Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/264C45FAFA3F11EE8A884F09C4F9AE02.roa
File:                     264C45FAFA3F11EE8A884F09C4F9AE02.roa (raw, json)
Hash identifier:          DhtcaUMqqCMW/cXHm6qDVJ4p8jBXsfCnZxdH4xPuRuE=
Subject key identifier:   FF:FD:B9:2A:AE:A3:A8:1A:E2:78:FD:31:0B:98:C7:FB:D1:D1:29:12
Certificate issuer:       /CN=A91DC459/serialNumber=C8215049A5EC11365FB6740B821706762680AD17
Certificate serial:       0166
Authority key identifier: C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/264C45FAFA3F11EE8A884F09C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:34:04 +0000
ROA not before:           Mon 21 Apr 2025 05:01:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152682
IP address blocks:        119.160.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC459, serialNumber=C8215049A5EC11365FB6740B821706762680AD17
        Validity
            Not Before: Apr 21 05:01:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59fdc-be76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a6:33:92:4b:b0:58:d8:21:5b:39:ae:dc:a3:
                    73:8a:9d:b4:ab:80:24:78:a8:e6:e0:de:3d:f3:6a:
                    a9:50:49:28:6c:34:aa:ca:5c:79:30:48:af:54:06:
                    fc:a9:b1:12:fd:5c:7c:27:c7:82:1a:c5:8b:79:bd:
                    d4:3a:36:f1:e0:82:67:d7:f8:7d:b0:61:21:6c:8b:
                    1d:48:9d:0c:2a:29:07:88:d9:e3:93:83:5a:f0:ec:
                    1e:34:88:df:54:99:aa:76:bb:51:89:b9:4f:e3:79:
                    f2:e0:89:2a:98:4e:0b:14:3c:77:7d:ec:1e:03:95:
                    d0:25:27:aa:76:c7:01:48:d2:45:1c:5e:27:cf:96:
                    df:92:fc:68:6e:85:d8:05:c0:71:37:cf:b2:03:b2:
                    a9:cb:13:cf:e0:b9:a3:82:f3:d2:43:31:d7:cc:b6:
                    95:ab:45:12:70:0a:aa:df:06:72:ae:e7:26:23:07:
                    6a:ba:ec:39:cd:94:f9:d9:27:e0:82:b8:9e:77:f6:
                    6b:97:4e:c0:4e:ab:4c:55:f6:a1:49:ab:38:cc:d4:
                    90:23:d6:02:82:da:e0:2f:62:88:1e:20:8c:a6:85:
                    19:3a:3c:b8:f5:36:c3:8d:18:27:3a:ba:97:a8:75:
                    cb:81:11:cb:ba:61:5a:75:f0:3b:d4:4d:9c:15:f6:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:B9:2A:AE:A3:A8:1A:E2:78:FD:31:0B:98:C7:FB:D1:D1:29:12
            X509v3 Authority Key Identifier:
                keyid:C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/264C45FAFA3F11EE8A884F09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.160.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:54:0f:ce:1a:f2:b5:43:6a:1b:64:97:38:0b:91:94:cf:8e:
         5c:2b:92:b6:5f:84:cb:d5:ee:43:f8:39:a3:60:ea:78:9c:03:
         a3:ce:3d:44:24:7c:f4:d4:95:d6:de:69:a9:16:81:7b:9d:9f:
         96:e2:c6:09:4f:b9:fd:64:95:83:f7:a2:12:f1:6c:73:a9:17:
         f3:d2:b0:92:5c:9b:ce:52:ac:ed:8c:a9:07:36:f1:f0:12:c4:
         58:fe:e0:05:91:ac:47:71:41:07:fc:df:c9:84:0b:ef:55:fd:
         8f:ac:0b:7b:3d:32:55:bd:3b:7e:27:f2:0f:fe:92:82:d7:c1:
         e4:50:e1:6d:86:7b:2e:bf:f4:3a:ce:84:94:4e:e0:8d:56:37:
         7a:42:d2:3d:4f:a1:52:db:69:ec:9f:db:a3:2e:02:a9:c7:0d:
         38:ee:b9:b5:5e:51:f9:15:69:eb:60:3b:55:9b:e8:54:00:be:
         ef:3d:76:af:3f:42:fa:57:79:07:26:f9:97:f3:54:a1:5b:4a:
         4e:67:6a:b0:d5:0b:7c:92:5a:46:ad:be:18:6c:03:b3:70:7c:
         85:33:60:84:7d:a2:ee:e6:ed:ea:06:7e:88:ef:d1:01:a5:1c:
         11:2f:c7:53:dc:e9:6c:4f:45:70:ac:96:88:a2:39:c6:e2:fe:
         b3:89:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:49 2026 by rpki-client