Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/E84C2B9083D711EE871C4048C4F9AE02.roa
File:                     E84C2B9083D711EE871C4048C4F9AE02.roa (raw, json)
Hash identifier:          baXnAWpmWHmpgnfFDG1+WkWi97Ed0TsVeq4m6wjaigM=
Subject key identifier:   31:8B:97:70:B3:2D:53:FF:CE:EE:B4:28:70:89:4E:B2:24:5B:89:83
Certificate issuer:       /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Certificate serial:       01B6
Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/E84C2B9083D711EE871C4048C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:01:34 +0000
ROA not before:           Thu 01 Jan 2026 03:22:36 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     136774
IP address blocks:        45.65.56.0/23 maxlen: 23
                          2001:df3:5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
                          rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9CD7, serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
        Validity
            Not Before: Jan  1 03:22:36 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a41c8e-d4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:00:17:73:0e:2f:70:86:e8:96:5a:f7:82:
                    f7:e9:ed:28:55:23:ad:54:c7:d4:13:67:5c:fe:87:
                    ed:e2:f7:03:2e:4a:43:5e:61:e5:1b:27:cb:10:41:
                    7e:d1:da:11:c8:05:08:45:9e:e5:27:35:84:53:50:
                    cd:61:1c:28:5e:13:09:8f:42:f1:d3:f5:a2:06:69:
                    e9:35:09:4f:8e:88:72:08:98:cd:58:b4:05:35:ca:
                    da:c5:a3:59:47:c7:aa:04:f4:d2:35:17:36:2c:9d:
                    ae:fe:91:80:eb:15:fd:6d:7d:7b:05:95:3b:9a:3b:
                    66:49:fb:72:1d:3d:65:d1:2b:60:c2:45:d5:e2:8c:
                    b8:0f:f8:7a:39:39:1e:f0:7f:3d:db:8d:ce:68:4c:
                    31:44:da:8d:a6:c4:e6:d7:16:5e:dc:64:77:aa:09:
                    17:04:6b:88:10:64:52:09:94:b7:c9:8e:34:52:99:
                    cd:93:9a:17:aa:96:59:a6:66:24:9d:35:44:e0:18:
                    03:33:b8:82:3f:b5:b2:e0:fa:b9:2a:1b:a9:c8:9c:
                    1f:5d:29:8b:03:76:d2:b9:f1:56:74:61:65:e1:c5:
                    64:00:4b:6c:09:6e:66:93:b4:84:6c:05:11:3b:62:
                    8e:56:38:7c:01:a4:48:f2:0c:c5:72:96:91:96:a7:
                    47:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8B:97:70:B3:2D:53:FF:CE:EE:B4:28:70:89:4E:B2:24:5B:89:83
            X509v3 Authority Key Identifier:
                keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/E84C2B9083D711EE871C4048C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.56.0/23
                IPv6:
                  2001:df3:5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:0a:4d:f9:a6:2e:c8:5a:15:58:b8:65:14:b8:4c:7e:ad:d0:
         a6:9e:c7:41:76:0d:16:f8:76:fa:4b:ba:70:87:af:e0:e3:ef:
         4f:6b:0e:7e:a5:e5:3d:ad:af:25:a7:40:c6:c7:ad:39:90:ad:
         aa:cd:2d:97:f9:66:d0:8f:cc:2f:10:ca:3f:0e:21:55:20:ff:
         6a:2e:85:0b:dd:90:5a:37:a5:38:72:d6:7d:9f:d2:a3:ac:72:
         13:6c:06:22:5c:4b:b4:26:9f:f5:d7:b0:3d:42:9c:b8:23:5c:
         08:f1:ad:1e:21:f7:27:40:51:40:f3:6e:a6:5a:28:46:a6:95:
         5c:d8:b2:12:68:bb:a8:3a:d8:4b:60:7b:4f:b1:69:12:df:7c:
         b7:9a:ff:35:8a:34:87:30:26:fa:66:29:02:e2:88:33:83:44:
         26:79:46:1e:74:2b:ef:94:d1:10:d0:09:1a:28:3e:1d:88:cb:
         f1:54:70:20:0e:6a:9a:4f:d1:91:fa:16:aa:a9:4d:df:63:7d:
         bc:06:86:d0:38:4c:e5:30:da:0b:c9:eb:96:b2:83:63:9d:3c:
         a7:91:1d:c9:ff:8a:1b:14:83:62:9f:ae:f4:02:29:03:f2:a1:
         31:91:77:f9:9f:1c:9a:8b:76:52:3a:06:1b:a1:df:d5:b6:4a:
         12:35:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:47 2026 by rpki-client