Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/07063FA4134B11F0B48EFA0AC4F9AE02.roa
File:                     07063FA4134B11F0B48EFA0AC4F9AE02.roa (raw, json)
Hash identifier:          yRpg8YzN41NYB9rsIYgkG05og6BR0pcJnbn3a4gO0DU=
Subject key identifier:   6A:46:58:C1:1F:10:D9:8B:C2:34:32:2A:B0:2D:FE:EF:93:0B:B2:7E
Certificate issuer:       /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
Certificate serial:       AD
Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/07063FA4134B11F0B48EFA0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:18:18 +0000
ROA not before:           Fri 09 Jan 2026 06:24:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152164
IP address blocks:        210.79.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl
                          rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
        Validity
            Not Before: Jan  9 06:24:50 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4207a-c592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:b2:96:d4:3f:56:f4:40:41:b5:7e:5a:8c:
                    27:dd:60:6c:de:14:d1:3c:61:14:ca:71:cb:33:aa:
                    53:41:89:ce:da:e6:69:a2:fe:6e:16:6e:13:fa:4b:
                    12:d5:b0:bd:01:c9:02:86:f9:6b:13:72:20:8c:80:
                    64:b7:ae:a4:e5:df:bc:61:f4:76:88:06:2c:92:8f:
                    a7:3d:4e:dc:7b:44:7e:de:12:43:a9:10:a9:64:4f:
                    e5:51:38:5b:17:14:05:6e:2b:94:06:49:8a:b8:6c:
                    aa:65:d6:49:76:63:7a:9b:9e:c2:c0:70:cf:ed:cc:
                    69:9c:99:4b:4f:20:67:ae:a7:7c:91:ce:96:02:68:
                    0e:2a:3c:dc:fc:1e:af:47:a9:24:7e:69:97:d5:86:
                    8b:f2:54:ed:7e:87:61:38:c7:8c:04:f5:e8:cd:51:
                    55:43:2f:a4:f6:67:ca:41:67:9d:bd:f0:b3:da:49:
                    e3:e4:ff:9a:81:81:10:40:4b:48:0b:c5:44:6f:4d:
                    a1:71:92:6a:56:83:ad:0b:8b:18:72:bf:5e:21:0a:
                    57:3f:38:ba:70:6a:b2:b8:5c:cb:dd:99:b0:db:29:
                    49:46:4d:86:b2:17:db:36:2a:e6:7d:79:bc:0a:61:
                    67:2e:2f:dc:ec:ab:b3:2b:cd:63:30:36:a9:bc:cb:
                    49:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:46:58:C1:1F:10:D9:8B:C2:34:32:2A:B0:2D:FE:EF:93:0B:B2:7E
            X509v3 Authority Key Identifier:
                keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/07063FA4134B11F0B48EFA0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:f6:e9:7a:ed:b4:ca:1d:cd:17:0a:da:1e:1b:6e:a9:42:
         8f:51:f0:5c:b0:d8:79:b9:ee:de:8c:34:aa:80:74:a9:2a:a7:
         47:f7:09:01:09:31:47:61:f8:59:6b:16:54:c3:90:7b:8c:b7:
         df:58:7e:a1:93:7a:bc:7a:4e:d3:99:0a:e5:e8:f8:06:d2:61:
         cc:ba:c9:04:cf:2d:f8:ca:4c:4e:11:2d:80:08:ba:2d:7d:f8:
         b6:63:fe:3e:60:62:2c:4d:ac:d1:6f:0d:05:f4:b6:38:41:98:
         3c:48:b9:20:a8:c7:c2:6d:f4:9a:7d:ab:43:d8:c7:42:52:ce:
         1e:1c:57:a7:9c:29:ef:35:0e:41:08:ea:c6:bb:49:6e:cb:ff:
         d4:20:e2:e5:5f:69:98:cb:fd:73:53:99:47:2b:a0:ac:b6:ea:
         2b:27:eb:f3:db:84:b9:93:8b:a9:d2:46:12:67:7b:12:00:cb:
         16:56:fe:d6:f3:52:dc:9a:62:bc:28:5b:e3:99:8c:4c:34:7f:
         c1:b6:cc:1c:79:db:33:6e:0e:cf:e1:c2:d2:e4:99:06:98:d8:
         dc:db:28:2e:f8:d9:28:44:7a:9d:ef:c6:d9:17:8a:5c:93:9e:
         4b:14:36:94:29:2d:87:b0:b2:6d:5c:85:c9:8f:c2:78:e3:0c:
         b7:f9:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:06 2026 by rpki-client