Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/3E3F56AE602C11EF82BEF23FC4F9AE02.roa
File:                     3E3F56AE602C11EF82BEF23FC4F9AE02.roa (raw, json)
Hash identifier:          ljpaK6h7Qu+yD69fQT6FR9miFJ6+BwcWJUtP4CX4HzM=
Subject key identifier:   29:9B:61:6B:28:C4:C0:36:E6:8C:B5:F0:9C:DF:B4:9F:8F:04:9A:5E
Certificate issuer:       /CN=A91A1E13/serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714
Certificate serial:       0700
Authority key identifier: C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/3E3F56AE602C11EF82BEF23FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:04:54 +0000
ROA not before:           Tue 02 Dec 2025 21:25:54 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     50605
IP address blocks:        218.251.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714
        Validity
            Not Before: Dec  2 21:25:54 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a471b6-b8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:bb:73:e1:c2:b1:8b:d4:48:9e:99:59:e3:
                    69:73:79:7f:ae:cf:d4:64:03:f4:fb:fe:91:2b:01:
                    d6:1c:8b:f9:f9:9a:0d:c0:7b:49:df:63:71:a3:aa:
                    3f:99:40:ac:0b:24:2c:f9:9a:b7:ce:ef:3c:03:31:
                    a8:f4:47:2f:c3:46:99:c2:70:5e:29:36:65:2e:0a:
                    f8:b5:06:82:3f:18:f6:a8:7e:33:55:9c:87:8f:a4:
                    1c:bf:53:87:77:2f:f3:57:a5:71:71:9e:15:a9:8f:
                    01:2a:9f:b6:61:0f:a5:48:e4:cf:1a:9d:ce:64:22:
                    3c:fb:61:52:f0:04:dc:4a:bc:81:2c:d9:5c:3c:1a:
                    94:e0:c4:e6:91:8f:d4:cd:08:78:77:9f:ef:e2:49:
                    9d:81:78:eb:53:45:44:95:8a:16:7c:14:a1:87:ea:
                    36:7a:40:39:19:d1:7d:ae:69:5e:40:ca:c3:c6:10:
                    15:e0:97:0f:b0:0b:3f:61:ca:19:98:35:37:ff:03:
                    b2:92:fa:87:72:f8:a9:8f:d3:dd:01:fc:29:2f:12:
                    95:4a:8b:36:4c:f7:ca:8d:fa:26:06:07:d7:d6:37:
                    76:78:3a:b3:5b:12:a2:0e:28:7d:f4:d8:8d:19:2c:
                    d2:d1:5a:f5:2d:db:e1:de:b1:27:35:11:92:71:28:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9B:61:6B:28:C4:C0:36:E6:8C:B5:F0:9C:DF:B4:9F:8F:04:9A:5E
            X509v3 Authority Key Identifier:
                keyid:C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/3E3F56AE602C11EF82BEF23FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.251.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:df:52:22:59:35:0b:af:91:7f:66:49:95:43:ca:b3:38:da:
         15:af:55:02:73:9d:3c:93:b8:51:0c:0e:62:a2:58:d1:3b:47:
         01:3e:27:ea:a3:44:a2:4e:38:03:42:8d:54:4c:b0:75:78:8a:
         32:b6:ed:4f:45:60:12:69:f5:5b:58:f4:9c:76:ed:a5:fc:46:
         70:3f:89:43:a2:4c:d3:c6:01:b4:74:7c:87:69:00:5d:51:c6:
         bb:fc:65:20:91:53:7f:8b:e6:0e:d4:9f:b7:d5:63:c6:e7:9c:
         12:e9:34:32:fd:84:fa:ec:72:bd:4b:d6:e5:a1:53:05:08:34:
         42:8d:42:9c:30:67:1d:e1:92:84:55:73:31:98:30:bd:a6:4f:
         84:a8:d9:64:af:05:2e:f6:c8:46:41:31:cb:79:9c:86:10:d2:
         ea:9e:c7:1d:be:c1:a4:45:ee:b8:09:c6:d0:07:69:75:ac:42:
         57:73:c4:5e:0f:2c:8f:34:87:e7:04:d7:b9:5b:ae:c5:68:7e:
         0b:61:25:d0:6a:c7:55:f7:e6:3d:e0:77:fe:6b:33:a5:d0:4d:
         43:fd:51:a2:b9:e1:ed:e4:38:8c:72:b4:ee:21:3b:ed:7c:57:
         d6:98:84:62:8b:3b:d7:50:2c:48:d5:9b:cd:2c:17:a9:92:8e:
         e9:73:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:12 2026 by rpki-client