Feb  2 23:19:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4792b-c4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:49:8b:2e:03:ba:11:9d:c0:7e:49:6e:b0:
                    cc:f4:5e:45:5f:9d:ca:b4:35:b0:e7:d0:00:1d:c7:
                    ad:f9:5e:6e:e0:ef:f2:05:7f:cd:5c:01:7a:c8:07:
                    d7:23:89:ed:82:7e:93:b4:2b:c8:c5:96:89:d3:e2:
                    ad:a4:bb:8a:ae:ad:ae:8d:9c:0e:f8:93:d9:ad:ee:
                    29:13:56:4a:55:d6:c6:03:66:76:ea:a7:c2:0f:23:
                    20:81:1f:31:0d:2c:14:af:97:c5:48:ab:1d:cb:e9:
                    81:54:8f:e9:d0:36:da:71:2f:19:db:b6:c4:90:ec:
                    42:43:19:63:f0:74:ee:36:09:1e:e9:30:a0:2c:5b:
                    df:5a:35:16:79:e6:05:ad:e2:63:a1:fa:6b:a5:66:
                    f3:ce:b5:38:03:38:4f:d0:a3:32:38:4b:47:da:90:
                    3c:88:3a:5e:46:6a:d3:57:39:69:e5:69:ca:73:1f:
                    1c:55:34:ef:b2:53:2a:f9:b0:79:75:c7:c0:be:c1:
                    b6:bb:d8:e5:af:71:e2:35:f3:47:4d:20:6e:90:43:
                    f1:11:5e:c2:d6:28:6f:2e:48:39:04:59:bf:dc:44:
                    ef:98:91:01:41:73:86:7c:c7:ab:4b:f0:f2:e5:69:
                    61:cd:0d:09:62:14:fc:61:92:09:70:d6:5d:15:b3:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C0:60:E7:A5:69:FF:67:D8:68:7D:24:18:10:47:30:B7:0B:31:AC
            X509v3 Authority Key Identifier:
                keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/905F258E24F211EEA0863328C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.9.179.0/24
                  203.9.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:1c:6d:a0:62:32:f9:6a:6a:10:68:91:fc:c5:6c:a4:e1:
         b3:1f:d5:57:ca:a9:8a:1a:e6:62:cd:da:c8:4b:93:97:f5:6c:
         32:50:e6:38:a4:53:e2:b4:dd:d7:4b:1a:e0:5f:75:a5:39:de:
         16:dc:9c:2e:89:f3:45:bb:24:4e:1d:cd:d5:30:8c:ef:24:ee:
         3a:a7:72:c4:a8:8c:0f:ea:69:c7:75:c3:d0:6e:50:f4:ed:17:
         00:8d:02:26:64:cc:55:4a:e1:36:0f:e4:25:8c:7b:7b:fa:6d:
         09:02:d0:44:79:7a:ec:b1:c0:39:f8:fa:37:58:1e:36:a2:44:
         92:2b:c2:7e:e4:73:2d:62:97:c3:ef:23:99:c9:89:2c:98:13:
         cf:17:39:b1:53:27:2c:57:bf:c2:4a:35:9c:4b:15:8c:f7:6f:
         30:41:1a:56:ed:ee:b1:b9:81:dd:f1:20:1c:52:f0:0d:34:b2:
         7e:cf:d8:05:7b:f6:f6:83:49:24:e4:98:ab:b4:8f:6f:d7:73:
         26:8d:42:66:18:ae:c7:ad:9b:0c:d6:75:b3:a9:13:d5:dd:af:
         9f:ee:6e:b9:ab:41:61:27:6a:04:02:15:a6:2b:46:f5:57:52:
         c0:01:af:57:3b:f6:4c:58:ef:43:1b:08:d3:42:ae:99:49:5f:
         8d:36:33:8a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1
MUNDQUQ4NTcwHhcNMjYwMjAyMjMxOTQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzkyYi1jNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoGBJiy4DuhGdwH5JbrDM9F5FX53KtDWw59AAHcet+V5u4O/yBX/NXAF6yAfX
I4ntgn6TtCvIxZaJ0+KtpLuKrq2ujZwO+JPZre4pE1ZKVdbGA2Z26qfCDyMggR8x
DSwUr5fFSKsdy+mBVI/p0DbacS8Z27bEkOxCQxlj8HTuNgke6TCgLFvfWjUWeeYF
reJjofprpWbzzrU4AzhP0KMyOEtH2pA8iDpeRmrTVzlp5WnKcx8cVTTvslMq+bB5
dcfAvsG2u9jlr3HiNfNHTSBukEPxEV7C1ihvLkg5BFm/3ETvmJEBQXOGfMerS/Dy
5WlhzQ0JYhT8YZIJcNZdFbM2kQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPLAYOel
af9n2Gh9JBgQRzC3CzGsMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx
OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjQyNjgvQzc4RUJDRUEyMTkzMTFFQzkwMEM1NjUzQzRGOUFFMDIvOTA1RjI1OEUy
NEYyMTFFRUEwODYzMzI4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAywmzAwQAywm1MA0GCSqGSIb3DQEBCwUAA4IBAQBAbhxtoGIy+Wpq
EGiR/MVspOGzH9VXyqmKGuZizdrIS5OX9WwyUOY4pFPitN3XSxrgX3WlOd4W3Jwu
ifNFuyROHc3VMIzvJO46p3LEqIwP6mnHdcPQblD07RcAjQImZMxVSuE2D+QljHt7
+m0JAtBEeXrsscA5+Po3WB42okSSK8J+5HMtYpfD7yOZyYksmBPPFzmxUycsV7/C
SjWcSxWM928wQRpW7e6xuYHd8SAcUvANNLJ+z9gFe/b2g0kk5JirtI9v13MmjUJm
GK7HrZsM1nWzqRPV3a+f7m65q0FhJ2oEAhWmK0b1V1LAAa9XO/ZMWO9DGwjTQq6Z
SV+NNjOK
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:30 2026 by rpki-client