Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
File:                     11749BE62DA511F1AB5ACB70A2833773.roa (raw, json)
Hash identifier:          u1IB5dE51O5NoBXF8I3dV5NS6opSVbCQW+k0AqG4/jY=
Subject key identifier:   56:E7:67:42:5B:DD:B7:5C:EE:3B:0F:76:81:4A:B1:35:0C:82:E5:52
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       B4
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
Signing time:             Wed 01 Apr 2026 08:30:42 +0000
ROA not before:           Wed 01 Apr 2026 08:30:42 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     57402
IP address blocks:        63.216.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Apr  1 08:30:42 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69ccd7b1-a82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9a:5c:02:0e:b6:eb:7f:45:ae:bf:33:05:08:
                    ed:89:a7:73:b4:b8:70:45:b2:61:91:44:6f:66:77:
                    33:5c:a2:bb:de:bf:bf:e3:9d:53:db:7c:bb:35:36:
                    11:57:0d:2c:37:2b:88:0a:32:08:fb:51:67:fb:42:
                    04:0d:3e:80:dc:c7:aa:e8:55:db:23:1d:50:d0:ea:
                    3f:b5:0e:6c:ec:ff:18:2b:18:86:0f:eb:4d:f3:79:
                    05:a9:90:ca:49:21:52:de:8b:89:8d:14:da:39:19:
                    27:ac:3c:cd:57:f6:44:94:1f:a0:cb:ad:0f:69:4a:
                    a4:8e:89:db:b7:3a:1a:49:76:bd:fe:7a:ad:bf:b7:
                    94:74:13:45:d6:6c:01:be:f1:05:c5:e8:97:7a:18:
                    cc:2f:1e:9a:7e:89:94:9d:f9:3f:60:01:4a:e2:7e:
                    90:e4:d8:88:91:fa:9a:40:be:a7:73:6f:a4:7a:de:
                    f4:fe:0e:69:ac:f0:f9:6d:b8:59:a2:82:47:c9:a9:
                    d3:12:03:8f:90:7a:1e:5d:f1:23:41:1a:f4:39:cc:
                    f7:fd:64:b2:a7:c3:e1:58:fd:35:30:bb:f2:bf:d0:
                    10:b2:45:c8:a0:6d:e1:aa:43:1e:3a:84:28:d8:ae:
                    d3:c2:5e:b6:ac:87:62:ec:3a:31:7a:ac:a6:d0:ac:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E7:67:42:5B:DD:B7:5C:EE:3B:0F:76:81:4A:B1:35:0C:82:E5:52
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:79:22:82:34:9c:2c:1b:2d:36:7e:38:0c:05:d5:a8:7f:e7:
         1c:a0:fd:12:41:54:5a:2b:96:fa:97:0f:64:38:cf:b4:bd:88:
         3e:fd:ca:7e:49:2e:b9:3a:36:4b:13:b0:45:07:5d:1d:2a:5a:
         89:dc:a2:d0:0f:50:23:28:ea:92:c0:f8:cf:92:f5:44:dd:38:
         9e:ed:1f:e7:a2:74:df:ff:1c:f5:aa:c9:dd:01:80:1a:0b:49:
         47:4f:ec:ab:00:c5:db:06:b7:8d:f5:ea:b8:9f:c3:d3:31:82:
         e4:a5:b2:93:3c:88:ff:b9:e2:20:70:4b:ce:ca:28:be:87:9f:
         a7:0d:2d:9a:72:04:4d:21:0c:48:82:2b:27:2f:34:cc:47:0b:
         88:73:73:9e:e7:04:17:ff:89:d7:71:45:0f:81:e7:2d:87:db:
         7a:c8:20:0f:3e:fb:a2:82:c0:62:5a:f7:25:cc:e8:4b:dd:ba:
         10:59:28:01:23:9a:15:a2:a9:54:fb:ef:b4:d3:54:88:58:5b:
         f9:79:92:48:02:0a:61:63:7a:cb:89:8d:ad:b6:04:60:f1:e4:
         f1:bf:fe:b1:a4:26:0d:85:19:6c:63:3e:3e:62:1a:0f:ef:31:
         5c:1c:d5:18:4e:ce:d3:7e:b5:80:91:e1:23:10:0c:84:85:5a:
         45:ec:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:39 2026 by rpki-client