Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/657EDAC0003D11F187167F2F4B6F56BC.roa
File:                     657EDAC0003D11F187167F2F4B6F56BC.roa (raw, json)
Hash identifier:          weYMUmUD1ARPw1SwwWxeCqTkxxR1HXaS9FBc7fRBcGo=
Subject key identifier:   99:CF:AC:27:9C:12:A6:1A:3D:0F:24:E9:A3:73:9A:11:56:E3:B9:61
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       019C
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/657EDAC0003D11F187167F2F4B6F56BC.roa
Signing time:             Sun 01 Mar 2026 17:52:27 +0000
ROA not before:           Mon 02 Feb 2026 13:45:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152702
IP address blocks:        202.71.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: Feb  2 13:45:12 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a47cdb-c652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:dd:af:5b:d7:e2:d0:2d:ff:fe:ff:0d:a1:
                    ce:0e:cb:9d:89:e1:75:fd:bf:9f:4d:e4:32:95:83:
                    2e:8c:7e:c8:26:9e:e8:10:05:59:ae:99:4b:5b:32:
                    70:6a:2f:b4:76:45:18:25:b1:39:6c:35:95:d3:4a:
                    03:34:85:74:0e:e0:49:47:81:cd:60:7e:30:f4:f8:
                    ad:23:1a:b2:c0:e7:b1:4e:0c:f6:de:ad:e2:cf:9b:
                    03:fd:59:3e:64:d0:18:2d:62:90:ba:0d:75:62:67:
                    5d:f3:f7:42:97:2c:c7:b0:24:96:70:c2:be:5f:2b:
                    d9:26:e1:56:b4:fb:44:d7:ef:a9:fe:18:4b:ae:86:
                    fc:b3:42:71:a5:43:b2:f3:23:2f:56:4b:a1:5f:7b:
                    a3:1b:99:fb:5f:4f:a8:b4:95:0d:dc:e1:b4:42:40:
                    4f:e6:be:d5:04:0a:14:9f:08:e7:46:b1:02:b1:6b:
                    6c:85:ff:8b:75:75:30:72:f8:c4:3b:e8:94:c9:42:
                    9d:6e:bb:82:b8:1c:91:2e:7c:69:a3:93:1d:a3:22:
                    e1:72:da:0e:40:fa:a9:b5:33:e2:b8:1e:a7:23:1f:
                    f9:af:71:40:ba:41:7d:b2:89:bd:29:47:19:0e:51:
                    77:1e:17:01:83:12:84:8d:bc:3c:9c:f8:25:29:89:
                    36:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:AC:27:9C:12:A6:1A:3D:0F:24:E9:A3:73:9A:11:56:E3:B9:61
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/657EDAC0003D11F187167F2F4B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.71.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:b0:a0:52:e1:63:e6:bd:fa:0a:06:f1:ef:2c:05:5a:45:fa:
         29:8c:af:8b:67:5b:96:06:b9:c2:df:d7:a5:d3:37:92:1d:48:
         a2:f6:09:23:90:de:02:71:53:51:8e:2d:f0:3b:23:db:eb:2a:
         5b:e2:95:db:fa:3f:1d:ec:15:81:4b:50:f0:47:d7:27:ee:c7:
         7c:b5:1a:44:33:e4:95:e2:f4:ac:33:67:ae:8a:1f:e3:c5:85:
         e8:2f:9e:ac:a0:93:24:34:98:9d:73:e2:66:23:52:92:3c:30:
         b9:17:ea:f2:46:31:ae:e4:15:f9:72:d8:0b:59:eb:dc:b8:89:
         be:8b:51:44:ca:d4:5b:d6:4a:c5:0f:9e:17:a4:c8:1e:65:88:
         b2:d3:5b:b3:16:b2:38:84:03:72:21:5c:fd:d3:bb:27:96:48:
         cb:3f:97:d2:9d:02:a9:ba:1a:dd:5c:45:13:df:4c:7f:7c:b2:
         9c:05:7b:be:f7:38:2a:04:c8:28:35:bf:85:54:c8:7d:65:9e:
         c6:fe:f4:15:6c:e0:b1:13:8f:6b:bd:43:bf:20:cd:df:f6:18:
         b0:97:1b:c7:7d:82:63:53:db:b3:ff:1e:e8:d1:9b:53:3b:48:
         72:4d:20:31:65:20:39:7b:19:e7:bf:3f:9e:b5:60:f3:58:ce:
         74:40:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:13 2026 by rpki-client