Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0732C4DC090B11F1B0A6391E363D8C67.roa
File:                     0732C4DC090B11F1B0A6391E363D8C67.roa (raw, json)
Hash identifier:          Wu60RNAiUlVp2NGUvo4QBmfRHd/OF1xlWAS40T8CJdE=
Subject key identifier:   C0:19:93:F7:44:3B:C3:E8:19:14:E8:60:00:B4:CE:CC:73:7C:56:08
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       0526
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0732C4DC090B11F1B0A6391E363D8C67.roa
Signing time:             Sun 01 Mar 2026 16:33:36 +0000
ROA not before:           Fri 13 Feb 2026 18:39:28 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     14593
IP address blocks:        65.181.0.0/19 maxlen: 24
                          168.140.240.0/20 maxlen: 24
                          206.83.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Feb 13 18:39:28 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46a5f-d7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:ba:8c:5d:07:1a:66:26:06:20:fa:1e:e1:
                    f7:8b:dc:b7:64:9e:30:28:48:38:e9:9b:51:86:f4:
                    5e:a1:1f:e0:1b:40:5c:72:30:b7:83:90:05:41:38:
                    dc:9a:9a:68:62:69:67:2b:8e:dc:58:ea:4b:43:61:
                    ab:c0:1f:0d:66:01:17:f0:29:7a:81:df:9d:75:ca:
                    15:66:52:1e:68:16:9b:5f:63:71:46:4c:93:11:86:
                    7a:98:47:0e:4d:41:f1:7d:37:42:56:12:a8:e4:3d:
                    a2:6f:ac:ff:f4:27:77:31:7d:d7:6b:b0:92:01:07:
                    1e:0b:5a:99:2c:a4:50:e0:92:92:6e:ce:1e:b2:d9:
                    a0:27:57:f7:e1:84:e9:9b:cc:89:cb:f1:c4:7d:0a:
                    96:4e:6a:50:c1:a3:83:29:6c:0b:09:fd:5a:03:a1:
                    94:d5:29:e7:75:37:65:bc:85:02:2c:8a:5b:4a:ef:
                    6a:5a:ba:15:5e:d7:89:37:3e:9a:78:97:b1:c8:91:
                    15:04:b9:11:86:8c:fa:d0:7c:c7:bb:88:f5:ad:6c:
                    0e:9f:d5:fb:71:e1:11:72:59:38:e6:c0:3c:f6:b9:
                    d9:1b:47:42:d8:1e:e2:05:bf:ed:37:96:4c:8c:93:
                    23:35:b1:0d:b6:d0:f5:9a:42:df:4f:99:63:cc:47:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:19:93:F7:44:3B:C3:E8:19:14:E8:60:00:B4:CE:CC:73:7C:56:08
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0732C4DC090B11F1B0A6391E363D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.0.0/19
                  168.140.240.0/20
                  206.83.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:d1:4d:a1:03:52:ba:59:d3:73:6c:df:f2:5b:c1:4c:24:a7:
         24:da:d5:57:64:6a:db:10:cb:11:77:b6:90:17:48:a0:dd:24:
         af:34:2d:8d:71:57:00:f3:f1:88:bc:ee:a3:60:de:a6:82:3f:
         8e:8a:22:9d:05:62:f6:63:e7:34:a7:bc:a2:e4:7f:38:98:57:
         c6:5b:67:3a:b4:40:3a:56:ba:ec:d0:70:b5:c5:da:bf:c8:95:
         6b:dc:6d:ac:85:5f:8b:fd:99:93:dc:3f:7a:96:b4:f1:9c:d8:
         fc:15:6c:1c:d5:f5:0e:c2:48:4a:e8:41:ae:5f:0b:c6:6d:33:
         26:cd:9c:d9:f2:10:e3:a9:4a:0d:09:03:52:85:ae:c2:f1:a8:
         f3:c0:a9:a4:ea:0a:64:e5:42:f0:eb:c7:5f:13:7b:7b:f1:31:
         b2:b0:cb:f3:ae:85:55:40:f9:c0:4d:a2:cc:41:33:0b:24:1d:
         69:af:6c:f2:b1:df:35:6d:c4:7b:18:1a:09:62:40:f7:44:62:
         3f:c2:4e:f4:0a:dc:22:0a:d3:e3:d4:5b:38:4b:27:c7:33:4b:
         e2:4b:aa:25:52:e7:9d:b2:f1:a2:4b:4c:4f:1c:ea:63:0b:24:
         6d:5e:4c:f4:be:d8:6d:aa:e1:8c:74:8b:99:9e:50:84:44:52:
         60:37:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:52 2026 by rpki-client