Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/C4BE139C1AE211F1803B92B5413D8C67.roa
File:                     C4BE139C1AE211F1803B92B5413D8C67.roa (raw, json)
Hash identifier:          VzCemJ05XamlG2jC7L0XFu1bU7etE5348AhdfPH2ivQ=
Subject key identifier:   F4:2D:83:BB:A6:02:B4:49:1E:7B:E6:53:A1:9B:D9:CB:E7:2D:AA:19
Certificate issuer:       /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA
Certificate serial:       8F
Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/C4BE139C1AE211F1803B92B5413D8C67.roa
Signing time:             Sun 08 Mar 2026 11:34:29 +0000
ROA not before:           Sun 08 Mar 2026 11:34:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135045
IP address blocks:        165.101.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl
                          rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA
        Validity
            Not Before: Mar  8 11:34:29 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69ad5ec5-e84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:f8:f0:3b:16:ea:b3:59:aa:9e:4c:e4:b9:
                    0c:43:09:6c:82:d3:9b:45:31:6c:33:8b:80:19:df:
                    04:27:74:22:ad:97:b3:63:08:4e:64:8a:9e:25:08:
                    95:be:30:36:37:2f:f9:8d:b3:38:83:2c:eb:b1:c2:
                    39:86:c1:5f:84:32:62:76:0d:bc:8f:40:3a:a4:e8:
                    62:45:f9:ba:72:ff:23:94:dc:74:35:db:be:72:a7:
                    34:76:32:ac:6b:d8:48:35:a2:15:1d:e8:6a:4e:49:
                    4e:7a:d9:44:9b:f4:e6:22:7d:29:7e:f8:84:88:27:
                    e1:ba:3e:be:77:da:ac:2a:fd:a0:0f:0c:3b:da:92:
                    7e:eb:22:c6:51:51:a4:ca:c9:c6:8b:46:e9:e5:fd:
                    fc:5e:09:45:44:2a:9e:6e:e1:9d:80:de:a2:9e:0d:
                    05:3d:d5:53:d7:93:75:4a:bf:9b:00:ce:0e:78:28:
                    ec:e1:48:d2:6f:0e:be:b2:1b:39:16:62:00:62:8b:
                    ec:2e:72:08:e8:d6:70:09:7c:5e:60:ab:56:b1:67:
                    3f:8c:bb:89:2e:7e:33:dc:91:87:26:17:27:53:a3:
                    67:ba:20:76:90:7b:be:91:93:5c:c4:33:b0:0d:85:
                    19:eb:e0:fe:25:76:49:d7:50:f1:a1:1e:8e:b4:e6:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2D:83:BB:A6:02:B4:49:1E:7B:E6:53:A1:9B:D9:CB:E7:2D:AA:19
            X509v3 Authority Key Identifier:
                keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/C4BE139C1AE211F1803B92B5413D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:68:1d:75:a0:d5:9a:1c:32:16:c1:ca:6b:6a:84:18:42:
         4e:34:3d:9f:0d:4c:c3:8b:76:d3:26:9a:df:3c:bc:76:e9:22:
         f7:97:00:19:b7:f6:97:a7:e2:07:81:bd:f3:8c:81:f7:cc:7a:
         95:6b:3b:25:c6:fe:a0:a7:70:9c:40:e5:e0:27:43:27:19:89:
         4a:fd:d4:e7:57:14:a0:49:f0:66:a4:c3:81:9f:6b:a0:f7:a1:
         7a:f5:a5:2f:97:20:ab:9e:95:30:f5:5e:71:52:e9:3e:ad:e3:
         70:b5:72:6d:7d:49:d6:1f:62:90:26:00:ae:cc:a7:00:dd:a2:
         4f:f3:a7:d1:dd:2e:5e:42:76:ef:b9:72:f8:83:c0:ab:c6:c2:
         e6:df:9d:6c:40:8d:3c:bb:74:30:9b:7a:08:2c:5e:2d:0f:65:
         1b:f0:ed:a4:3b:b3:b3:94:0b:18:df:be:10:70:28:03:9b:3e:
         f1:37:4f:9e:68:22:4c:8d:be:7e:9b:64:5d:f2:65:01:ce:8f:
         53:bf:fc:44:d9:ef:33:40:cf:09:0f:9f:c9:45:7c:55:38:e8:
         c0:c3:5d:74:66:36:29:13:3e:ab:30:c6:b6:7a:3f:11:0d:5c:
         58:95:76:eb:b9:3e:33:fd:75:ca:b4:46:b1:ea:df:79:e7:6a:
         6e:7a:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:17:55 2026 by rpki-client