Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/5E0AA532B55911F082D2971FC4F9AE02.roa
File:                     5E0AA532B55911F082D2971FC4F9AE02.roa (raw, json)
Hash identifier:          SNZFxZ1WDBY0XQdpEUiIv6XGx1lcVtDnSxgXZwwItKM=
Subject key identifier:   A5:53:3E:25:51:BE:08:15:92:0B:99:F4:28:3E:E0:72:61:F0:D0:90
Certificate issuer:       /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial:       54
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/5E0AA532B55911F082D2971FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:16:31 +0000
ROA not before:           Mon 15 Dec 2025 07:28:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55720
IP address blocks:        202.176.4.0/24 maxlen: 24
                          202.176.5.0/24 maxlen: 24
                          202.176.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
                          rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
        Validity
            Not Before: Dec 15 07:28:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d9bf-9b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:1e:19:59:1f:d8:a2:ae:93:a0:25:b9:cd:
                    0f:79:cc:cf:e0:66:db:9f:e5:50:6c:69:8e:bd:12:
                    33:1c:86:a8:c7:7a:fd:0f:4d:87:20:7d:e8:76:47:
                    21:6c:f3:d1:27:a6:74:dc:fe:10:e9:80:68:d0:7d:
                    97:b9:88:16:5c:21:a4:e1:97:ac:c3:33:f6:7c:fa:
                    79:e2:f3:41:ea:05:f2:c1:ac:f2:fa:b4:3a:b3:84:
                    51:c8:9d:6c:42:4d:af:25:88:bd:7c:2a:c6:03:d7:
                    74:95:5f:0c:eb:c9:60:7a:5d:0e:e0:aa:21:08:f9:
                    a2:74:b3:1b:87:af:df:1f:05:73:ab:a1:ed:7e:c8:
                    23:73:9c:2c:8f:09:aa:57:b0:b8:18:72:46:53:34:
                    5e:32:36:c0:b0:2c:6e:39:49:d5:60:b1:36:47:a3:
                    33:8d:0c:69:be:39:bc:fc:cf:39:60:22:78:b6:fe:
                    8b:77:9c:e8:b4:d9:38:f7:63:61:48:0d:19:c5:b1:
                    87:4c:41:9e:11:25:2e:50:6a:08:35:ff:40:6d:db:
                    b0:f4:88:8c:e9:45:67:52:c0:93:6e:b5:7d:f9:23:
                    ea:6f:df:29:a5:68:98:e0:b4:97:8d:b1:2a:83:6f:
                    50:fa:38:c1:ff:40:bb:1e:f9:cf:27:fe:b3:44:0a:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:53:3E:25:51:BE:08:15:92:0B:99:F4:28:3E:E0:72:61:F0:D0:90
            X509v3 Authority Key Identifier:
                keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/5E0AA532B55911F082D2971FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.176.4.0-202.176.6.255

    Signature Algorithm: sha256WithRSAEncryption
         b0:df:5d:be:e6:26:c5:04:66:a2:53:04:6d:57:7a:9f:eb:93:
         b8:a9:b7:51:e4:7e:f5:93:6e:a1:77:02:ae:10:72:95:94:f0:
         77:9a:16:1d:3e:dd:59:64:db:fe:f2:15:fb:60:30:92:17:61:
         da:8c:e7:45:bf:02:a1:90:ba:8d:95:12:77:1d:e8:30:8f:48:
         36:44:8f:b1:bc:a1:01:de:df:b4:46:7d:f7:d2:90:3e:5c:70:
         99:f9:a0:85:18:4f:af:fd:c6:be:0e:f6:a9:5a:4b:f2:5b:c8:
         f7:48:ba:ce:50:9c:9c:eb:9f:f2:9a:9e:5f:e6:cf:c0:42:11:
         30:4b:03:d5:b6:e1:c8:1c:5b:35:c4:91:5b:a2:28:ca:a7:5e:
         8a:a7:27:d9:75:8d:8c:62:38:f8:08:91:0a:28:49:a0:0e:10:
         79:fd:86:a3:11:81:c1:49:2b:05:b7:56:1d:0a:a5:72:ba:f7:
         c5:c9:43:d3:26:30:e2:8e:cc:d5:2e:66:ed:6d:6f:d2:b7:e2:
         eb:50:4b:30:5a:68:a8:40:8c:ce:90:6a:76:a2:60:94:0a:51:
         1e:26:eb:c0:36:c6:84:42:09:04:2d:45:b2:7e:0e:de:d0:d8:
         2c:f0:99:48:8e:28:f7:f0:df:eb:64:66:f5:9b:20:82:40:d5:
         1a:39:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:44 2026 by rpki-client