Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/5462D9FECF7C11F099CF1F43C4F9AE02.roa
File:                     5462D9FECF7C11F099CF1F43C4F9AE02.roa (raw, json)
Hash identifier:          cuURsbxNvtOqTd1FnCF2I2C85rcA4nGp1HY8p4P3GjI=
Subject key identifier:   F2:23:F0:FC:4A:06:E1:36:8D:02:FE:C6:7E:B0:B9:78:9C:AE:6A:46
Certificate issuer:       /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial:       012B
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/5462D9FECF7C11F099CF1F43C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:19:54 +0000
ROA not before:           Tue 02 Dec 2025 12:42:15 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     149287
IP address blocks:        160.191.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
        Validity
            Not Before: Dec  2 12:42:15 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a59c8a-d2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:6b:65:10:5c:90:88:b0:95:2c:82:b7:72:
                    77:fa:c4:4d:62:ad:87:bb:fb:d9:9b:ba:1b:66:1f:
                    aa:b3:e6:7a:da:b1:f9:76:40:a0:ad:37:ac:97:72:
                    4a:cf:fe:05:6a:01:f2:4f:92:1f:53:5d:b9:85:dd:
                    de:a8:86:38:6f:f9:2a:75:7d:32:a1:40:ab:55:2a:
                    0c:c9:f4:16:7f:5b:d7:8d:14:2a:19:d7:84:0f:6a:
                    6d:62:d9:c1:22:ca:93:e2:b0:7e:3f:a0:8f:15:c2:
                    76:5e:38:79:4e:00:1f:0e:dc:40:23:19:36:31:9b:
                    93:4b:cf:49:d0:68:86:b7:96:be:f4:8d:2e:00:54:
                    3d:4c:8a:3c:33:ac:df:2c:4c:82:f1:68:85:71:ad:
                    fc:9d:5a:73:df:62:77:98:27:27:ac:f7:06:a0:ca:
                    14:8d:97:a6:b8:02:42:a4:78:bd:71:a4:47:f3:3d:
                    8d:a8:5e:c8:b4:f8:a1:75:c3:16:12:7d:df:9f:85:
                    8b:59:e6:44:8b:df:b7:a0:b7:30:99:0f:f8:79:b0:
                    5f:b8:ad:4a:20:0d:9a:91:64:6a:e3:24:39:ae:f4:
                    96:24:aa:07:55:0f:5c:d5:be:5b:03:d8:67:00:0f:
                    ce:81:08:f0:54:b7:f2:99:96:9f:b7:f2:e6:45:fd:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:F0:FC:4A:06:E1:36:8D:02:FE:C6:7E:B0:B9:78:9C:AE:6A:46
            X509v3 Authority Key Identifier:
                keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/5462D9FECF7C11F099CF1F43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:46:43:0b:e9:3a:c5:85:0f:3f:2e:90:87:2a:40:12:57:43:
         38:f3:98:cc:55:68:40:1b:35:bf:4d:f2:c5:14:7e:c2:9e:d2:
         95:6e:bc:5a:a4:a8:a9:0b:d9:95:ad:e1:a5:c4:31:eb:d2:d1:
         88:80:c4:b5:11:38:2a:31:53:81:3d:e1:14:28:97:13:f1:56:
         25:69:ed:b5:19:6e:78:9b:bf:8c:68:9e:53:31:30:fb:f6:84:
         b7:dc:81:0b:87:df:2f:04:c4:7c:81:0b:93:46:8d:d7:d1:de:
         37:9d:e0:e3:19:22:e6:ce:66:4b:53:bf:11:96:15:fd:a4:5f:
         85:ba:1c:38:e5:8c:a3:6a:fe:84:40:d0:61:ce:d5:c4:02:35:
         93:7e:07:32:4d:db:39:35:16:06:17:ca:1b:4e:75:e7:99:79:
         f1:21:f4:eb:e0:06:1e:3e:9c:20:bf:2a:95:06:30:72:c6:73:
         f1:44:98:c1:a4:89:71:fc:60:44:cf:32:64:3f:91:ad:db:70:
         bf:89:39:38:63:f0:07:ae:04:47:06:3f:d0:94:95:64:29:23:
         70:80:02:f9:da:62:34:c3:dc:59:0f:24:a6:bb:15:b1:79:83:
         d2:79:68:5b:ad:cd:15:a0:ad:41:d6:f7:a5:02:7f:25:b8:96:
         52:60:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:33 2026 by rpki-client