Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/691D0462E6FD11F09102F531686F56BC.roa
File:                     691D0462E6FD11F09102F531686F56BC.roa (raw, json)
Hash identifier:          0XyfDO8it6I75D9n0w3xE9lzsxnoVx1g4ZUiUe/hMW0=
Subject key identifier:   1C:6D:E5:14:FC:17:A0:C0:17:3F:FD:4C:A2:8E:46:97:F8:73:A5:0B
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       37CC
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/691D0462E6FD11F09102F531686F56BC.roa
Signing time:             Thu 16 Apr 2026 15:14:15 +0000
ROA not before:           Thu 16 Apr 2026 15:14:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132471
IP address blocks:        182.188.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14284 (0x37cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Apr 16 15:14:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e0fcc7-a645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:de:f0:9f:3c:75:79:b7:d7:d1:2e:33:74:87:
                    ce:a1:c0:b4:9f:3c:77:3d:ef:8c:c8:b9:b3:17:7b:
                    ef:af:1b:8b:1b:4f:7b:04:e8:64:12:db:30:6d:25:
                    17:79:5e:c8:58:9c:b5:a9:f1:fa:76:62:03:8e:04:
                    9b:ba:aa:2e:8b:4a:7c:55:10:c8:ae:90:97:ff:96:
                    06:7e:12:1f:d6:df:a5:88:6e:0d:57:f4:9e:dc:65:
                    bd:57:fd:64:82:af:22:a6:bc:4f:09:e1:eb:0c:dd:
                    ed:58:07:05:ff:fb:64:e9:c3:9d:54:76:4b:a4:9a:
                    8d:e3:37:f4:07:9b:fe:b1:79:0a:e5:3e:01:11:74:
                    57:f1:d0:17:cd:db:69:f6:8f:7f:fb:08:56:74:be:
                    46:da:ed:a0:d7:18:f0:dc:60:16:8e:2e:bd:9d:7a:
                    09:76:fc:73:82:75:4e:9c:4c:be:d9:fb:87:7d:33:
                    33:62:c0:c8:d8:cf:7b:d0:53:27:4f:63:60:a4:40:
                    63:72:ad:7c:30:4a:a9:f5:f4:08:8f:95:70:e4:a5:
                    99:a7:d9:9c:a2:f3:e4:57:a4:46:fe:bb:38:cc:90:
                    c5:9a:30:70:de:84:e3:02:71:df:98:06:0e:99:d5:
                    f0:ee:78:b1:79:a8:a4:c5:d2:2b:a4:bf:b2:99:e1:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:E5:14:FC:17:A0:C0:17:3F:FD:4C:A2:8E:46:97:F8:73:A5:0B
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/691D0462E6FD11F09102F531686F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.188.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:be:2a:a2:35:88:fd:8a:e5:72:2e:4f:3a:4a:77:c8:09:
         3d:db:8e:12:73:2d:61:38:a9:bd:fd:7d:10:f8:86:c2:c8:a5:
         bf:ad:f3:33:bc:be:eb:1e:53:da:fb:20:1e:19:0a:d6:3b:41:
         b7:e0:7a:71:7d:21:26:74:12:88:7d:a6:f7:a4:58:db:42:83:
         83:be:41:f8:cb:fa:8e:49:ef:33:6c:51:a0:3e:49:ee:ef:57:
         f0:67:55:2a:01:c3:87:0a:f9:c1:cf:21:ba:c6:67:f8:41:c9:
         f3:24:c9:f3:aa:99:70:af:65:31:32:c3:36:71:84:a1:50:7a:
         bc:97:f7:2e:3b:d1:16:24:7d:46:1d:17:d9:cc:4e:46:46:f3:
         06:cf:2b:9f:d7:e1:5e:6e:6a:a3:29:60:55:f0:6a:0b:24:3b:
         03:7e:aa:e9:48:56:5f:2c:9c:c7:7d:9f:50:a1:86:0e:cd:fd:
         60:25:7c:57:80:cb:93:d5:62:2e:80:40:77:10:6a:77:11:28:
         95:de:39:83:ea:17:2d:4c:93:92:2c:77:8a:7c:ff:a9:cd:71:
         63:40:f8:80:5d:8a:4a:f0:81:49:e7:28:e9:36:4f:da:76:37:
         cb:14:04:f7:51:e0:48:66:c5:06:18:0b:9f:f1:b0:a5:81:b0:
         d8:f8:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:54 2026 by rpki-client