Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/42230DF42DE211F0A991F83DC4F9AE02.roa
File:                     42230DF42DE211F0A991F83DC4F9AE02.roa (raw, json)
Hash identifier:          yYz8vPsSQcwgOuF6A+VEinnO0ZhPnyp/BhHCVoBW8aw=
Subject key identifier:   D2:A2:F3:DE:7D:CB:0F:DB:8C:23:F5:46:4E:4D:10:88:C5:FD:BE:C4
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       011A
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/42230DF42DE211F0A991F83DC4F9AE02.roa
Signing time:             Wed 01 Apr 2026 09:16:12 +0000
ROA not before:           Wed 01 Apr 2026 09:16:12 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137868
IP address blocks:        160.250.8.0/24 maxlen: 24
                          160.250.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: Apr  1 09:16:12 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69cce25b-e917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:19:20:61:68:0b:5f:59:4c:09:d6:da:cf:
                    f9:df:2c:de:b2:08:96:13:71:ff:10:fa:3e:96:cb:
                    8f:64:a9:76:0f:1e:43:dc:3b:80:3b:9a:38:d2:2d:
                    ff:97:f8:4e:9e:db:1e:dd:d7:34:27:eb:a1:d3:38:
                    67:f1:09:39:80:3a:c5:c2:1f:c7:67:5e:80:2a:11:
                    16:34:49:3e:0b:88:54:ef:c3:76:36:dc:8a:9c:b4:
                    63:96:35:85:e9:bc:56:be:4d:6e:72:83:48:ac:6b:
                    39:0e:b6:08:79:0e:b4:63:f2:88:7a:b1:44:dd:dc:
                    56:0e:e8:02:09:de:f0:88:e1:56:00:d9:c8:58:9e:
                    2d:2f:39:df:1a:25:fd:a1:7b:5b:4f:c4:5f:0d:9c:
                    d6:2c:a0:0b:96:43:94:8b:4d:c5:3d:9f:da:f2:e9:
                    bd:29:47:37:18:cf:79:70:52:b0:90:b3:98:a8:70:
                    4f:b2:fc:a5:4a:d6:17:53:5e:51:64:37:e1:1d:f3:
                    99:df:4a:e9:e2:f0:42:aa:1e:e4:d1:a7:53:3f:e0:
                    25:b7:6e:de:dc:a0:78:4b:43:15:4a:9f:21:f5:22:
                    e9:c2:ae:2d:78:5c:09:92:a6:8c:a8:10:95:6e:6c:
                    cd:35:fb:a7:0a:fe:65:81:7e:66:90:db:e7:59:b7:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A2:F3:DE:7D:CB:0F:DB:8C:23:F5:46:4E:4D:10:88:C5:FD:BE:C4
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/42230DF42DE211F0A991F83DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:6e:40:d1:32:31:10:c9:a7:d3:e1:62:bb:fc:4d:2e:71:
         74:f2:02:23:4d:a0:e5:75:5e:01:b3:5e:ef:6e:cd:f5:f6:05:
         0c:72:7d:2c:17:d2:d9:6a:0b:a5:21:cb:aa:3d:e1:fb:ed:cf:
         9d:ee:bf:a8:d9:06:bd:ed:ca:f4:ea:f3:57:58:fc:c6:ba:0d:
         5f:50:64:aa:ac:b6:1b:13:bc:9a:38:2c:87:5b:e4:87:d8:a9:
         6f:a3:4e:96:bb:aa:2c:c3:c2:3b:e6:09:5a:d3:d6:69:75:65:
         25:af:d0:f5:24:92:5b:98:84:26:3e:bc:58:6d:25:51:b6:b4:
         d4:1a:bc:4f:e4:72:a5:dc:36:03:95:22:fb:09:f1:ca:ab:e8:
         10:3f:47:03:97:46:ac:e3:f6:09:d5:ae:78:a8:12:b4:2a:bb:
         c2:2a:10:d0:b4:2c:ee:b7:c6:e6:94:ca:45:90:46:36:1e:91:
         3e:1d:67:cb:2c:53:24:a4:a3:5c:bf:03:ef:70:46:1b:e5:e9:
         95:da:42:fc:70:ad:07:30:fc:5c:25:39:51:a6:84:62:d5:4e:
         15:48:16:e7:b8:b1:36:7d:5c:b5:d9:c4:76:96:31:e2:be:d3:
         36:51:f2:df:ee:51:62:3c:b5:a1:94:ac:73:c5:de:c4:43:a3:
         e0:4b:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:35:46 2026 by rpki-client