Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa
File:                     0FBF57D2F16611EEB75BE640C4F9AE02.roa (raw, json)
Hash identifier:          cs0XXfBuh/azVaZsG4BADKeGQ7mBKcl8emhLzIxBwKs=
Subject key identifier:   40:55:FA:47:CD:F8:E1:31:E1:15:3A:03:F4:61:7B:6B:A9:82:7F:E3
Certificate issuer:       /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Certificate serial:       0186
Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:50:21 +0000
ROA not before:           Thu 17 Apr 2025 04:41:21 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150746
IP address blocks:        202.9.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
        Validity
            Not Before: Apr 17 04:41:21 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a5a3ad-3c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:7b:33:a4:73:44:20:bc:24:06:c9:08:f4:
                    15:f5:f5:de:c6:75:d2:fc:d5:a5:72:ea:bd:53:03:
                    89:b1:3f:71:63:3c:42:d4:f5:cc:bb:1e:9d:19:4b:
                    24:25:c7:4a:93:8a:91:c3:37:9a:ec:c0:36:d9:15:
                    37:41:08:16:fd:02:fb:1e:85:ae:84:0c:8b:ec:8e:
                    22:2b:12:4e:89:93:95:c2:3b:f3:6a:7f:3c:04:eb:
                    71:15:0f:2d:97:da:66:27:dd:bd:8b:94:cf:48:a3:
                    e9:39:c1:3a:ec:1e:a0:98:9c:7e:13:72:cb:ff:8c:
                    dc:9d:6d:ac:09:95:2e:33:f2:6c:af:29:12:17:17:
                    85:2f:a3:83:df:52:33:5c:98:3b:d2:b3:7d:5c:c0:
                    06:fb:fb:b7:5a:79:fd:60:1f:8f:f5:91:bb:53:36:
                    ed:85:e1:28:11:73:3f:08:96:be:de:2c:b8:34:ce:
                    1f:db:0d:1b:af:71:99:62:ef:6a:8c:54:d2:5a:bc:
                    35:a8:53:a1:c1:37:9e:96:43:b9:e0:d1:59:ea:e5:
                    8f:be:88:76:54:ef:30:4f:63:9c:47:7f:e9:7c:d3:
                    d7:37:22:58:08:a6:f3:ff:c6:f3:8e:3e:88:87:90:
                    c0:9e:e3:b8:bf:4c:c6:12:cf:62:9c:7f:e2:3c:7d:
                    55:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:55:FA:47:CD:F8:E1:31:E1:15:3A:03:F4:61:7B:6B:A9:82:7F:E3
            X509v3 Authority Key Identifier:
                keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ea:d6:c7:2a:a0:69:46:ac:a3:0a:f0:1f:00:06:ae:c4:45:
         a2:98:34:2e:41:46:85:17:88:80:b8:70:c2:ff:b0:32:ae:e0:
         2e:7c:9e:17:39:1a:22:f3:12:25:eb:25:1d:73:e6:e2:77:3e:
         09:11:b2:f6:0e:c5:ce:5e:89:95:9f:83:64:eb:c7:fa:8d:c3:
         0d:4c:9e:a6:27:b8:3c:5f:8a:44:45:b0:e8:1f:29:b3:a0:e8:
         4e:2b:e5:5b:ae:ff:a4:a4:08:2e:5f:63:a8:62:48:ad:80:bb:
         e9:57:36:a6:8f:b9:fa:59:5d:2c:35:c9:c4:2e:a8:ab:a9:90:
         90:3e:6d:c0:d1:11:a2:29:c4:3d:b0:9d:26:b4:cb:4b:68:79:
         60:2d:9b:c4:17:7a:11:cd:dd:61:66:b9:8c:1b:a9:88:72:3d:
         39:96:ac:ff:65:4c:9a:10:41:18:fb:39:10:e2:ca:58:99:67:
         67:cf:18:06:21:d3:46:74:a6:7f:07:aa:9d:34:1b:c8:7b:df:
         1a:e4:49:6b:94:9e:f0:23:2d:b2:15:39:10:0c:6e:10:a9:84:
         71:f1:de:17:5c:7f:3c:dc:f6:c9:25:f5:69:74:58:10:db:54:
         ab:dc:b3:1c:6e:7d:97:b0:d3:cb:7e:4f:74:c2:4c:92:f7:07:
         cc:9b:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:31:32 2026 by rpki-client