Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/0BD94EE2639811F1AA3C489A6F47A888.roa
File:                     0BD94EE2639811F1AA3C489A6F47A888.roa (raw, json)
Hash identifier:          356lmc2RqB5Sk367m6XImMAHTq0pPLU7qu0hjEZtvwQ=
Subject key identifier:   61:09:5D:11:CF:FD:A9:AF:A9:B2:C9:6A:40:86:36:0A:A2:64:19:28
Certificate issuer:       /CN=A91F89DB/serialNumber=6327AFE1D08B372FF4FDFA0DC500C5AAF7399933
Certificate serial:       02
Authority key identifier: 63:27:AF:E1:D0:8B:37:2F:F4:FD:FA:0D:C5:00:C5:AA:F7:39:99:33
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yyev4dCLNy_0_foNxQDFqvc5mTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/0BD94EE2639811F1AA3C489A6F47A888.roa
Signing time:             Tue 09 Jun 2026 00:13:31 +0000
ROA not before:           Tue 09 Jun 2026 00:13:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154703
IP address blocks:        162.4.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.crl
                          rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yyev4dCLNy_0_foNxQDFqvc5mTM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89DB, serialNumber=6327AFE1D08B372FF4FDFA0DC500C5AAF7399933
        Validity
            Not Before: Jun  9 00:13:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a275aab-2f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:6c:ef:3c:af:3e:e1:c1:37:72:91:b1:88:
                    6e:cd:f6:43:fe:4e:6b:26:9b:03:9f:73:7c:91:4b:
                    85:e3:d9:ad:a6:b8:3b:2b:d9:33:83:2d:7d:96:ea:
                    a0:56:ad:11:81:6a:47:49:81:f6:49:50:46:16:28:
                    7d:78:a8:1e:19:05:49:e1:54:cf:e6:8d:fa:6d:f6:
                    23:46:30:b1:da:1c:7a:ff:76:9b:a6:9a:b0:99:4f:
                    8a:58:4b:98:d9:9d:4a:2d:12:0d:2e:a4:7a:68:4e:
                    a1:53:bc:5a:76:65:41:15:8d:f9:3c:6d:38:a5:dd:
                    17:e4:8a:12:5e:f2:4e:ee:90:82:4e:32:56:69:54:
                    39:13:98:2f:ec:d0:92:59:aa:12:21:5e:b4:2b:a1:
                    6d:a7:fc:b9:01:3a:fb:ae:e2:8b:b8:d2:d4:f1:9d:
                    5e:75:38:36:88:eb:d7:88:c1:fa:c4:90:ac:e3:cd:
                    73:5b:91:d8:24:cb:23:88:aa:ab:0b:07:27:96:80:
                    3f:e3:dd:26:21:8d:09:68:98:a0:e0:e0:18:68:4c:
                    cf:48:34:bd:46:4b:74:84:2e:30:a2:7b:bb:56:18:
                    0d:b2:be:8b:07:92:3f:6f:97:24:ee:78:3f:57:e8:
                    3d:df:4b:81:5b:fc:ea:34:6d:76:4b:93:da:eb:b3:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:09:5D:11:CF:FD:A9:AF:A9:B2:C9:6A:40:86:36:0A:A2:64:19:28
            X509v3 Authority Key Identifier:
                keyid:63:27:AF:E1:D0:8B:37:2F:F4:FD:FA:0D:C5:00:C5:AA:F7:39:99:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yyev4dCLNy_0_foNxQDFqvc5mTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/0BD94EE2639811F1AA3C489A6F47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:02:d2:b5:4e:77:fe:cc:53:ac:03:b4:9b:be:d9:97:40:29:
         eb:22:47:cf:43:cc:ce:37:f5:92:26:9a:4f:6d:97:ed:3d:09:
         5e:96:0c:60:64:2c:3c:f1:f2:e7:22:da:91:dd:e4:1d:3d:ea:
         8d:72:1e:c7:fd:6b:3b:e8:dc:b5:c4:1a:00:f8:e7:9d:f9:99:
         27:72:08:aa:9b:08:74:ae:59:0a:09:fe:ca:ac:0c:2d:1e:ef:
         05:d1:7e:cd:09:66:22:0b:55:18:29:7b:3a:b6:e2:ba:78:79:
         ab:4c:64:f2:67:d9:b6:8a:35:43:77:e9:92:96:41:26:44:91:
         0d:88:76:b2:c9:c8:2c:9c:7d:4e:0f:db:6f:53:2e:14:a5:08:
         ab:78:11:07:2a:ff:94:b9:e3:4b:f0:4b:d6:fe:e9:d0:56:33:
         84:3b:ce:25:91:02:8a:eb:04:b0:68:ff:f5:77:3f:c3:bd:23:
         a2:6c:1b:a0:37:61:b3:4b:f5:46:4a:98:08:71:28:a7:da:49:
         e1:e2:62:23:9c:7b:af:45:67:32:b4:62:ca:30:1e:ab:62:bf:
         9b:a4:70:0b:84:27:51:c3:e6:89:e6:3f:98:d7:af:9c:af:00:
         a7:8c:96:7c:1d:e4:88:5b:d7:a3:70:b8:19:c3:b9:12:45:97:
         44:82:cf:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:52:07 2026 by rpki-client