Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C5F3724C73BC11F1831BC97180A30FBC.roa
File:                     C5F3724C73BC11F1831BC97180A30FBC.roa (raw, json)
Hash identifier:          ownsWPTqXhlS4zpKEaOSrjh0B54PghkSa/FalxoQjxU=
Subject key identifier:   83:DD:93:A1:41:91:D7:C7:44:AB:7E:CB:73:99:B1:6C:FB:26:28:9D
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       0279
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C5F3724C73BC11F1831BC97180A30FBC.roa
Signing time:             Mon 29 Jun 2026 13:16:44 +0000
ROA not before:           Mon 29 Jun 2026 13:16:44 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     62044
IP address blocks:        101.2.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 04:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Jun 29 13:16:44 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a42703c-db65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:90:4e:eb:2c:55:78:b2:7a:f6:28:0e:9f:a7:
                    7d:45:ca:13:de:e9:27:3b:a2:f9:0a:af:77:13:3c:
                    40:d7:2c:8c:0d:d9:86:bd:77:2a:ff:47:27:f9:66:
                    0c:d8:6d:cb:88:d6:0b:ba:8f:2c:61:62:d2:fa:87:
                    c2:de:10:d4:9f:c2:33:70:a2:1b:12:18:7c:d9:ff:
                    e8:ca:ba:ff:a3:64:ae:f9:46:f8:05:1b:db:78:80:
                    9c:38:0c:9d:f5:79:b5:54:aa:f2:41:73:07:b6:4f:
                    45:47:c7:02:19:80:76:3e:67:36:79:86:b7:ce:04:
                    8b:ea:7e:ec:5d:5e:8f:a4:e2:1d:26:72:45:4b:bb:
                    a3:6b:0b:3a:5d:22:6b:1c:14:08:0f:74:9f:21:3c:
                    2f:56:94:af:d7:06:a5:38:72:73:26:0a:03:12:81:
                    93:d4:8d:0a:c4:6d:0b:e5:0b:88:de:c4:ce:fc:3b:
                    81:4b:77:bb:34:df:4c:78:a7:04:b5:2e:19:61:b2:
                    40:62:ac:0e:1d:58:ed:01:d7:fe:74:56:c9:78:52:
                    7a:10:c4:fe:f3:60:4d:27:6b:d3:80:e8:83:42:25:
                    e6:b6:55:a5:b5:a1:ed:32:20:d9:75:33:4a:e0:57:
                    ef:04:fe:fa:df:64:53:ca:65:3e:ab:05:13:4f:61:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DD:93:A1:41:91:D7:C7:44:AB:7E:CB:73:99:B1:6C:FB:26:28:9D
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C5F3724C73BC11F1831BC97180A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.2.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:5b:e5:a1:d3:cb:40:c6:69:f6:cd:f2:14:1a:07:09:51:7c:
         d0:fd:c8:a1:88:6b:71:81:c5:cd:47:66:83:59:0f:02:34:2f:
         6e:fe:cb:61:ef:d5:d5:94:5f:c3:04:de:ed:fc:21:50:c6:84:
         f2:3a:0d:37:7a:7d:cb:13:e1:7a:29:cc:60:af:91:bf:57:b9:
         ae:b1:ca:66:ea:3e:8f:3b:17:36:e1:11:0e:60:42:c9:88:78:
         85:29:29:5a:75:69:fb:a3:e3:b3:0b:18:a5:b2:a0:52:b8:e4:
         a9:c2:1c:5a:68:44:d8:a4:72:79:dc:34:2e:5c:3b:e3:19:91:
         41:91:81:2a:2b:dc:4e:40:fb:dc:90:bf:7c:24:84:d4:9a:c2:
         a9:e5:68:5f:eb:a5:d2:13:76:25:d9:5b:c8:80:67:b7:e4:50:
         3c:08:53:6a:49:e1:1a:01:da:92:5c:12:e5:f2:d6:a5:2d:2b:
         2c:2b:80:6a:a8:39:e9:ee:3a:65:0d:2e:b0:a4:56:29:e2:32:
         df:06:f7:c6:39:83:11:b1:bd:1b:5a:75:06:6a:e6:25:d1:2d:
         13:cb:55:ab:27:b1:22:d0:a4:70:ae:9b:42:d3:7b:39:cb:6b:
         e2:16:04:4e:fc:2b:a4:43:62:6f:f8:c2:47:aa:04:c1:a5:a4:
         0d:0c:99:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:37 2026 by rpki-client