Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
File:                     0396C48E5E7011EDAD328E21C4F9AE02.roa (raw, json)
Hash identifier:          aTV22OI3x/KmbZ4Fy6hctkdp9RgbYkty6oOiMs7TFtg=
Subject key identifier:   E2:BA:0B:2E:BC:85:08:60:A2:1A:AA:6F:DA:32:EB:13:E3:D7:23:7D
Certificate issuer:       /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial:       13FF
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 17:21:12 +0000
ROA not before:           Thu 02 Apr 2026 17:21:12 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     55002
IP address blocks:        202.124.46.0/24 maxlen: 24
                          203.80.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5119 (0x13ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
        Validity
            Not Before: Apr  2 17:21:12 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cea588-397c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a1:87:4d:ee:e2:0b:41:ac:54:8b:49:68:f0:
                    83:df:ae:c6:f5:a3:94:f7:72:70:39:17:7b:3c:3f:
                    90:67:04:98:5b:a5:43:c1:43:11:16:b3:bf:93:61:
                    fb:9d:fd:85:91:a9:52:12:f6:69:8c:43:39:0d:ad:
                    10:9e:e1:e3:5e:c3:72:76:6b:f6:96:ee:56:d2:4d:
                    55:65:4d:de:7f:63:d0:ed:7d:73:02:8d:6c:4c:d4:
                    df:f4:24:c3:c3:a7:66:16:79:31:e8:14:05:06:57:
                    2d:a8:77:6b:4e:93:f3:f0:f4:15:61:bc:61:a8:b1:
                    ee:ac:64:74:f8:43:21:fc:cb:13:42:88:66:62:5e:
                    cd:55:fe:2c:c3:1c:6e:19:a3:08:29:11:f4:b2:82:
                    40:be:6f:21:9f:9c:52:7f:34:3a:0a:ba:84:6c:27:
                    bd:11:f3:37:fa:4b:ca:f5:04:3e:00:55:2a:e9:e4:
                    e1:60:16:01:b3:a3:5e:dc:ad:14:d5:1b:61:fd:43:
                    9c:c1:46:d7:4f:9f:6d:07:f5:07:99:3d:04:f8:93:
                    ef:c3:91:15:0a:26:a6:00:1a:66:2c:62:3d:9a:38:
                    e9:41:1e:3f:c5:85:60:04:e3:be:f4:18:a2:0f:07:
                    4a:7c:4f:e7:97:70:7b:12:68:fb:4a:f9:01:1e:aa:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:0B:2E:BC:85:08:60:A2:1A:AA:6F:DA:32:EB:13:E3:D7:23:7D
            X509v3 Authority Key Identifier:
                keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.46.0/24
                  203.80.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:f6:d0:52:d0:5e:cc:0d:69:27:ae:88:ba:de:e1:88:ee:44:
         0b:e4:14:74:9f:35:4a:e0:8e:46:45:da:e6:aa:fb:c7:65:75:
         95:a8:37:e4:d0:c1:81:df:91:d3:43:82:61:17:32:2d:5d:1c:
         a2:1f:9c:4d:17:95:07:d6:3b:7f:9e:6c:c5:42:2e:a5:36:ac:
         fd:f8:21:9d:a1:b2:0e:1b:c7:38:94:23:e2:10:d2:fe:1c:67:
         78:ba:35:c2:62:36:0a:db:f6:ca:22:40:b0:5b:d3:8a:55:fc:
         f9:c7:af:e3:9c:d0:3a:08:fe:69:f3:c3:ee:f9:68:7a:97:88:
         71:64:0a:f9:eb:11:36:26:6c:6c:4e:40:0b:2d:8b:96:cc:17:
         a4:26:3f:53:5d:16:84:c9:45:51:33:7d:b2:9c:33:f9:70:3a:
         0e:e5:3c:1e:18:55:69:d6:ef:f8:f6:5a:26:5b:6e:63:dc:b8:
         0f:b8:66:f2:38:6a:0a:8a:af:ad:60:d4:1b:b1:7e:c4:6c:ee:
         37:70:ee:a2:11:17:9b:39:e5:91:71:3e:2f:61:ec:f1:3e:28:
         79:46:42:28:27:b0:1b:c7:e3:cd:a4:09:3b:30:2e:2d:a7:f2:
         5f:3c:3f:04:08:99:31:22:3c:7a:a5:b9:c6:61:4d:78:f9:58:
         84:20:14:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:56 2026 by rpki-client