Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
File:                     F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (raw, json)
Hash identifier:          maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=
Subject key identifier:   85:21:9C:21:35:D2:01:50:D1:8E:47:85:E8:4B:5D:D6:41:1D:49:22
Certificate issuer:       /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial:       01AA
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
Signing time:             Sat 11 Apr 2026 04:36:36 +0000
ROA not before:           Sat 11 Apr 2026 04:36:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     131239
IP address blocks:        202.37.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
                          rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
        Validity
            Not Before: Apr 11 04:36:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d9cfd4-c730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:da:25:ca:5c:23:ad:96:85:6b:a7:84:84:
                    af:fc:4b:0b:33:6d:c4:4d:1f:5d:3b:47:f2:da:4c:
                    66:e6:81:78:02:e5:3c:0c:eb:dc:77:97:a2:82:59:
                    7e:10:92:12:5a:bd:3b:3a:8f:3a:26:15:cb:7b:ac:
                    d6:51:c5:9b:03:8b:59:58:1a:5b:e3:8d:65:b8:8e:
                    70:68:8a:17:00:90:20:6b:03:8c:6b:c3:75:3f:9d:
                    b9:ca:7d:d7:d2:4c:bc:41:6f:50:54:b0:52:75:e3:
                    30:32:6a:e5:d1:f7:3b:0e:96:9a:f0:60:ed:0f:ce:
                    1d:35:47:6c:55:0d:7a:14:9d:0b:60:45:a4:39:95:
                    1a:e1:cf:84:cb:25:b5:54:27:a4:e5:b5:3d:5e:fa:
                    76:07:c3:90:a9:8f:5b:31:7a:fb:c2:57:1d:d2:2b:
                    d2:0a:7d:71:51:13:5c:ca:35:a0:30:ee:df:07:83:
                    80:85:c1:70:1c:e9:ac:54:b7:f0:e7:67:1c:73:e9:
                    51:7d:c4:0e:f1:e1:41:23:25:f9:d6:0a:a6:b4:21:
                    79:b3:f9:4f:f4:67:20:f3:67:84:a4:7b:ef:8b:be:
                    4b:63:53:d7:4c:c1:dc:1f:ca:9e:83:41:9d:f3:83:
                    56:25:64:0e:77:49:34:df:28:d4:f6:17:e5:84:14:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:21:9C:21:35:D2:01:50:D1:8E:47:85:E8:4B:5D:D6:41:1D:49:22
            X509v3 Authority Key Identifier:
                keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:ef:93:8b:8d:c4:d2:31:05:03:a8:3f:69:55:5c:a0:f1:87:
         b3:92:1a:47:42:b8:e8:39:c4:a4:b0:c8:c3:d0:41:3c:81:03:
         2b:4b:3c:b4:dc:80:f9:7c:7a:1d:c6:3b:2a:b9:5d:98:c6:19:
         a6:63:a0:5d:9d:db:0f:83:68:cc:d2:f0:43:42:8e:48:81:cd:
         2b:b4:12:81:60:e4:0e:4c:d4:29:2d:69:aa:8c:0d:6a:20:a2:
         9c:8d:65:8f:7e:fd:28:d9:19:ba:cc:60:55:6e:89:c9:3b:4d:
         da:32:41:c2:a9:42:8d:df:fa:5e:bf:c2:d2:7b:f7:7a:c7:32:
         5a:74:91:c1:95:13:a9:b1:36:0e:90:a4:02:e3:84:49:90:d4:
         69:34:b2:60:67:16:a9:f1:ff:c8:6e:7d:c3:3a:d9:e1:f0:99:
         ca:b3:4a:60:b8:19:51:93:ba:21:94:e4:31:d3:d8:7c:3e:f8:
         93:14:53:63:23:54:6c:e4:cc:dc:d0:a1:b0:55:4c:48:11:d2:
         e4:75:fa:6c:90:99:a7:b4:f7:c6:f9:08:fa:62:39:ab:5b:c3:
         dc:9c:cf:9f:15:ec:29:58:5e:90:ec:cb:2f:e7:e6:43:73:ed:
         53:72:52:9e:59:68:3f:cc:00:f5:8d:48:7c:21:1e:27:73:44:
         f8:01:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:21 2026 by rpki-client