Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/72966E18019F11F1812044E0666F56BC.roa
File:                     72966E18019F11F1812044E0666F56BC.roa (raw, json)
Hash identifier:          m14/qNg21Wg8M4DQJi5IqEzpTMWONljmqq0VZXGjYCI=
Subject key identifier:   B6:C5:10:E9:E3:19:E1:8F:D3:8C:F6:0E:79:55:41:56:26:BC:BF:79
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       71
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/72966E18019F11F1812044E0666F56BC.roa
Signing time:             Sun 01 Mar 2026 17:31:57 +0000
ROA not before:           Wed 04 Feb 2026 07:59:36 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154173
IP address blocks:        203.174.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Feb  4 07:59:36 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4780d-3512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a2:47:d6:9b:21:1f:47:91:45:fd:b9:20:79:
                    d0:f4:29:00:1e:b4:74:02:8b:38:91:06:5a:bf:06:
                    da:1c:12:6e:df:e6:92:05:dc:15:bc:11:46:05:0a:
                    9e:27:3b:64:cd:4b:09:55:16:db:1a:86:18:ab:b5:
                    f3:82:84:b8:a6:5d:9f:f9:a7:49:6d:21:50:14:96:
                    e3:57:b6:9f:b3:28:dc:bc:c5:1c:d7:c6:14:fa:29:
                    9f:38:23:a4:0f:96:51:ff:30:d2:ca:b7:95:56:51:
                    75:a3:f8:59:af:69:a8:83:00:69:c4:51:9a:69:d3:
                    8c:5a:92:24:77:08:0d:f1:16:3a:d3:6f:45:31:5e:
                    a0:ee:33:04:f6:c1:ff:13:4e:4a:00:16:28:fb:bb:
                    67:6b:40:a0:90:62:40:27:12:6a:ae:50:3a:5d:64:
                    7e:49:63:2b:fc:76:03:34:13:9e:e2:c3:8b:e3:2c:
                    0a:de:73:40:46:c7:d2:5c:e6:17:43:b7:46:83:6a:
                    36:41:05:19:fe:2e:9c:55:ca:df:b6:bd:29:72:8d:
                    bc:eb:ed:e3:c5:4f:e3:e5:2a:69:2e:6e:e8:9a:9d:
                    71:a3:2c:68:6e:93:76:9e:e5:f5:5d:93:4a:d6:f1:
                    ce:49:57:67:57:d1:b7:c6:f7:f3:c5:66:04:c3:da:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C5:10:E9:E3:19:E1:8F:D3:8C:F6:0E:79:55:41:56:26:BC:BF:79
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/72966E18019F11F1812044E0666F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:82:55:bd:fb:34:41:83:11:e4:e6:f0:07:8e:83:4a:c9:5e:
         5e:14:37:a1:11:45:b2:e9:03:5f:40:8b:3f:13:f7:b2:be:27:
         84:ed:b8:65:a8:7f:ed:b2:5d:b6:2a:7b:57:93:d2:99:26:a2:
         54:56:23:bd:a5:24:0b:22:35:9c:9c:44:9b:3a:61:ad:65:52:
         86:ff:aa:4c:1a:7b:8b:60:f7:0e:2b:2a:c2:04:00:f5:87:73:
         b8:c1:42:60:51:2a:93:48:33:c5:51:07:17:ec:4c:55:fc:89:
         f2:9a:ec:14:a3:71:52:ea:e2:b9:14:c7:19:1c:35:b3:de:cb:
         44:05:5a:c3:e1:67:33:c9:f8:7c:d6:f5:f8:d4:cc:b8:91:c2:
         9d:52:71:9f:67:12:cb:c5:88:aa:e5:d7:9b:1e:ad:d9:53:7f:
         45:95:bb:8a:b2:78:0e:b8:53:7f:bf:08:b4:ae:47:c6:db:68:
         d1:d0:ad:62:db:f3:ff:dc:44:73:fb:f5:72:18:c8:ee:0a:5d:
         71:72:0f:c5:79:bd:7c:04:c5:bb:98:8a:e2:67:9d:50:e7:5c:
         00:21:cc:92:ef:b5:97:87:43:e9:ef:91:17:98:e1:dd:89:51:
         7e:db:a5:ac:6b:25:c2:9c:49:9c:79:c5:26:b6:a8:ad:ed:ed:
         73:f2:0a:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:23 2026 by rpki-client