Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/9F4A37143EA511EF882FE276C4F9AE02.roa
File:                     9F4A37143EA511EF882FE276C4F9AE02.roa (raw, json)
Hash identifier:          /udgKWkllTFMKWDvP2LWsjTx88G0YCTPXn9ZKrOvvx4=
Subject key identifier:   BD:0B:9B:69:77:80:00:73:FC:24:0F:72:02:52:7A:BB:4F:C6:48:C1
Certificate issuer:       /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial:       016E
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/9F4A37143EA511EF882FE276C4F9AE02.roa
Signing time:             Fri 15 May 2026 15:19:58 +0000
ROA not before:           Fri 15 May 2026 15:19:58 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152900
IP address blocks:        160.22.78.0/24 maxlen: 24
                          160.22.79.0/24 maxlen: 24
                          192.206.117.0/24 maxlen: 24
                          216.176.238.0/24 maxlen: 24
                          216.176.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 07:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
        Validity
            Not Before: May 15 15:19:58 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a07399e-d497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:b4:8a:a3:81:f6:33:c9:64:c6:4c:d5:86:
                    9b:d6:34:bb:ac:7c:f8:8b:2d:c3:cc:32:03:c7:13:
                    aa:b3:2f:45:2a:61:08:b3:e0:96:c0:77:84:41:79:
                    79:88:e5:55:0b:d9:f7:f1:e7:5c:0b:bb:ef:55:b3:
                    ef:a6:d1:b1:eb:f7:6c:10:22:18:44:54:bd:c8:5d:
                    59:14:aa:1e:a3:35:d6:6e:22:56:95:bb:71:b6:c8:
                    e6:a2:92:b5:a0:d3:76:e4:b4:cb:c1:9a:1f:05:27:
                    92:ca:a3:ea:e1:dc:da:b4:c3:ad:ce:36:05:45:cc:
                    19:85:e1:08:53:d2:a4:d0:f6:5b:f2:42:60:17:b7:
                    b6:d0:b7:ea:53:3e:d9:09:11:db:da:22:51:c0:4f:
                    75:38:e6:12:6b:04:fe:df:38:87:a9:ad:56:ad:23:
                    cb:6e:6b:42:f7:06:e9:18:59:14:ba:e9:cb:a3:ab:
                    92:90:81:bb:d3:fc:1d:10:2a:d9:86:86:e4:43:dc:
                    52:a2:af:ca:b3:18:db:ff:5a:ad:5f:8e:ad:ae:18:
                    d8:31:93:06:2b:46:2f:53:64:99:27:d3:1f:e5:85:
                    76:cc:cb:24:36:28:8b:7d:06:46:ad:89:47:1e:89:
                    e4:52:00:75:10:c4:c9:a7:91:60:e2:a4:cc:56:3a:
                    23:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0B:9B:69:77:80:00:73:FC:24:0F:72:02:52:7A:BB:4F:C6:48:C1
            X509v3 Authority Key Identifier:
                keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/9F4A37143EA511EF882FE276C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.78.0/23
                  192.206.117.0/24
                  216.176.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:67:2c:af:0e:82:cf:ba:44:fa:06:29:0d:3f:9b:1b:08:35:
         58:7e:8c:84:db:82:6c:9c:0b:91:85:37:b1:3c:93:ad:b5:bb:
         96:dc:f8:12:17:3b:6c:be:86:b5:c6:d4:b2:35:6b:a7:4d:ae:
         9d:0b:68:ee:e0:26:fa:6f:52:32:2b:b3:5f:f4:33:95:98:a4:
         38:04:10:6e:42:7d:23:24:94:d5:e7:de:6f:a5:b0:ff:e9:00:
         a6:a5:8e:24:ce:ae:52:84:df:b1:05:4f:c8:c8:20:34:ba:27:
         75:6c:e0:78:17:33:2f:37:91:25:12:2c:51:12:09:8d:a5:b1:
         81:ab:ef:86:a3:28:f6:37:f5:cb:05:26:fd:70:97:82:cf:f0:
         a9:81:0e:04:2c:1c:d9:4f:a1:7b:7c:52:99:dc:10:97:7e:44:
         bc:6e:9a:b4:05:29:22:60:39:fd:d2:b1:e0:36:0a:2a:50:2b:
         06:b6:d5:52:1b:ff:bc:21:e3:04:12:21:e5:18:ba:71:df:97:
         8e:80:26:0e:1c:29:9c:3d:8c:5e:1e:68:96:a1:e2:8d:05:5e:
         d0:0d:70:68:b7:2c:bf:24:3a:6d:8b:1f:fb:7b:7c:f4:7b:42:
         58:62:cc:b1:f4:98:d5:ae:3c:48:9a:5d:9e:5a:00:37:18:ac:
         1c:0a:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:26 2026 by rpki-client