Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/9ED3F83E133C11F1B30AE476243D8C67.roa
File:                     9ED3F83E133C11F1B30AE476243D8C67.roa (raw, json)
Hash identifier:          cuZF8Za+gxC6vl7mOVFCS+/bOTuXp62I9WoBjId5yFY=
Subject key identifier:   9F:44:5F:DF:03:D9:08:50:54:D8:A0:E1:47:82:88:EC:FF:FA:55:D1
Certificate issuer:       /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4
Certificate serial:       06D5
Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/9ED3F83E133C11F1B30AE476243D8C67.roa
Signing time:             Thu 12 Mar 2026 22:30:15 +0000
ROA not before:           Thu 12 Mar 2026 22:30:15 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     55333
IP address blocks:        202.72.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749 (0x6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4
        Validity
            Not Before: Mar 12 22:30:15 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b33e77-c4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:70:4b:14:ca:21:e1:e8:44:34:67:ec:45:
                    c9:21:56:1c:2d:33:6d:d4:6c:9d:34:5f:19:b7:a9:
                    28:3c:af:af:35:89:15:28:6f:bb:26:35:44:c7:94:
                    d4:e7:5a:23:cf:b0:15:05:30:da:69:08:37:b2:fd:
                    03:ca:b3:e9:05:a4:90:fb:e7:5a:2d:6a:c1:a9:4a:
                    e0:6f:69:5f:b9:34:8d:14:b4:d5:f2:32:23:ae:82:
                    02:96:a7:63:a3:e3:68:a5:45:62:f9:aa:03:33:85:
                    56:96:5a:ea:de:06:5a:35:f9:e4:e9:04:7b:56:42:
                    05:e4:bd:0c:77:cf:20:7a:6d:b5:a4:2b:da:13:62:
                    97:db:a5:0a:6d:15:14:e8:e0:c7:1d:d8:2c:f5:80:
                    53:fc:4e:07:22:71:dd:88:1a:2f:71:4d:93:85:c6:
                    eb:fe:bb:4c:af:7c:7d:b9:a2:ad:95:8c:64:dd:bf:
                    d7:fe:dd:0f:c5:5d:f3:92:a6:87:d9:d5:8f:23:da:
                    5d:0d:db:a1:2a:50:59:79:42:c2:76:99:f9:16:ac:
                    5e:fd:25:23:e9:46:29:07:07:8b:ec:c1:82:bb:64:
                    60:3c:0f:fc:1b:8f:13:f1:6c:29:4f:50:a4:e3:c6:
                    ee:8b:2e:c8:ff:aa:f8:04:a7:b8:c3:86:92:1b:5b:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:44:5F:DF:03:D9:08:50:54:D8:A0:E1:47:82:88:EC:FF:FA:55:D1
            X509v3 Authority Key Identifier:
                keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/9ED3F83E133C11F1B30AE476243D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:11:3d:0e:8e:6a:4c:d0:84:39:92:c5:09:a7:ef:08:06:2f:
         da:0f:76:40:e6:47:e4:b4:66:9f:12:e7:92:a5:e4:c5:b2:a3:
         cf:5d:bf:41:3e:f5:4e:2f:87:79:cc:15:20:25:2f:b4:50:2e:
         af:6c:ae:4e:f3:99:e8:77:59:f2:36:96:38:3d:d9:df:8d:31:
         79:76:1e:4d:53:a6:ac:79:0a:4c:7e:f0:26:b0:b5:49:26:08:
         fe:7f:1d:ef:b6:e2:a8:29:0b:0c:9c:1e:01:30:c9:25:8f:63:
         ac:0f:da:d8:bb:23:f6:d8:7a:f4:ca:57:aa:67:9f:e5:d1:f0:
         1c:8e:63:dc:ed:29:ea:d6:34:af:a0:51:af:cb:48:c6:0d:ee:
         bc:4b:ec:a2:f8:57:d5:63:6a:4e:bd:71:86:7b:23:a0:75:a4:
         15:96:1f:b7:97:b4:a8:8b:67:4a:c8:3b:6a:73:32:ec:dc:ab:
         98:d9:04:8d:c4:2e:c4:91:74:78:52:bd:4e:24:4e:2f:95:a5:
         60:69:6a:21:81:c7:c8:05:be:57:69:16:12:84:b8:97:10:02:
         34:58:64:97:e0:04:a8:c1:5a:5f:df:aa:7f:5a:b1:3a:e4:9f:
         da:75:30:81:d8:77:a9:cf:80:a3:51:81:1b:23:9c:15:f5:a6:
         c0:af:5f:ae
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD
QjZGNjFBQzQwHhcNMjYwMzEyMjIzMDE1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIzM2U3Ny1jNGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWtwSxTKIeHoRDRn7EXJIVYcLTNt1GydNF8Zt6koPK+vNYkVKG+7JjVEx5TU
51ojz7AVBTDaaQg3sv0DyrPpBaSQ++daLWrBqUrgb2lfuTSNFLTV8jIjroIClqdj
o+NopUVi+aoDM4VWllrq3gZaNfnk6QR7VkIF5L0Md88gem21pCvaE2KX26UKbRUU
6ODHHdgs9YBT/E4HInHdiBovcU2Thcbr/rtMr3x9uaKtlYxk3b/X/t0PxV3zkqaH
2dWPI9pdDduhKlBZeULCdpn5Fqxe/SUj6UYpBweL7MGCu2RgPA/8G48T8WwpT1Ck
48buiy7I/6r4BKe4w4aSG1v1FQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ9EX98D
2QhQVNig4UeCiOz/+lXRMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz
MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REIzOUQvNDY3QzAzQjA5MzFEMTFFQkJENzkzNDJEQzRGOUFFMDIvOUVEM0Y4M0Ux
MzNDMTFGMUIzMEFFNDc2MjQzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAykhiMA0GCSqGSIb3DQEBCwUAA4IBAQB+ET0OjmpM0IQ5ksUJp+8I
Bi/aD3ZA5kfktGafEueSpeTFsqPPXb9BPvVOL4d5zBUgJS+0UC6vbK5O85nod1ny
NpY4PdnfjTF5dh5NU6aseQpMfvAmsLVJJgj+fx3vtuKoKQsMnB4BMMklj2OsD9rY
uyP22Hr0yleqZ5/l0fAcjmPc7Snq1jSvoFGvy0jGDe68S+yi+FfVY2pOvXGGeyOg
daQVlh+3l7Soi2dKyDtqczLs3KuY2QSNxC7EkXR4Ur1OJE4vlaVgaWohgcfIBb5X
aRYShLiXEAI0WGSX4ASowVpf36p/WrE65J/adTCB2Hepz4CjUYEbI5wV9abAr1+u
-----END CERTIFICATE-----
Generated at Wed Mar 25 10:47:11 2026 by rpki-client