Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/B754B304107A11F19C5931212E3D8C67.roa
File:                     B754B304107A11F19C5931212E3D8C67.roa (raw, json)
Hash identifier:          huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=
Subject key identifier:   86:DD:F2:FF:4E:4B:2F:41:CF:DE:F2:B6:1B:61:7F:B7:1A:4A:ED:42
Certificate issuer:       /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial:       D9
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/B754B304107A11F19C5931212E3D8C67.roa
Signing time:             Mon 13 Apr 2026 06:40:59 +0000
ROA not before:           Mon 13 Apr 2026 06:40:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     400618
IP address blocks:        163.223.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
        Validity
            Not Before: Apr 13 06:40:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69dc8ffb-bcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:12:8d:cb:94:7f:73:7a:c6:8a:5d:d2:75:
                    2d:4f:29:de:c7:8b:50:70:c9:25:92:4a:7d:49:1e:
                    f7:07:b4:d9:6a:a9:5e:ba:72:b2:8e:71:6b:25:9b:
                    c1:b3:57:94:20:72:ad:a0:81:a7:c0:56:66:05:71:
                    25:52:9b:4e:da:b8:50:ad:9f:73:71:e4:80:71:b9:
                    24:21:09:fa:fa:1e:ac:cf:6b:71:65:3c:27:eb:2e:
                    bc:e7:b3:f4:86:ac:7e:4d:69:53:0b:1e:6c:a2:4e:
                    a8:54:02:ea:0f:b2:8f:f4:04:7a:ad:ea:c0:8e:4a:
                    de:a8:21:87:0a:b9:a8:a8:d7:a9:a8:d4:bf:8f:96:
                    d8:6c:1e:4b:d1:37:43:54:2a:c6:a2:92:5a:7e:30:
                    0a:76:4f:bb:95:0b:9f:cc:97:3d:10:41:03:83:0d:
                    c7:c8:46:51:35:dd:e3:f6:56:22:88:b1:95:13:f2:
                    9f:98:15:8a:92:84:cb:66:39:43:dc:c5:e6:d5:8d:
                    9e:24:cf:c7:8b:d1:98:25:72:17:17:36:71:27:04:
                    1e:be:38:83:c0:b5:b4:9d:6f:7d:67:af:bf:22:91:
                    f2:84:25:1c:04:5b:9a:44:54:fc:6a:f5:37:3d:45:
                    3f:b5:c1:38:96:63:5b:6a:0f:34:82:65:90:99:bf:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:F2:FF:4E:4B:2F:41:CF:DE:F2:B6:1B:61:7F:B7:1A:4A:ED:42
            X509v3 Authority Key Identifier:
                keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/B754B304107A11F19C5931212E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:62:5e:af:6e:2c:cb:a7:3e:f2:16:27:01:2c:bb:c5:0f:4e:
         5c:9b:43:fe:25:9b:66:c5:24:86:35:3a:16:ac:3e:b7:14:c0:
         04:8e:6c:77:10:36:b7:fb:1b:e2:f0:f9:f1:19:22:06:8b:8d:
         de:fe:10:14:1f:f4:1c:14:74:df:62:9f:c6:6a:bc:99:26:1c:
         98:c1:94:4b:1c:a1:58:ee:e4:ff:fb:bd:e3:a7:65:43:dc:03:
         f1:07:85:66:cc:d5:08:e8:17:4a:ba:dc:bd:05:f3:ac:41:9f:
         f9:ee:85:c5:23:df:5f:49:68:d6:a7:25:fa:5d:70:a4:6f:70:
         cd:30:f3:7c:48:ed:a1:70:b0:71:11:d6:bb:70:97:48:8a:76:
         a4:ad:d5:c5:7e:71:4b:44:ed:b4:53:3e:e8:e2:a9:0b:52:85:
         8c:ad:11:6e:56:0e:4f:59:0e:63:a3:98:7a:67:3b:02:50:5d:
         47:d6:2a:8a:71:98:18:4b:53:42:1f:a7:21:d8:a1:06:fc:2a:
         b9:45:ce:77:da:52:5f:0c:85:1a:c2:97:80:f6:b2:89:39:fa:
         0b:69:20:d3:6e:47:39:36:0d:bc:9e:1c:8b:61:33:c8:5c:33:
         0d:e7:c3:48:53:f2:dd:2a:fe:6d:2a:cc:3c:52:01:03:72:8a:
         38:d9:c9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:07 2026 by rpki-client