Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
File:                     F9424C6C80FA11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          kA6NvISB8IT/6NkuxuF6Q7P9ApF1p1wHgdDAw6Jwa34=
Subject key identifier:   66:06:31:01:ED:AA:8B:DE:F1:AE:57:50:4C:A8:CF:8A:3E:07:3A:CF
Certificate issuer:       /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial:       02C0
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:28:48 +0000
ROA not before:           Sat 27 Sep 2025 02:30:35 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     7575
IP address blocks:        138.80.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
        Validity
            Not Before: Sep 27 02:30:35 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a44d20-600e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:ab:92:98:c0:73:fe:c4:8f:ea:01:37:22:
                    0c:5f:24:cc:7c:89:f8:84:5c:d2:be:2f:e4:09:6e:
                    be:9b:5c:ac:a1:e7:37:11:ab:f1:59:4b:51:e1:a6:
                    d7:9e:9a:ef:0d:03:c4:f9:1e:96:98:87:5f:21:42:
                    32:25:04:f3:ec:aa:9a:58:e7:d3:2d:47:f2:c6:d0:
                    e5:e9:96:3e:88:3d:17:c2:df:1a:ae:d8:4c:4d:c3:
                    03:c0:a3:14:b0:ec:02:93:43:bf:37:d5:fa:f1:12:
                    47:43:07:20:9a:1c:6b:e2:ee:ae:2e:e9:29:95:6f:
                    b7:60:de:44:09:e5:53:67:7e:15:77:96:33:34:17:
                    32:af:46:35:bf:1c:06:0a:90:2f:71:e8:f8:82:8a:
                    82:7a:f2:45:18:4a:f2:86:5e:83:24:6f:a3:c2:f1:
                    a3:1c:74:8f:ba:a6:2b:13:ef:ba:9a:f7:ad:a0:43:
                    06:d4:71:9b:08:2c:54:c7:f3:e9:c0:84:62:12:61:
                    47:8e:0e:22:1b:db:c7:41:3c:43:21:d8:12:24:8d:
                    1d:11:f3:4a:1a:ff:e5:79:9b:ba:19:93:cb:a4:0a:
                    9e:ed:98:f7:35:cb:27:18:db:73:fc:86:58:37:c2:
                    4b:0c:e4:eb:25:78:f8:7b:f7:84:81:15:f5:20:fd:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:06:31:01:ED:AA:8B:DE:F1:AE:57:50:4C:A8:CF:8A:3E:07:3A:CF
            X509v3 Authority Key Identifier:
                keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:c0:1f:59:a8:53:fe:74:16:57:3c:21:98:ea:5d:8c:a1:92:
         c0:96:98:ea:da:0f:f2:66:00:dd:cb:1d:c2:41:59:84:2a:f8:
         54:27:6a:f3:7a:26:14:10:7c:69:1a:f6:0c:d6:4f:0a:fe:7c:
         8d:3d:a9:c0:d3:03:ad:36:17:ca:b7:d3:29:66:c5:49:f7:03:
         63:52:59:45:08:90:ba:d0:ab:3a:3b:7c:e9:b3:49:57:89:a0:
         8d:6d:5e:f0:e4:a1:d4:fe:53:6d:50:1c:41:e3:8c:59:62:c1:
         24:a0:c2:e0:fd:37:7d:00:b4:cf:22:d7:8c:cb:a2:dd:66:a0:
         d8:5f:ac:f4:95:7e:dc:1d:58:e0:d4:7d:b6:fc:0e:b9:6f:36:
         ec:91:38:18:46:bc:bf:fa:cc:4d:95:77:ce:2c:28:7c:f1:18:
         06:90:18:1b:1f:19:2e:3b:73:26:e8:10:fd:54:54:d0:df:c8:
         74:be:0f:f8:d2:5f:1a:bb:28:a1:41:10:50:d1:c7:32:3f:5d:
         4d:e0:40:28:8a:37:95:20:00:b0:bc:d6:e0:31:ba:56:7f:2b:
         33:ec:6d:79:f9:1c:92:b0:46:31:a0:6d:c3:44:4e:e6:ff:29:
         37:e8:b0:fc:1d:1a:18:13:c5:0c:6d:f7:1c:ad:d7:2c:9b:71:
         ad:bb:dd:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:53 2026 by rpki-client