Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/34EEE440914911EFAD03F553C4F9AE02.roa
File:                     34EEE440914911EFAD03F553C4F9AE02.roa (raw, json)
Hash identifier:          XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=
Subject key identifier:   DA:1E:BA:58:C8:35:E5:36:BB:F5:0C:BD:9C:56:E0:BE:71:D9:1D:21
Certificate issuer:       /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial:       0102
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/34EEE440914911EFAD03F553C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:29:49 +0000
ROA not before:           Mon 17 Nov 2025 03:51:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153373
IP address blocks:        160.191.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
        Validity
            Not Before: Nov 17 03:51:45 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a590cd-fb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:25:2e:96:32:08:94:07:5d:2c:03:89:54:
                    ae:44:09:72:25:48:0a:96:00:94:b0:58:18:70:54:
                    99:8b:48:18:68:75:5f:3a:23:d4:a6:df:39:e3:5c:
                    fb:80:c8:26:bb:c0:48:17:38:a6:9e:fc:ca:a5:b5:
                    3a:ce:d5:40:d3:ad:e6:61:5e:0c:72:37:8d:e5:8c:
                    c5:39:b5:bb:8c:ef:c3:88:c8:74:71:e9:45:28:98:
                    f2:c2:2d:b8:f0:1b:47:78:ad:40:01:19:e0:16:cf:
                    3d:65:1b:e4:70:75:b8:75:61:7d:32:1e:f4:59:d9:
                    a1:8a:0a:9c:e5:49:b9:a3:a9:bc:21:04:e6:e6:a5:
                    90:ed:a3:b0:b1:5a:85:ca:2c:1d:42:cd:53:5d:c8:
                    9a:b0:97:b4:20:e2:3c:25:d5:7e:c0:1a:ad:aa:3a:
                    b7:0e:e4:08:97:70:14:ed:4f:02:82:a2:4e:34:17:
                    fb:af:3c:6f:f4:32:e7:60:f1:77:5e:36:bd:ff:d9:
                    32:76:e4:15:d5:51:11:b5:08:b4:7e:4c:5b:c4:9a:
                    ff:28:7c:e2:f1:93:b2:bf:1e:68:3d:b9:e6:bd:d7:
                    15:1d:5a:64:2d:2d:68:f5:45:89:6d:fc:ec:2b:04:
                    f9:20:02:d4:24:7c:a8:6e:3a:da:a2:ab:87:01:56:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1E:BA:58:C8:35:E5:36:BB:F5:0C:BD:9C:56:E0:BE:71:D9:1D:21
            X509v3 Authority Key Identifier:
                keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/34EEE440914911EFAD03F553C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:6a:c7:ef:84:bf:d7:07:bf:a6:5c:25:86:80:f8:ba:1c:98:
         08:d9:65:ee:ec:68:ca:f0:d1:a4:a4:2e:3a:ab:b4:85:c9:17:
         34:ec:1d:b2:00:82:c0:d0:7c:7d:d0:4d:83:64:34:02:93:25:
         49:37:b0:01:2c:6f:3b:f1:a6:10:18:48:ef:7b:4f:ed:d0:ae:
         02:5e:65:11:c6:ae:46:2d:3b:52:9d:a8:36:db:49:a7:fb:2b:
         fa:2b:19:34:c5:54:f9:ab:e9:91:69:f6:ed:ee:f6:16:ed:86:
         08:63:76:11:fe:d0:5b:94:95:a8:41:6c:7d:e3:23:01:f7:40:
         67:f7:49:e3:8f:3e:3d:b9:6a:3e:ba:1c:81:0a:12:db:8e:fd:
         aa:a0:b6:37:31:04:02:24:68:37:ba:65:69:ef:c3:e2:3e:bc:
         fe:a5:68:be:88:7d:18:d1:c1:ee:4b:71:1c:b7:f7:a6:9b:b4:
         8c:d6:f4:36:d2:63:08:d4:17:69:f9:76:1f:c5:fa:72:1a:22:
         e2:ca:96:df:d1:4b:04:fb:b1:fe:91:f7:86:58:f9:34:f4:df:
         6e:25:8a:9d:49:11:fb:ad:12:89:ac:30:7b:a3:67:a5:2b:e3:
         4a:c4:eb:f2:5c:4f:44:d1:73:a2:71:d7:d5:98:18:63:d6:cc:
         7f:8d:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:19 2026 by rpki-client