Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
File:                     31E9004E9A0F11F0BC057E7DC4F9AE02.roa (raw, json)
Hash identifier:          lMXIM574jb3Z0QsqRGCGYyP7C5VSgFPD1a4YIovILSM=
Subject key identifier:   CE:23:46:45:EB:E2:79:2B:CA:E2:96:FE:47:B5:54:8A:A3:80:BF:E5
Certificate issuer:       /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
Certificate serial:       53
Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:17:20 +0000
ROA not before:           Thu 25 Sep 2025 12:57:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154084
IP address blocks:        192.51.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl
                          rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
        Validity
            Not Before: Sep 25 12:57:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3d9f0-26b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:89:c0:35:84:d6:6f:95:b6:ae:f1:47:40:
                    25:a1:5b:e0:3d:d6:f7:50:ef:d9:99:dd:2a:31:cf:
                    bd:db:ea:c5:43:02:38:6d:54:11:48:03:50:eb:3a:
                    fa:9d:ae:bc:d3:c4:ce:db:fd:d8:3d:56:c3:a0:16:
                    9b:65:0f:15:d5:88:c5:69:7f:55:5a:5c:85:85:3b:
                    64:71:b3:13:a5:e8:87:45:50:e4:8c:73:b3:96:98:
                    e5:6f:bb:69:b6:ba:cb:09:bd:ff:99:56:49:c3:93:
                    f3:2e:64:d5:df:25:de:bd:0e:a3:4d:20:df:32:f4:
                    3b:6c:14:7b:44:45:2d:d7:09:8d:08:70:47:d2:03:
                    f2:b1:ef:fb:5e:ef:95:fd:53:7f:68:76:b3:cb:58:
                    75:91:4a:97:09:ba:19:83:51:d1:a5:31:67:03:88:
                    12:0c:28:f5:45:3b:72:26:12:ec:73:93:63:36:1e:
                    87:c3:3c:97:35:ff:28:25:38:bf:79:cc:80:40:a3:
                    0d:1c:4d:62:ff:eb:32:c2:6c:de:ac:14:54:ea:19:
                    3a:c7:b7:0a:97:a7:4a:81:fb:e9:a5:7b:72:5e:cd:
                    3f:45:04:03:9b:e7:16:89:e1:76:57:54:9e:2c:ae:
                    0f:b5:9d:d1:49:16:9a:ad:68:e3:bd:8f:72:a2:82:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:23:46:45:EB:E2:79:2B:CA:E2:96:FE:47:B5:54:8A:A3:80:BF:E5
            X509v3 Authority Key Identifier:
                keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.51.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:21:7f:02:f3:68:80:fe:06:5b:51:b8:11:0a:57:26:d8:
         f7:a9:c8:c4:75:c6:4d:8e:f1:6b:02:8d:ca:cc:4d:11:da:23:
         96:0d:f2:4b:1d:55:c7:e8:4f:ce:9c:6a:b4:8c:05:15:e0:75:
         75:70:4b:00:93:a9:48:5d:c7:e7:b3:31:cc:bd:a9:c0:80:b5:
         6c:db:c1:92:71:c7:d9:23:fd:7d:35:e5:83:73:25:0c:16:43:
         4b:66:e0:e6:4c:e5:ec:70:b7:4d:25:23:27:c5:aa:e7:9f:bf:
         d2:4e:65:0c:2d:91:f9:eb:0e:2e:d7:2c:0a:4c:21:c2:e8:a8:
         da:b8:8e:28:ee:ee:5e:17:76:8e:50:b0:8b:05:66:03:95:ce:
         27:18:f0:72:94:33:67:92:c1:52:ee:de:77:db:35:aa:af:da:
         a7:f0:f8:1e:25:3e:3e:b3:69:8d:11:9c:85:87:d7:12:f2:f7:
         d4:8d:43:6e:48:b6:40:ec:86:68:68:29:83:73:72:3c:ca:3d:
         13:66:da:2c:7c:34:d1:97:2b:c5:3c:7b:05:b6:61:a9:bf:d0:
         a5:c3:8f:db:76:b1:13:87:0f:19:20:55:69:7e:3a:35:5e:e3:
         9c:22:a4:9d:3f:29:36:00:48:ed:8c:f8:03:90:47:15:06:05:
         09:54:b2:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:49 2026 by rpki-client