Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/FE7346D642CC11F1A52BA276C6833773.roa
File:                     FE7346D642CC11F1A52BA276C6833773.roa (raw, json)
Hash identifier:          U80wdjKrFdkd4k7mDaI1dER/kEU7/YWh7Nwr30a+PjI=
Subject key identifier:   DF:D7:BE:8F:4E:CA:1E:70:9F:8B:90:45:AA:A9:74:63:CE:D1:F0:4B
Certificate issuer:       /CN=A91614E3/serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
Certificate serial:       07
Authority key identifier: 0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/FE7346D642CC11F1A52BA276C6833773.roa
Signing time:             Tue 28 Apr 2026 06:39:23 +0000
ROA not before:           Tue 28 Apr 2026 06:39:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24394
IP address blocks:        167.30.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl
                          rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91614E3, serialNumber=0EC9A8CD66B7EF81D079A0842B263965FE74F8D0
        Validity
            Not Before: Apr 28 06:39:23 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69f0561b-1d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:c0:a6:39:3a:58:9a:1d:5a:da:18:ee:ce:
                    bb:da:bb:2a:a8:ed:16:ef:90:ec:e7:82:4a:ca:62:
                    31:8b:b0:06:90:3e:c8:70:42:86:56:a9:7e:ce:98:
                    b6:5f:5b:82:80:56:71:2c:3c:7e:b4:19:eb:84:61:
                    19:61:b7:bc:fd:27:0c:39:8d:3a:c8:66:3f:85:71:
                    ba:2a:8f:b0:43:dd:ff:90:10:51:85:bc:dc:ee:62:
                    30:8b:e0:d5:46:59:ca:b8:b3:60:bd:36:31:25:db:
                    1d:0f:0a:bc:dc:7d:42:e3:1c:42:a8:2f:ab:c0:ad:
                    3c:8c:b6:8c:da:bb:ec:b1:53:06:e9:c9:4a:83:7f:
                    b0:90:c2:3c:db:3b:f7:e9:c7:06:b6:0c:e3:7f:3f:
                    6e:9f:d8:5a:47:9e:de:40:89:b8:e3:cc:18:5b:e6:
                    8f:91:0f:9b:dc:c3:38:4b:5d:6f:96:3a:f1:6d:27:
                    11:c7:ab:b4:fa:1c:ee:23:9a:fd:52:27:36:85:2b:
                    d6:3d:27:40:c9:8e:a8:06:b0:5e:d6:0d:c7:d8:dc:
                    2d:00:01:d4:44:92:d2:43:20:33:42:77:fd:ff:a4:
                    91:d0:12:44:6c:d0:79:25:4f:39:ba:17:0a:7c:f4:
                    4d:97:08:d0:d6:11:1d:4b:3d:79:22:ad:5d:ed:04:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D7:BE:8F:4E:CA:1E:70:9F:8B:90:45:AA:A9:74:63:CE:D1:F0:4B
            X509v3 Authority Key Identifier:
                keyid:0E:C9:A8:CD:66:B7:EF:81:D0:79:A0:84:2B:26:39:65:FE:74:F8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/DsmozWa374HQeaCEKyY5Zf50-NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DsmozWa374HQeaCEKyY5Zf50-NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/EFB179A03ED111F1A3BC1149B0833773/FE7346D642CC11F1A52BA276C6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.30.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:34:fd:b9:0a:50:f3:f1:06:68:5e:4d:ff:f9:35:dc:4f:60:
         35:8e:46:cd:2e:7f:ec:42:c1:b0:34:c8:64:ca:fe:09:b1:33:
         ce:80:c2:95:23:f3:ef:39:79:ef:8b:ae:c7:06:c3:d3:8f:fd:
         9d:42:3f:4a:a3:1d:03:60:cb:b2:0b:89:ec:25:e1:48:67:22:
         9a:1c:a9:9e:10:de:9f:55:5d:81:47:76:00:b4:b5:c3:39:29:
         b1:f3:5b:b5:75:d1:82:75:fb:69:8a:e2:b3:07:da:30:c7:ee:
         70:c5:ef:ba:b2:0e:00:ae:da:9f:be:8d:9d:ee:19:ba:f0:77:
         0d:05:79:8b:db:14:2a:62:67:c6:3f:66:09:54:4d:32:6a:8a:
         36:da:a1:c2:ce:c3:91:fa:db:57:8a:72:b4:e9:59:30:2a:aa:
         d0:67:89:b9:d8:bc:6e:ba:cd:4f:f7:45:5b:c0:03:54:b2:5d:
         03:65:87:f9:94:77:0c:44:72:b7:50:78:d3:60:5e:d9:c4:a5:
         0c:23:7e:12:45:c1:48:7a:af:6c:66:0a:09:0f:82:29:e9:12:
         5f:03:67:d8:ce:98:59:c3:0f:ea:25:57:cf:66:af:6f:08:69:
         ec:aa:4e:f1:b8:c9:e2:12:cf:f4:fe:d3:eb:1c:b6:02:38:3b:
         ad:af:7e:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 07:11:23 2026 by rpki-client