Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/70A77C348D6C11EBAFD23A2EC4F9AE02.roa
File:                     70A77C348D6C11EBAFD23A2EC4F9AE02.roa (raw, json)
Hash identifier:          VDBG2w47npIoKGnSUG19h4msTJ7z1dezZlZeedxqUyw=
Subject key identifier:   BB:93:74:BD:5E:80:72:FD:95:37:0C:28:6C:09:25:ED:34:41:4E:37
Certificate issuer:       /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial:       06FE
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/70A77C348D6C11EBAFD23A2EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:47:40 +0000
ROA not before:           Wed 26 Nov 2025 21:13:19 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        139.163.18.0/24 maxlen: 24
                          139.163.40.0/24 maxlen: 24
                          139.163.83.0/24 maxlen: 24
                          139.163.85.0/24 maxlen: 24
                          139.163.131.0/24 maxlen: 24
                          139.163.132.0/24 maxlen: 24
                          139.163.133.0/24 maxlen: 24
                          139.163.137.0/24 maxlen: 24
                          139.163.138.0/24 maxlen: 24
                          139.163.139.0/24 maxlen: 24
                          139.163.250.0/24 maxlen: 24
                          168.134.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 21:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
        Validity
            Not Before: Nov 26 21:13:19 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46dac-e8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:69:33:a4:4b:18:d5:d6:c3:41:41:e1:82:6a:
                    c8:f8:c5:73:0e:44:70:9f:9a:9b:c3:21:20:b2:a0:
                    9f:84:0d:d9:65:09:0c:07:02:bc:a3:88:4c:45:d1:
                    38:a4:5f:68:1d:c2:2d:be:21:08:c1:26:0f:2a:55:
                    b1:2b:77:fc:5a:99:5f:ef:07:02:2e:4d:dc:c9:4a:
                    89:7c:85:69:68:95:0e:b8:b1:3d:c3:60:9c:70:6a:
                    71:f8:a4:0c:46:7f:51:1d:83:e2:8f:9d:0a:4e:08:
                    96:29:ec:9a:21:ff:8a:e3:9b:a2:31:79:ca:4c:b4:
                    ea:e7:b3:a2:91:0b:16:14:37:0f:f1:fd:63:ab:28:
                    86:06:d1:8e:81:39:1c:11:5e:73:96:99:09:05:36:
                    bd:a3:55:55:d5:6e:a3:10:b0:bf:1d:29:02:8b:ac:
                    c3:fb:5f:02:d6:13:48:85:16:b9:10:ec:62:e6:86:
                    69:7c:d6:89:d9:b6:03:cb:43:d6:85:6d:07:16:39:
                    bd:bb:16:7d:d8:ac:87:51:4f:d5:98:9f:89:2a:02:
                    a5:2a:5e:d3:14:c1:cc:27:9b:11:61:5e:a5:e1:6e:
                    df:9b:72:50:5c:cd:27:dd:bb:d4:07:c5:38:31:a1:
                    75:1b:17:db:6c:74:cf:08:7f:98:10:9c:d3:2a:96:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:93:74:BD:5E:80:72:FD:95:37:0C:28:6C:09:25:ED:34:41:4E:37
            X509v3 Authority Key Identifier:
                keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/70A77C348D6C11EBAFD23A2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.163.18.0/24
                  139.163.40.0/24
                  139.163.83.0/24
                  139.163.85.0/24
                  139.163.131.0-139.163.133.255
                  139.163.137.0-139.163.139.255
                  139.163.250.0/24
                  168.134.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:15:0b:26:9b:e4:f3:7f:9d:23:3e:38:6a:08:9c:9c:1f:
         04:dd:32:11:bc:94:c3:c7:8d:cb:73:a5:6b:7f:d2:12:e6:03:
         b3:81:76:0a:5f:1c:27:d5:71:b5:6f:cb:2c:9a:5d:60:2c:a4:
         5d:2e:bd:41:18:f0:15:90:a6:d9:e0:04:06:43:85:44:59:24:
         b9:6f:84:2e:bb:9b:62:7c:ed:6c:a6:93:26:16:d4:98:0a:0d:
         3e:71:5b:d8:23:67:87:83:7c:d4:df:38:a5:77:b2:b9:82:95:
         c1:de:97:1b:98:fc:02:f9:78:f0:9e:5b:2e:3f:f8:d4:58:88:
         b5:60:ed:ca:41:7b:62:75:3e:7c:99:9f:00:7a:a2:54:23:92:
         21:23:da:36:ca:44:69:a3:4e:97:c8:fb:07:b7:db:07:49:b7:
         34:fc:16:f1:82:a3:7a:8f:56:0a:ce:4a:de:21:4d:27:af:c4:
         9a:ea:7a:55:10:b8:41:23:46:46:39:4d:6d:b9:4a:c9:b9:7c:
         ec:59:7a:81:90:d3:d3:57:46:ee:87:27:63:50:f4:fe:df:ee:
         66:12:84:a4:78:10:8b:5f:b3:92:f2:97:bf:c4:cc:d6:e9:d5:
         71:24:35:01:85:b2:dd:0e:bc:da:80:89:12:5d:19:02:d7:7a:
         ca:88:42:d7
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD
MkE0RTI5Q0UwHhcNMjUxMTI2MjExMzE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmRhYy1lOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA92kzpEsY1dbDQUHhgmrI+MVzDkRwn5qbwyEgsqCfhA3ZZQkMBwK8o4hMRdE4
pF9oHcItviEIwSYPKlWxK3f8Wplf7wcCLk3cyUqJfIVpaJUOuLE9w2CccGpx+KQM
Rn9RHYPij50KTgiWKeyaIf+K45uiMXnKTLTq57OikQsWFDcP8f1jqyiGBtGOgTkc
EV5zlpkJBTa9o1VV1W6jELC/HSkCi6zD+18C1hNIhRa5EOxi5oZpfNaJ2bYDy0PW
hW0HFjm9uxZ92KyHUU/VmJ+JKgKlKl7TFMHMJ5sRYV6l4W7fm3JQXM0n3bvUB8U4
MaF1GxfbbHTPCH+YEJzTKpZBXQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFLuTdL1e
gHL9lTcMKGwJJe00QU43MB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE
NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjI3N0QvNzhBMUQwOEU4RDZCMTFFQjk4NDBFMDVGQzRGOUFFMDIvNzBBNzdDMzQ4
RDZDMTFFQkFGRDIzQTJFQzRGOUFFMDIucm9hMFkGCCsGAQUFBwEHAQH/BEowSDBG
BAIAATBAAwQAi6MSAwQAi6MoAwQAi6NTAwQAi6NVMAwDBACLo4MDBAGLo4QwDAME
AIujiQMEAoujiAMEAIuj+gMEAKiGADANBgkqhkiG9w0BAQsFAAOCAQEASDoVCyab
5PN/nSM+OGoInJwfBN0yEbyUw8eNy3Ola3/SEuYDs4F2Cl8cJ9VxtW/LLJpdYCyk
XS69QRjwFZCm2eAEBkOFRFkkuW+ELrubYnztbKaTJhbUmAoNPnFb2CNnh4N81N84
pXeyuYKVwd6XG5j8Avl48J5bLj/41FiItWDtykF7YnU+fJmfAHqiVCOSISPaNspE
aaNOl8j7B7fbB0m3NPwW8YKjeo9WCs5K3iFNJ6/Emup6VRC4QSNGRjlNbblKybl8
7Fl6gZDT01dG7ocnY1D0/t/uZhKEpHgQi1+zkvKXv8TM1unVcSQ1AYWy3Q682oCJ
El0ZAtd6yohC1w==
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:47:57 2026 by rpki-client