Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/8351896675D611E88AFEBA28C4F9AE02.roa
File:                     8351896675D611E88AFEBA28C4F9AE02.roa (raw, json)
Hash identifier:          zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=
Subject key identifier:   15:B0:3D:24:24:1B:54:3B:C1:BD:1E:34:52:EA:FC:58:21:E6:45:0C
Certificate issuer:       /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial:       1A0C
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/8351896675D611E88AFEBA28C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:24:49 +0000
ROA not before:           Sat 28 Feb 2026 17:13:59 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     17408
IP address blocks:        43.241.160.0/22 maxlen: 24
                          202.5.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
                          rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 16:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6668 (0x1a0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
        Validity
            Not Before: Feb 28 17:13:59 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a46851-6a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:72:c6:54:57:be:ae:42:3f:8e:51:38:39:
                    15:20:7d:45:be:43:d7:87:16:b3:e4:3d:5c:ef:73:
                    9b:eb:e8:4e:8c:6c:c6:80:9b:eb:7e:f3:c9:59:aa:
                    7d:5c:38:5f:d8:3b:6c:17:80:f3:a7:6b:ae:f6:77:
                    3f:e2:fe:da:a5:7c:e0:47:86:24:5e:18:e1:e9:2f:
                    41:60:f0:c6:6b:f6:e9:a7:53:c5:5a:fb:fc:5f:d3:
                    54:4d:6f:d7:3d:d2:33:71:83:f9:70:f2:a5:b4:65:
                    61:0c:25:79:71:21:16:62:00:ae:07:e6:63:54:da:
                    ec:98:e1:d8:65:f6:2e:ff:a5:95:ad:85:a4:f8:05:
                    ef:9f:45:c9:54:b8:69:6d:35:bc:cd:56:f7:a0:29:
                    f4:5c:58:b4:26:aa:40:22:00:90:ef:10:1b:ae:c0:
                    0e:52:16:7d:c6:a2:c2:92:5d:4d:97:71:d4:ff:e7:
                    08:b0:06:b0:52:33:86:6e:9a:42:d3:d2:e3:22:09:
                    b7:83:98:33:99:99:34:b4:be:59:a0:78:03:f1:32:
                    7c:73:60:3d:18:f0:c4:4c:be:71:31:9c:b4:80:5a:
                    3e:27:a2:22:9a:e4:29:82:63:36:8c:de:32:2e:71:
                    6f:4d:4c:81:68:96:ed:94:80:97:2d:62:bb:34:82:
                    49:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B0:3D:24:24:1B:54:3B:C1:BD:1E:34:52:EA:FC:58:21:E6:45:0C
            X509v3 Authority Key Identifier:
                keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/8351896675D611E88AFEBA28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.241.160.0/22
                  202.5.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:0e:59:3b:f9:20:0e:48:8a:18:a4:7b:7f:0b:f6:c8:f4:
         87:5b:4e:18:0c:8f:73:ec:c1:19:0f:19:4b:aa:10:19:07:85:
         1e:9b:65:38:82:06:55:2e:23:cd:a9:0d:05:91:8b:7a:8e:cd:
         9e:01:ab:3a:0d:5f:37:86:19:6b:36:88:59:31:2e:f9:c6:15:
         e1:4c:2d:8d:bc:bb:90:28:45:9c:56:e3:f3:ea:be:83:1b:95:
         14:95:d9:e8:0d:27:58:51:d1:85:e4:b5:4c:01:0e:33:5b:ee:
         20:4a:7d:89:b0:1c:a2:05:ce:0f:e7:93:ec:0d:45:eb:87:23:
         97:33:3b:d3:47:d4:df:0b:c5:55:c1:72:78:45:0d:24:1b:e9:
         2b:3b:6d:b9:f1:f0:e5:fb:84:ed:6f:73:a4:be:21:9f:db:86:
         07:32:ff:5c:af:84:9f:c7:a5:0f:bc:8d:70:f2:00:b4:ed:b1:
         83:26:82:b8:40:83:19:6c:29:f3:d2:d0:86:fe:17:4f:85:53:
         75:ba:ed:ef:40:1d:67:fe:7e:60:97:ba:1d:36:d8:31:60:0b:
         b8:6f:aa:57:77:19:54:4f:6e:c6:5e:be:3d:95:44:43:a6:b8:
         13:69:0d:e2:8c:79:c4:9e:f1:3c:a8:9e:b0:18:d6:79:cb:58:
         df:43:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 09:44:50 2026 by rpki-client