Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/99A8B15A699D11EFA9CA5639C4F9AE02.roa
File:                     99A8B15A699D11EFA9CA5639C4F9AE02.roa (raw, json)
Hash identifier:          /W51fN1A4uVeyIxdIJJmhiCbDrUaqkAuIS2grCmvYNo=
Subject key identifier:   62:28:9B:D1:34:44:CD:D6:E0:0C:BD:E3:AC:3D:76:98:BC:76:0B:8E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5EAA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/99A8B15A699D11EFA9CA5639C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:19:12 +0000
ROA not before:           Thu 28 Aug 2025 14:56:11 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152983
IP address blocks:        2001:df4:3040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24234 (0x5eaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:11 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60ce0-147e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:96:a2:5d:6e:d6:b3:6e:ab:b0:e3:35:94:
                    18:a0:55:64:d4:b1:0d:8c:c9:c6:4b:cc:e0:c2:08:
                    e3:2f:17:a3:94:f3:9a:37:ec:5c:94:4e:42:47:3d:
                    54:d5:c9:3c:30:fc:64:df:0a:ea:d4:fc:74:63:73:
                    97:a1:b0:64:f7:a6:33:39:03:bd:b6:b7:ff:30:df:
                    d6:70:c9:5b:20:d9:57:f8:a9:d3:a1:56:82:0d:be:
                    42:9c:2e:09:27:5f:96:01:2e:8e:e9:c5:3a:48:e3:
                    c8:b0:8a:e8:8c:9f:b8:5b:f5:6b:d4:af:40:94:47:
                    f2:f9:6a:9b:4e:63:34:b1:ba:d4:16:e1:b6:a6:03:
                    a0:34:77:87:14:a2:e4:80:94:2c:57:e7:16:4c:1f:
                    27:e8:a9:82:02:ea:aa:93:43:8f:4b:e9:6e:97:a4:
                    94:97:c1:18:ed:25:5e:aa:40:5d:4c:f7:c7:43:fe:
                    c9:cd:7b:31:74:3b:17:40:7a:06:81:06:fb:49:01:
                    5c:2e:a2:dd:11:01:62:55:34:c8:3d:bc:61:56:12:
                    d6:1c:aa:24:91:fc:5b:f8:1e:70:d7:3e:27:0d:7b:
                    3f:91:ca:a9:54:2a:e0:1f:45:e7:ff:ba:cd:14:f5:
                    7d:ed:66:91:5b:15:8e:20:76:ad:de:9c:16:b9:c0:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:28:9B:D1:34:44:CD:D6:E0:0C:BD:E3:AC:3D:76:98:BC:76:0B:8E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/99A8B15A699D11EFA9CA5639C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:3040::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:c1:c5:5e:11:64:33:0d:5f:d4:76:44:e2:be:7a:62:f9:
         98:3f:69:03:02:1e:c3:35:af:d2:7d:70:69:9a:b9:68:1a:4f:
         83:35:2f:3c:79:30:94:85:6a:e6:cb:71:9c:b2:f9:a2:3a:6f:
         0b:31:31:6a:9b:d3:1d:91:fc:c6:b9:ed:b1:b0:f3:75:00:71:
         ec:5d:2c:70:a4:a2:20:a7:e1:5c:1b:22:c5:4d:2d:7e:0c:c8:
         5f:aa:78:26:43:d0:ca:71:e2:65:a3:f1:14:7c:76:48:91:65:
         78:39:c8:5d:bf:db:bf:ca:3c:c5:7c:89:6f:85:5f:84:10:c2:
         9d:f8:97:8b:b8:1a:d0:b7:e7:04:ac:b1:8c:ee:a3:d0:4d:88:
         cc:3a:7f:c6:38:18:27:88:7a:42:47:9d:28:06:42:31:b0:dc:
         44:8f:1b:9a:82:d8:c2:6d:08:73:b3:93:1f:5b:46:ce:d6:1a:
         c0:cd:ed:ef:4a:3e:a9:7f:70:30:29:a0:b7:37:7e:a7:13:e9:
         9c:8a:a6:26:eb:87:84:65:41:2f:63:14:d5:42:89:ba:66:72:
         9b:b9:a1:2f:27:d1:0b:d4:11:dd:89:f8:af:1d:6d:e1:d0:82:
         e1:3a:9e:35:ef:8a:41:37:7a:84:c6:d1:9a:27:34:f8:39:3b:
         ea:f8:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:49:00 2026 by rpki-client