Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/1F388278205F11F0A895DE1EC4F9AE02.roa
File:                     1F388278205F11F0A895DE1EC4F9AE02.roa (raw, json)
Hash identifier:          3fG2xSQYFFInAFhuIsOyJ8jvQ4PTgeRTg6IF8vTLUVw=
Subject key identifier:   A4:EA:D2:C3:5F:42:00:CF:3A:FD:85:23:58:F4:49:4E:F5:C7:09:55
Certificate issuer:       /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial:       025F
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/1F388278205F11F0A895DE1EC4F9AE02.roa
Signing time:             Thu 30 Apr 2026 05:33:23 +0000
ROA not before:           Thu 30 Apr 2026 05:33:23 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     40605
IP address blocks:        185.254.242.0/24 maxlen: 24
                          185.254.243.0/24 maxlen: 24
                          213.139.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
        Validity
            Not Before: Apr 30 05:33:23 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69f2e9a3-85fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:4e:81:f7:f7:a6:8e:1b:49:dd:e3:6a:4e:
                    cc:46:7f:0f:9d:1c:c2:80:7d:44:28:99:9f:25:ec:
                    43:7a:d9:e4:c8:81:5a:4d:87:44:8b:66:28:88:b2:
                    48:65:31:99:9f:f4:a5:92:6b:60:0f:d9:3a:2b:26:
                    12:28:b6:f0:fe:c5:d3:5d:be:5b:cf:fc:bd:4c:ee:
                    99:76:db:e7:d7:1c:c5:80:8b:3a:1e:a4:bc:c0:7d:
                    21:4a:8c:25:38:73:f7:c9:de:fa:98:a9:aa:06:91:
                    92:0d:ea:13:1d:85:01:09:7e:8a:93:ac:e0:1d:1f:
                    cb:81:b8:27:32:b1:8c:a3:89:2b:17:61:46:b0:22:
                    2d:28:ae:43:88:d7:fb:05:cd:45:07:b7:8a:05:d6:
                    2c:85:12:12:cb:52:a1:51:9a:d2:94:71:4e:a5:1d:
                    c7:23:bd:55:25:63:03:c3:16:a2:9d:cb:8a:32:76:
                    b6:07:63:99:4b:fc:b4:f1:08:9e:64:41:84:78:a0:
                    73:e6:a7:04:99:7a:82:4c:2f:e9:30:92:41:7e:5f:
                    26:a1:7f:d3:82:db:e8:83:44:1a:1b:d0:fb:41:c7:
                    e1:fb:b8:f1:dc:61:66:cf:2a:f1:9c:46:b6:8d:06:
                    15:82:6c:ca:b5:84:7d:13:2d:13:ea:d5:c3:1f:36:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:D2:C3:5F:42:00:CF:3A:FD:85:23:58:F4:49:4E:F5:C7:09:55
            X509v3 Authority Key Identifier:
                keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/1F388278205F11F0A895DE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.242.0/23
                  213.139.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:2a:e8:2f:f6:8d:5d:b9:9e:e4:83:66:96:21:bb:30:38:8e:
         a0:b6:99:3e:5b:39:1a:bd:9a:45:35:4d:fd:a4:80:a4:8c:9f:
         0d:b6:88:a0:90:c9:ac:25:35:76:71:f3:59:8d:cd:5f:23:1a:
         50:18:13:a4:b5:95:f7:f4:95:bc:d1:df:9c:4c:95:69:8b:90:
         3d:8b:9c:2f:f3:b2:da:18:a0:cf:14:01:9a:47:04:69:4c:82:
         a0:2e:f4:73:59:59:e3:52:02:1c:2b:e9:8a:b5:82:2b:ba:6b:
         24:6a:ed:e7:9f:6c:c8:29:58:16:36:13:4c:e4:37:85:c0:f2:
         61:b4:e5:69:b6:2a:ee:f0:b7:18:62:15:33:81:25:71:df:a6:
         19:f3:c9:28:c7:ce:be:e3:a7:34:50:67:57:08:14:05:bf:bd:
         36:cc:f3:8e:e8:b2:94:39:94:e9:7b:67:76:30:c7:b7:41:78:
         3f:13:48:ec:8d:dd:ff:e6:50:9f:13:ed:84:19:00:44:f5:50:
         92:3e:33:70:39:1f:51:dc:9e:48:fc:bd:5d:48:86:97:3a:e2:
         aa:bb:64:2b:f0:84:f3:df:72:62:05:83:d4:eb:d8:45:a8:c3:
         9d:34:60:ab:be:ce:ad:20:bb:c7:d5:f3:9a:ab:9e:b9:20:61:
         17:24:ab:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:41:40 2026 by rpki-client