Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa
File:                     A9925838F47E11F092821EB06E6F56BC.roa (raw, json)
Hash identifier:          FRcmMNV6jTrvGYt/fDUfSzb2yAQ76TcTXcoOkkuvBHM=
Subject key identifier:   8D:A4:95:43:6A:5F:D9:87:4F:3F:C2:9E:46:47:A0:BD:79:6E:FE:75
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       020B
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa
Signing time:             Wed 13 May 2026 04:36:11 +0000
ROA not before:           Wed 13 May 2026 04:36:11 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133157
IP address blocks:        157.10.134.0/24 maxlen: 24
                          157.10.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: May 13 04:36:11 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a03ffba-7a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f0:3e:b1:bc:fc:8f:a9:8d:a0:97:2a:54:be:
                    12:e1:11:25:b2:0b:df:2f:79:9e:c3:72:03:dd:d4:
                    23:7a:83:50:98:35:cb:5e:84:65:69:26:f6:cc:61:
                    34:9b:eb:5c:ab:f0:93:68:22:5c:3b:36:30:cb:4c:
                    80:d2:7f:07:88:f9:89:f8:7e:c1:7a:9d:00:14:3c:
                    0c:a7:0b:ad:d4:bc:47:af:a9:e8:9e:03:7c:3f:5c:
                    ff:88:c5:5f:70:4d:12:00:fd:30:57:47:0d:b9:8f:
                    5f:92:88:4f:81:e4:ca:b0:35:df:fa:7e:a1:eb:b4:
                    46:87:f0:1c:0d:82:2a:61:2c:e3:f6:6d:22:35:a0:
                    ac:9c:33:89:5b:73:94:2a:59:07:78:b5:b3:19:8e:
                    46:70:ba:cb:7f:f4:fa:ee:58:41:68:a2:3e:e9:4e:
                    72:fc:bd:da:d6:68:dc:c7:53:78:ae:6f:a7:91:fc:
                    aa:96:08:6c:30:02:f2:94:16:7d:fd:cf:15:ef:b7:
                    5c:96:50:b3:4f:cc:a3:2f:d5:7c:f3:40:6d:26:4c:
                    95:cc:36:72:31:b2:24:99:7d:da:e0:64:a8:35:af:
                    78:cc:1d:a3:42:18:5c:97:1e:9d:46:7a:bc:d5:52:
                    69:ee:43:a9:7f:8b:19:16:73:b2:bd:7a:58:b1:b4:
                    f1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A4:95:43:6A:5F:D9:87:4F:3F:C2:9E:46:47:A0:BD:79:6E:FE:75
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:67:ba:d0:ab:ef:e2:38:3f:62:2e:ed:ad:87:89:88:55:b1:
         ce:29:6a:b1:2f:b5:5b:0c:fc:35:9b:f7:e7:d6:59:f6:5e:13:
         28:ee:cc:09:f1:17:c7:d1:36:8e:61:83:d3:19:2d:e2:ec:cc:
         3b:34:06:94:18:67:25:83:98:e9:da:81:cb:2e:97:14:bc:37:
         6d:67:c7:2e:1d:bd:64:4e:b8:b2:a0:f8:e0:f7:9c:b5:90:b6:
         fa:d9:de:f5:21:71:7a:c0:ef:95:58:44:23:7c:87:1f:db:f6:
         cf:d4:cf:98:48:b8:74:ab:fd:51:c9:a5:ce:96:6d:e1:7e:27:
         48:8f:c6:f4:5b:c0:62:78:5d:ee:55:f5:e4:aa:5e:b3:27:d5:
         69:5d:44:4b:3d:23:9d:89:06:86:fd:2b:79:23:fb:ea:96:6c:
         71:2e:85:d3:15:b6:ca:51:ab:6c:cf:4d:e4:f7:4d:5e:de:7f:
         4b:b6:95:b1:17:c3:ac:20:45:f7:bf:d4:2b:86:d8:42:29:3d:
         bb:0a:2f:69:9f:a6:82:30:fd:ec:20:db:8e:60:e8:ab:91:5f:
         28:ba:d5:6e:3a:bf:05:dc:6a:19:65:0e:f6:58:e3:eb:53:2e:
         80:a6:47:cc:f4:81:e4:ed:58:4c:e8:ba:12:36:86:15:37:a8:
         3c:4d:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:53 2026 by rpki-client