Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/3CFFB50C8E0E11F0BA4BBC76C4F9AE02.roa
File:                     3CFFB50C8E0E11F0BA4BBC76C4F9AE02.roa (raw, json)
Hash identifier:          l2GJWIARN7MzfCbBxUJaDZWMxWt7HuHv1V0AMcKuvC8=
Subject key identifier:   6C:1E:28:38:B5:2B:C2:C5:4F:28:9C:FB:85:1F:51:9A:88:00:AD:0B
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       02CC
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/3CFFB50C8E0E11F0BA4BBC76C4F9AE02.roa
Signing time:             Tue 03 Feb 2026 01:21:18 +0000
ROA not before:           Tue 03 Feb 2026 01:21:18 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137443
IP address blocks:        115.42.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: Feb  3 01:21:18 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69814d8e-8179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:c8:2c:0f:6f:15:dd:fa:d2:0c:d7:08:ad:
                    70:56:f3:70:08:a9:ec:52:5f:23:a6:e6:4c:d0:6e:
                    7c:ba:6a:19:ff:3f:a4:00:d5:79:1d:d9:b1:86:04:
                    ca:2c:2f:0d:71:f3:e3:6e:56:e0:3b:ca:e2:02:fd:
                    49:17:6a:ae:4c:75:72:12:91:87:f8:8b:dd:30:11:
                    7f:a7:67:0e:7d:35:2f:a9:36:08:5b:e5:37:17:02:
                    09:e8:7a:bf:82:69:fa:86:80:ea:2a:4e:64:58:92:
                    56:1b:14:d0:86:b7:c2:18:2b:94:7d:06:42:d7:bb:
                    1a:43:51:1e:04:87:f1:cd:af:9a:d9:22:73:aa:9f:
                    d5:67:89:23:0f:38:69:f2:7f:b3:a3:34:fb:ca:2d:
                    31:f8:8c:99:27:30:ec:83:d9:f8:a1:1a:91:63:82:
                    2e:f4:d6:3a:34:95:7a:cb:44:35:41:38:e0:6b:17:
                    15:d7:da:3e:25:dd:76:af:f9:e1:13:7c:73:6a:63:
                    98:7e:8f:30:8b:5a:40:8e:7e:e6:46:65:ee:b4:03:
                    0f:3f:c4:c5:78:2f:cd:da:0e:e0:6a:f3:bc:1b:c2:
                    e8:7f:92:f9:18:07:d4:32:cf:17:cf:9c:79:37:4b:
                    b3:e0:a7:58:ac:5d:72:34:aa:cd:f0:fc:eb:22:fd:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1E:28:38:B5:2B:C2:C5:4F:28:9C:FB:85:1F:51:9A:88:00:AD:0B
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/3CFFB50C8E0E11F0BA4BBC76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:cd:77:99:2a:6d:4b:57:e5:a1:3c:74:9f:f4:97:63:02:fc:
         ce:34:1f:f5:80:ec:93:3c:f5:38:e8:d6:ce:12:9d:4a:42:f8:
         a5:d7:8e:c8:59:c4:fc:35:b4:ec:47:29:bf:11:a8:d2:1b:8a:
         d8:a1:a8:d9:39:63:ba:b7:e9:73:33:0b:d8:58:5e:68:9b:14:
         f4:09:09:96:05:99:ca:da:87:36:8c:b5:c6:cf:23:9e:f9:3a:
         53:e5:64:39:e8:25:ed:66:4b:9e:fe:21:ae:06:66:b3:04:0a:
         75:a8:d2:95:ba:df:58:01:30:50:fc:13:7b:28:83:f8:cf:07:
         99:7a:81:e2:4f:5e:48:a5:28:56:52:4b:70:93:f3:03:c5:5a:
         1e:65:a1:1f:f1:be:06:e2:2c:69:c7:05:73:aa:43:24:df:59:
         08:c0:8f:4c:2b:d6:4f:40:44:3d:52:af:79:05:22:fa:e5:0a:
         2d:32:62:eb:35:ee:2f:b8:f4:74:5a:fd:11:6c:51:e8:93:c5:
         3a:0d:5f:68:55:e7:97:66:e6:ea:c9:cd:06:58:44:77:22:af:
         b6:3b:4d:9f:1e:6d:81:b3:00:c1:21:02:8e:8d:e8:21:f8:76:
         89:6e:fd:4c:47:e2:ce:02:53:00:df:71:4d:3d:c3:50:ee:94:
         01:7b:a5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:28 2026 by rpki-client