Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/9ABFC32C94F811EF92676015C4F9AE02.roa
File:                     9ABFC32C94F811EF92676015C4F9AE02.roa (raw, json)
Hash identifier:          0xJgLLQMgNeeyXMGKZCWdqUjam0KGjviyUJK/ppp7i8=
Subject key identifier:   27:4A:C8:F2:E6:88:35:10:CC:05:D9:76:2C:99:7A:4D:70:E1:11:55
Certificate issuer:       /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial:       0106
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/9ABFC32C94F811EF92676015C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:20:01 +0000
ROA not before:           Tue 25 Nov 2025 04:21:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153379
IP address blocks:        2001:df4:82c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
        Validity
            Not Before: Nov 25 04:21:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a59c91-84c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:d7:08:0d:41:5e:03:7a:e1:d5:39:2f:f4:
                    d1:fa:44:52:85:75:32:5a:d1:6e:dd:2d:23:c6:84:
                    de:02:4c:9e:86:b4:9b:3e:3b:db:9f:5f:22:cd:e6:
                    25:4b:59:19:80:9a:d9:f3:9f:e5:88:5e:cf:68:17:
                    b3:68:c5:5d:59:26:e6:01:8a:3f:b3:c7:6e:95:19:
                    7c:57:4e:8c:9f:e8:20:fa:27:2c:01:53:21:f3:a0:
                    74:72:e9:32:25:0e:ef:ca:d2:4b:ba:83:70:97:4e:
                    bb:5f:79:34:2a:7c:6c:43:cc:62:a6:f4:5b:c5:8e:
                    9f:98:45:a1:ae:d7:d0:ea:32:a4:b8:b5:e8:33:fe:
                    98:26:15:9e:ed:15:9c:c1:f0:94:29:1d:86:66:45:
                    bb:26:95:5a:0d:a0:6b:82:3b:87:53:f9:26:41:73:
                    33:91:df:e2:c9:5a:f4:43:4b:f5:ef:78:0f:a9:70:
                    be:d5:aa:b3:77:57:18:3d:98:de:bc:d9:e3:30:8b:
                    f0:be:b0:1e:b9:b2:f7:7b:38:b5:a0:f3:4c:ee:3e:
                    f7:ad:46:07:34:c2:d8:40:eb:23:c2:95:73:a1:13:
                    ce:01:40:d6:37:ed:14:bd:55:05:d8:a3:87:27:86:
                    b8:18:c1:dd:93:d9:25:ff:ae:11:2e:19:53:26:67:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4A:C8:F2:E6:88:35:10:CC:05:D9:76:2C:99:7A:4D:70:E1:11:55
            X509v3 Authority Key Identifier:
                keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/9ABFC32C94F811EF92676015C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:82c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:82:f6:bf:76:cf:6c:fd:59:49:50:1c:a1:00:91:89:59:
         ce:0c:67:02:c8:c7:75:1f:a4:c4:d3:72:93:3c:f8:d3:ab:7e:
         9e:e4:31:05:7e:d9:99:10:dd:6c:b0:dc:31:d3:43:27:fe:55:
         e6:c3:d9:f3:4e:5d:8f:38:60:ae:74:70:fa:0f:a2:60:ea:29:
         e7:83:81:23:98:35:13:2c:95:c8:35:28:36:54:64:79:e3:c7:
         94:1d:9d:26:07:8c:9c:bc:bc:62:a5:5a:a9:a1:9e:27:eb:d4:
         91:03:d1:4c:e7:b3:a7:f7:82:93:4d:8f:ba:db:03:10:e3:f3:
         ec:f5:6a:4b:6d:6d:b7:22:40:f7:cc:60:86:32:2e:30:23:18:
         96:75:80:0c:21:64:60:19:2e:d8:99:64:f5:59:4c:62:03:78:
         97:0a:3a:fe:8c:31:c9:e9:53:9b:25:55:f1:02:8c:34:e3:ac:
         f5:50:39:cc:be:05:b9:97:0e:ef:aa:f5:2c:53:94:c6:fb:9d:
         3f:2f:43:68:41:92:eb:b6:0d:8e:b6:fb:9d:1c:ec:ad:b3:e9:
         72:6f:67:a7:65:70:5b:ea:f3:68:ce:48:6a:1d:52:ab:66:75:
         21:6c:21:43:98:e4:01:6f:46:bc:9b:b8:4b:e6:49:ed:89:ae:
         c7:1a:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:14 2026 by rpki-client