Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/52A1A77A6ECF11F0B2785815C4F9AE02.roa
File:                     52A1A77A6ECF11F0B2785815C4F9AE02.roa (raw, json)
Hash identifier:          BJpks1gOb51AQCv2clwa4s1WpHhotp2F+Z4P3kGOQPE=
Subject key identifier:   1E:48:02:B1:21:3A:15:16:F2:81:A0:52:4B:F5:19:BD:C7:DB:60:0C
Certificate issuer:       /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial:       05EC
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/52A1A77A6ECF11F0B2785815C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:18:02 +0000
ROA not before:           Fri 01 Aug 2025 12:01:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4755
IP address blocks:        202.41.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
        Validity
            Not Before: Aug  1 12:01:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a482da-d5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:90:f4:06:b3:9a:1c:5a:2a:8f:0c:b0:c9:
                    d0:91:f5:6c:c2:29:59:dd:86:52:fc:0e:23:a8:46:
                    c6:75:17:7a:27:f0:ea:9f:b0:4d:ec:a1:e5:05:90:
                    71:4d:6a:71:f8:c3:12:14:13:08:2f:15:9f:3f:40:
                    c0:88:67:80:6b:63:a8:23:b1:71:78:30:cc:1b:2b:
                    a2:c5:04:bf:fe:66:cf:9f:dd:30:3b:d5:3e:c6:28:
                    2c:0a:fa:f2:d4:a8:78:1d:e0:e8:a3:4e:de:a6:c8:
                    87:31:57:4b:7c:6b:86:38:40:a7:57:72:1c:14:b2:
                    b1:eb:e5:67:a2:dc:4f:a5:21:18:4c:4e:e4:61:5e:
                    67:34:2f:a9:18:a9:5c:96:cf:61:cc:36:c0:c6:9c:
                    55:ea:e8:ac:45:82:63:f9:6f:ee:07:31:e9:fd:14:
                    e5:98:cb:6e:14:9d:e8:57:4a:49:37:0d:86:67:dd:
                    1d:f5:77:17:ec:62:b5:7a:b6:97:b6:5e:99:24:8c:
                    14:35:60:78:6e:f0:dd:2c:7e:1f:06:37:7f:d1:ed:
                    b2:3a:e5:0f:fd:0b:05:9f:38:a2:71:bf:f6:86:7b:
                    62:09:24:d2:54:1c:d1:ea:38:e7:05:d3:9a:19:73:
                    36:0b:20:9a:16:26:d9:52:9a:0e:9b:ac:c1:ec:b6:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:48:02:B1:21:3A:15:16:F2:81:A0:52:4B:F5:19:BD:C7:DB:60:0C
            X509v3 Authority Key Identifier:
                keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/52A1A77A6ECF11F0B2785815C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.41.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:fe:88:4f:ff:29:67:2c:4a:c0:24:8c:cc:53:ea:20:58:8e:
         7a:34:0f:16:8e:aa:8e:91:7c:ea:a1:9c:19:3f:ac:cf:55:bd:
         9c:fb:75:27:78:35:1b:43:54:4c:9c:88:b0:d1:5e:8d:94:37:
         a3:d7:b7:ee:65:3b:b5:f4:8b:7f:aa:13:cf:f2:51:d9:ce:7d:
         5c:de:3b:ee:5f:34:26:72:f7:7a:ff:1e:15:ee:ea:fe:9a:a0:
         da:01:73:1d:78:21:06:fc:a7:16:f7:6e:52:db:b5:84:37:5c:
         ca:44:ab:77:d7:ec:87:ca:bc:56:c9:c1:ba:39:1d:d4:aa:8d:
         59:1a:3e:21:82:62:0e:62:04:26:c2:c2:90:2b:4e:c0:0e:45:
         27:ca:91:39:bd:d3:e3:40:a0:d3:03:23:0f:9b:5c:8c:00:94:
         ac:af:c5:0f:d7:de:70:4b:7d:ad:f6:8d:2b:a7:e4:73:14:0d:
         2c:18:68:a8:5c:c7:59:13:fb:66:58:12:ee:18:9b:4b:e3:93:
         45:bc:d1:24:aa:2f:20:ac:76:7f:c2:5b:6b:b0:80:1e:9f:2c:
         31:e9:48:a6:ee:24:77:94:1a:a1:60:2e:a4:31:69:b1:52:4e:
         f7:ac:42:25:83:77:8f:39:18:c5:b0:c6:c2:8d:ef:50:c0:e0:
         dc:c7:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:14 2026 by rpki-client