Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/48B8F476089911F0B2664480C4F9AE02.roa
File:                     48B8F476089911F0B2664480C4F9AE02.roa (raw, json)
Hash identifier:          MuNuMkxAFUR1Wh7csTaD0KC8yfFyrk8OC925bsZ2OHQ=
Subject key identifier:   39:BF:8A:87:9A:83:50:B0:21:AA:00:E2:E9:27:01:94:FC:2D:5F:7E
Certificate issuer:       /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial:       1327
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/48B8F476089911F0B2664480C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:34:03 +0000
ROA not before:           Wed 02 Apr 2025 17:16:05 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141432
IP address blocks:        116.204.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
                          rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4903 (0x1327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
        Validity
            Not Before: Apr  2 17:16:05 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4242b-ec77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:34:27:fa:00:cc:f0:2b:ca:96:56:f5:a3:
                    cc:19:02:99:ff:cf:9a:91:cc:9a:3e:98:d2:fa:3b:
                    ca:cd:89:be:97:7d:40:92:dc:0e:00:e4:1b:77:e2:
                    78:61:03:f5:aa:71:52:3a:b1:d8:6c:1b:3b:13:b1:
                    87:2f:77:dd:c8:ce:5c:c6:db:83:89:28:f5:83:10:
                    48:f0:d8:4f:30:9e:ca:07:30:6a:55:1d:29:50:0b:
                    70:76:da:fd:2a:3d:be:89:6b:4c:0c:3e:f0:e0:74:
                    0c:44:57:9d:cb:90:2b:59:e5:0b:ab:16:79:1c:9d:
                    07:b0:7e:c7:0b:98:5c:70:8f:03:1f:84:0c:9b:3a:
                    5c:4b:42:98:f2:d3:e2:0d:5f:28:05:51:12:bc:b9:
                    24:e8:65:76:fa:f7:31:77:81:48:26:b6:8d:6c:5b:
                    56:aa:6c:f2:e4:4a:c1:b0:19:c8:e8:c9:ea:66:d5:
                    84:28:36:e2:8b:9e:f0:98:8b:88:26:01:29:95:e1:
                    00:c1:ff:c0:08:6a:46:74:7e:58:4e:5d:03:dd:07:
                    22:bb:1e:91:2c:4c:88:a2:df:ac:05:c9:4a:9a:9d:
                    9d:14:1a:08:be:03:aa:79:19:eb:7b:4a:0f:23:79:
                    ec:5c:df:67:35:17:c6:45:14:b9:02:50:5a:31:65:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BF:8A:87:9A:83:50:B0:21:AA:00:E2:E9:27:01:94:FC:2D:5F:7E
            X509v3 Authority Key Identifier:
                keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/48B8F476089911F0B2664480C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:45:2e:b6:c2:19:5c:fa:8e:35:65:01:68:ae:0f:d6:5b:6f:
         f5:f8:e3:4b:f8:92:e8:2d:83:49:f6:f1:ef:f4:aa:f9:9c:66:
         5e:51:e5:5b:06:9d:d2:94:66:83:7c:76:a9:52:d2:ca:dd:77:
         81:c0:00:97:29:45:3a:66:bd:33:e6:e7:3e:08:13:91:87:a6:
         17:11:e3:38:bf:ac:36:33:47:e6:a5:3a:43:e4:6b:a2:18:b9:
         1b:1c:43:02:14:55:96:eb:e2:20:62:f6:40:4a:d6:39:fe:17:
         bb:fa:87:9b:ae:b4:ff:02:74:f2:29:d4:56:ca:a2:eb:e3:6d:
         25:c8:cb:2c:4d:7b:3a:a4:a5:55:d4:6c:2a:5c:78:7c:e0:90:
         0b:d3:3e:d4:db:e0:47:1d:38:48:a3:53:d5:87:7a:1b:ab:25:
         5d:3a:3e:a6:d2:fe:ba:00:01:5b:5d:bc:60:89:ee:4f:26:3e:
         ea:86:46:a8:b0:2f:3b:59:06:cb:e1:83:4a:29:90:99:05:59:
         54:72:f0:b5:53:b2:d8:5f:85:b4:aa:b8:0d:e9:0d:ce:59:8e:
         5d:35:f8:c3:f7:48:ce:97:15:5e:e9:5c:4e:08:fc:1e:e0:0f:
         3a:3e:4b:c0:a3:24:10:89:aa:9e:39:f1:d9:0c:3b:f6:12:33:
         70:a1:95:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:10 2026 by rpki-client