Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa
File:                     5B196FD80A4611ECAE818D54C4F9AE02.roa (raw, json)
Hash identifier:          yZMlmWs6ehiqiK21MWo58HZmpGkvpysqNROF9+RqzZE=
Subject key identifier:   FB:3A:60:25:DD:4F:E0:A8:0D:9D:16:26:91:73:53:55:29:3D:92:FB
Certificate issuer:       /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Certificate serial:       0865
Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:51:25 +0000
ROA not before:           Tue 16 Sep 2025 21:32:12 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     7473
IP address blocks:        202.165.128.0/19 maxlen: 19
                          202.165.128.0/20 maxlen: 24
                          202.165.144.0/20 maxlen: 24
                          2400:7000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl
                          rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5F82, serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
        Validity
            Not Before: Sep 16 21:32:12 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4526d-6697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:55:f6:29:b2:9e:f2:90:0e:19:25:d7:85:33:
                    9d:d1:4b:9c:ec:17:a5:2d:bf:44:be:e9:7f:73:75:
                    10:84:11:90:2d:b7:19:71:10:78:7c:0f:26:46:c1:
                    10:35:51:f1:2f:6d:2e:22:a3:1d:b3:a3:a5:b7:ca:
                    22:7b:c3:a1:12:d6:72:a5:2b:f1:9d:e0:f8:ec:e2:
                    87:8c:d2:20:71:3c:73:5e:fa:ce:f8:70:0a:c3:89:
                    ed:94:11:71:d3:c4:de:65:fe:a8:61:6b:1b:6c:6d:
                    12:ce:cf:1a:23:08:fe:c5:f3:16:2d:e1:03:c9:1b:
                    04:46:81:10:49:d0:c1:5c:3e:a8:49:55:2a:a3:ca:
                    be:5b:5f:5d:e3:86:41:af:52:5e:56:39:39:0b:b2:
                    27:4e:04:a1:14:cb:db:fb:0a:5c:73:53:db:4e:27:
                    35:84:7c:29:d9:1c:94:d7:60:61:99:59:fd:6d:53:
                    3e:84:b3:06:d6:f7:f5:d4:59:61:c6:52:51:b4:3f:
                    62:39:1a:ce:4e:da:c9:77:a0:39:7a:1e:bd:eb:87:
                    e8:64:b9:43:42:47:36:5a:79:86:7d:75:be:b6:22:
                    8f:f3:c7:bd:ee:6e:72:bb:c9:ba:95:a6:b3:d2:b0:
                    ad:9a:39:1d:e8:af:59:bd:df:a9:2d:01:0a:f4:e7:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3A:60:25:DD:4F:E0:A8:0D:9D:16:26:91:73:53:55:29:3D:92:FB
            X509v3 Authority Key Identifier:
                keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.128.0/19
                IPv6:
                  2400:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:50:f0:c2:5f:b1:4e:16:f3:ff:51:fc:d3:d8:a9:ed:9d:
         dc:1c:09:f8:8f:86:ee:71:26:6e:30:18:4d:e6:b4:eb:24:9c:
         9b:3c:6c:23:ea:c5:05:06:4d:bc:2f:67:51:15:d0:3e:ce:94:
         c8:2e:e0:19:c8:5c:5f:a7:c3:9e:88:fe:94:05:3d:8e:49:2e:
         f9:5e:81:27:f2:fb:c1:b5:fa:69:74:fc:52:c1:7a:81:8e:73:
         b7:f9:87:cf:1f:a8:6f:45:6e:e3:b6:d6:37:65:1b:80:42:88:
         82:51:8a:a3:23:12:db:6f:fc:17:7e:e5:30:b8:d4:dd:84:96:
         a6:3a:0e:a5:af:a6:df:5c:2e:1b:96:aa:f5:3e:47:c1:19:99:
         7d:d3:55:46:72:ee:f6:98:ec:37:16:cd:f3:0c:d9:39:d5:53:
         7d:4f:ee:2c:77:f2:07:08:c1:95:3d:bc:3f:ac:6e:67:5b:62:
         5f:01:92:52:7b:85:b4:a1:8b:c0:72:71:81:79:c7:92:96:b9:
         9c:f1:ab:3b:c6:aa:b9:94:f5:4a:26:b7:54:d1:46:27:ba:e2:
         9b:3a:6c:80:fb:2d:6d:83:84:40:f5:9e:04:18:6b:46:cc:8e:
         69:ce:14:9c:94:58:e2:04:f5:1f:03:38:47:7c:bc:8f:e5:0c:
         c4:c5:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:11 2026 by rpki-client