Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/F67388B8C8EE11F0B296D571C4F9AE02.roa
File:                     F67388B8C8EE11F0B296D571C4F9AE02.roa (raw, json)
Hash identifier:          Ln4i6mHL5UZIq22mGQVLVNPqUJhOiI44Lt1j7dBvqNs=
Subject key identifier:   1E:30:F5:74:D6:93:61:54:EF:42:77:A6:EF:AD:16:1A:6F:54:4C:45
Certificate issuer:       /CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
Certificate serial:       0146
Authority key identifier: 92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/F67388B8C8EE11F0B296D571C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:37:33 +0000
ROA not before:           Mon 24 Nov 2025 04:35:11 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138997
IP address blocks:        160.22.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 04:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
        Validity
            Not Before: Nov 24 04:35:11 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5a0ad-e971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:a0:66:59:ab:ab:d1:71:74:f5:7d:c4:33:
                    06:84:71:29:5b:57:c4:bd:e3:5f:62:1d:55:1d:5d:
                    68:42:6b:aa:1a:18:79:d3:da:18:67:c5:18:ea:82:
                    94:f9:4c:91:e1:7f:0f:32:dc:93:13:57:57:99:04:
                    e6:2f:43:15:bd:54:ed:5c:ce:dd:8d:01:3a:ad:2d:
                    cb:55:5c:d9:8b:6f:67:42:e8:44:95:91:81:c3:56:
                    b5:7e:e9:65:78:4e:ee:ce:ae:8f:74:63:27:8e:51:
                    0b:69:55:3b:0a:24:1b:dd:71:35:2b:a0:3c:3a:69:
                    dd:79:dc:c7:08:33:59:82:2c:92:62:d8:f0:3e:db:
                    2c:95:d3:f2:39:07:1e:f0:43:24:aa:65:da:59:e0:
                    3d:33:f4:d2:5b:a5:dc:d3:c9:a9:10:a5:2a:e3:5c:
                    75:41:76:5e:22:f2:75:c9:fc:31:f0:be:4a:2e:0c:
                    55:be:2b:da:99:43:a7:c0:5e:9a:d9:c1:5f:0e:e9:
                    16:2e:76:b9:e6:5f:33:77:ec:69:1a:c0:a5:b3:dd:
                    f1:56:e6:db:59:5a:cd:3b:9f:d7:6e:11:77:d0:11:
                    88:bf:ed:e9:36:84:55:3a:ef:46:5a:eb:2a:ff:8d:
                    64:e2:0c:fc:ff:f3:34:2f:9a:78:54:7c:0d:d2:d7:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:30:F5:74:D6:93:61:54:EF:42:77:A6:EF:AD:16:1A:6F:54:4C:45
            X509v3 Authority Key Identifier:
                keyid:92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/F67388B8C8EE11F0B296D571C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:2b:44:b8:f2:1a:6a:d4:7c:23:ab:39:b9:95:23:a1:20:96:
         7b:1c:92:16:fc:d5:80:aa:64:f9:58:2d:61:0f:63:d8:d9:98:
         1e:8f:e3:07:f2:ce:23:ea:3d:73:a8:58:a8:f9:73:f6:4b:b0:
         f4:56:37:80:e9:cf:d7:47:30:0e:d3:be:08:ce:6c:59:27:1b:
         45:08:85:b4:4c:7a:7e:29:04:fe:64:b0:10:1a:7e:c0:0c:fc:
         90:b7:de:9a:66:1c:f9:ed:4d:72:c9:f5:40:6b:71:7d:d1:3c:
         46:48:c5:3b:3e:3a:fc:51:50:61:8f:b4:ea:61:02:40:f4:9f:
         4a:20:ad:cc:38:6d:8d:e3:4b:d4:96:d7:20:3d:39:3e:23:9f:
         df:49:42:03:c9:b6:60:46:30:0b:21:02:7c:ea:73:78:cb:e4:
         4c:19:53:7f:e1:b5:83:58:ca:d1:44:d1:c9:c3:6d:29:ef:cd:
         50:6a:06:74:06:0f:9d:ba:7b:03:56:de:2a:67:63:76:f1:b4:
         7b:15:dc:b6:59:92:6e:db:90:06:d7:7a:b9:83:8d:46:fa:ef:
         3b:e3:9a:70:39:5c:8c:d9:aa:ac:e1:b8:4b:8b:93:30:b2:a6:
         61:aa:a5:e5:07:cf:e5:1b:f0:77:80:29:14:28:a0:18:03:f2:
         cd:c3:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 08:02:32 2026 by rpki-client