Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B9F56378335E11F082E02017C4F9AE02.roa
File:                     B9F56378335E11F082E02017C4F9AE02.roa (raw, json)
Hash identifier:          tAjjMBG33qgOgPDDngcaEQItqcmc5q+uF9P6zEx/mcE=
Subject key identifier:   58:32:58:54:47:51:1E:E2:85:CA:6B:FC:AB:DD:45:B6:56:C4:21:99
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       6149
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B9F56378335E11F082E02017C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:39:26 +0000
ROA not before:           Sat 17 May 2025 20:37:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     38623
IP address blocks:        118.143.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 19:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24905 (0x6149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: May 17 20:37:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a487de-a35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:e4:b7:c2:05:88:c9:dc:f6:f7:6b:c1:f5:
                    5c:b4:04:a0:02:77:23:ad:2a:67:79:c0:84:a6:74:
                    bb:cc:71:93:ae:5a:d3:be:e0:15:c1:a7:e7:05:aa:
                    15:75:01:4d:6b:50:84:46:5c:ee:72:47:cd:eb:86:
                    6b:ec:a8:53:6b:47:86:ae:c7:ee:2f:87:b7:60:b6:
                    0a:ad:6e:5d:df:4d:6c:fc:79:53:b6:a9:b1:14:b3:
                    30:0a:93:13:fe:51:8b:9d:2c:4b:02:42:91:16:9f:
                    89:e0:55:68:eb:1e:73:49:10:43:2a:a1:fe:69:6e:
                    89:d4:e6:de:f0:7f:5a:2b:25:89:24:19:a7:07:6b:
                    e4:e5:b8:22:e1:13:e5:b0:78:71:f7:df:91:9b:74:
                    86:8a:ee:56:d4:89:0d:0c:08:35:9b:d7:d2:f7:3b:
                    a5:ec:5e:3e:94:c3:13:b4:99:99:1c:52:74:4e:92:
                    66:df:4a:81:89:7b:d7:df:fc:5c:cd:44:85:37:c4:
                    f6:bd:d9:40:cf:da:6d:64:0f:76:ab:55:1d:7b:76:
                    2e:bc:66:50:01:6a:49:20:9d:aa:3c:05:1c:f2:76:
                    69:c4:7b:f4:ec:d4:de:dd:e4:42:76:35:9a:c6:a5:
                    ac:6b:92:2d:ad:fa:36:09:f0:03:7a:9e:f9:bd:a8:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:58:54:47:51:1E:E2:85:CA:6B:FC:AB:DD:45:B6:56:C4:21:99
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B9F56378335E11F082E02017C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.143.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:8f:a2:82:ce:27:01:4b:95:83:36:70:9f:fb:7d:3f:00:0c:
         e0:ae:8e:4e:ad:0a:61:fa:14:71:ee:37:9e:f9:f8:42:07:e3:
         20:f7:e0:ab:aa:a5:3f:b1:09:aa:c9:39:0b:b1:44:43:6f:fc:
         be:47:3d:e8:0e:68:28:c1:39:22:08:14:d9:d2:b5:0b:61:73:
         21:d4:1b:9c:b3:00:1f:1d:3d:88:b5:34:96:68:27:2c:13:0c:
         59:49:7b:73:b5:76:ec:9b:75:33:ea:30:f2:2f:7c:79:b1:33:
         be:db:53:5b:b0:df:e7:3e:12:2b:91:be:68:a6:b1:f6:7e:26:
         34:53:73:ae:69:f4:37:48:15:12:87:28:ee:fe:f2:ad:84:1d:
         42:ed:73:13:1b:68:67:6e:c4:1d:48:cc:1a:93:34:da:0a:98:
         bf:af:2d:41:73:83:8e:e2:c1:f7:1f:62:54:c3:bd:3d:6d:8a:
         9b:de:8b:50:91:dd:e9:51:89:97:2d:a1:85:82:47:b2:ed:13:
         80:c8:51:90:5e:bf:67:ef:93:44:5d:e7:61:20:85:67:de:75:
         ab:2a:ab:cb:19:f9:a2:81:fc:fb:a2:e8:7b:cd:8c:89:f8:96:
         85:17:b4:d1:a9:5a:58:84:dd:2d:d6:40:93:2f:1e:4c:0f:fb:
         df:51:32:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:52:42 2026 by rpki-client