Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/934C7D46FBAF11F08EB01E575F6F56BC.roa
File:                     934C7D46FBAF11F08EB01E575F6F56BC.roa (raw, json)
Hash identifier:          jIx8YH1UpKKoBYxy/0MO0tXifjRLwZ2iS5YLfFcTUT8=
Subject key identifier:   3A:CD:EF:9E:F2:50:65:C3:97:40:F0:5C:10:BE:0F:20:AB:86:C4:FB
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       EF
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/934C7D46FBAF11F08EB01E575F6F56BC.roa
Signing time:             Tue 27 Jan 2026 18:39:56 +0000
ROA not before:           Tue 27 Jan 2026 18:39:56 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134562
IP address blocks:        160.250.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: Jan 27 18:39:56 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6979067c-6f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e6:1b:fc:5d:c0:b4:1b:3d:2c:b3:aa:a4:3a:
                    88:e4:74:29:ec:2e:d4:0f:df:08:9e:a5:43:1a:eb:
                    49:83:4a:c9:e7:5f:9d:40:81:e5:59:3b:3f:e1:6f:
                    9a:16:b6:57:ea:fb:fa:96:67:b7:32:c2:e6:bd:98:
                    ff:1d:db:04:87:9f:81:56:cf:85:3e:af:50:90:ca:
                    81:2c:c9:a3:94:ac:fe:02:9b:f1:bf:ef:b6:95:8e:
                    be:97:97:cd:9e:08:13:bc:a3:fa:60:27:8c:76:df:
                    26:ac:23:25:e9:f4:35:5c:ac:ac:0e:eb:db:9a:1f:
                    8f:54:c4:74:a9:e2:ee:b8:68:21:34:e3:bf:c5:af:
                    f3:4f:c2:11:44:74:0e:13:94:66:97:79:2b:33:cb:
                    9e:61:28:ea:fa:a0:05:f7:6b:19:3d:40:1e:c1:0f:
                    b6:fa:3a:40:64:7c:9d:13:20:72:38:43:01:3c:9a:
                    fd:70:1e:37:1a:4e:9d:5e:99:b4:14:22:74:3f:bd:
                    f3:3f:e8:b5:f6:36:80:bb:80:84:c1:20:4c:b2:f7:
                    ea:cf:ff:ff:6c:40:d6:a5:ff:a7:ab:0c:02:5d:ff:
                    0a:e3:bb:06:f2:34:05:26:a7:fb:5f:26:8e:31:02:
                    9c:ea:05:64:a3:c7:8b:08:db:dc:56:f9:55:79:18:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CD:EF:9E:F2:50:65:C3:97:40:F0:5C:10:BE:0F:20:AB:86:C4:FB
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/934C7D46FBAF11F08EB01E575F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:8d:a9:75:61:4e:43:66:11:84:52:b6:69:ea:06:64:61:92:
         90:34:0a:c9:4f:b5:79:2a:48:46:36:f5:bb:8c:b7:c1:bf:6c:
         fa:de:04:fa:ae:14:f2:24:d4:ff:57:ef:85:e6:f7:dd:25:f0:
         36:d9:d4:95:29:41:ff:a9:50:18:be:67:53:54:17:4d:6a:00:
         cf:c4:6b:45:e8:7a:e4:05:43:7f:72:23:e1:03:83:ba:9f:b3:
         ca:57:2c:92:f8:06:bb:34:80:2e:23:1f:a4:6d:e2:01:c6:bc:
         e2:d3:3c:00:12:4f:21:70:37:12:d4:48:f7:11:e3:fc:bb:d7:
         2a:cd:bb:b5:0b:cc:57:9b:99:87:58:d1:57:e3:9b:6d:55:96:
         cd:f8:b8:23:ad:28:a2:89:20:2a:2a:f5:b1:1d:6f:3b:13:7b:
         90:cb:b4:36:71:3c:78:6b:ae:d0:ff:e5:50:53:f9:3d:bd:3a:
         d3:dd:23:5e:ce:97:41:ea:1a:b1:a1:64:7b:85:d6:da:95:a3:
         0a:bb:58:72:80:30:1a:71:96:7e:da:83:bb:64:c5:65:a8:19:
         0e:02:58:97:39:c3:f6:0a:6c:70:50:db:50:e7:03:4e:e0:e9:
         49:e1:9f:e6:f9:6d:fb:2c:5f:e1:60:77:95:91:ca:0f:ff:0a:
         f1:23:80:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:38:01 2026 by rpki-client