Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/74CECB38FBF711F0B6045B12716F56BC.roa
File:                     74CECB38FBF711F0B6045B12716F56BC.roa (raw, json)
Hash identifier:          DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=
Subject key identifier:   19:B5:DB:7D:88:13:B4:C9:82:9F:3B:6A:24:C8:32:EE:1D:E8:B1:1D
Certificate issuer:       /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial:       05E7
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/74CECB38FBF711F0B6045B12716F56BC.roa
Signing time:             Sun 01 Mar 2026 18:22:42 +0000
ROA not before:           Wed 28 Jan 2026 03:14:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9291
IP address blocks:        202.43.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
        Validity
            Not Before: Jan 28 03:14:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a483f2-5df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:b3:9e:c6:0e:70:55:78:05:4d:9a:b1:6f:
                    03:09:b3:b4:f9:01:28:31:55:ae:02:a5:d6:0f:e2:
                    a9:cc:60:60:1b:71:54:61:4c:82:58:da:ac:b0:3d:
                    15:eb:a6:38:4b:bd:d4:17:ce:76:b3:4b:1e:be:92:
                    36:a2:25:c9:48:8f:0e:a7:fa:ce:7e:6c:d4:85:e3:
                    e6:64:5f:d5:2f:f9:63:24:f1:b7:b2:05:5c:24:d1:
                    6c:43:7b:34:87:01:6e:7d:76:e1:e7:8f:81:9d:1d:
                    5d:da:93:a8:c8:4c:b1:75:45:35:0a:45:ed:36:df:
                    86:82:0c:60:ef:21:1d:0b:8c:0e:b7:8d:59:37:dc:
                    d5:81:7e:88:83:c5:9b:46:d7:8c:ce:02:bd:bf:e5:
                    b2:f6:d4:9f:af:80:bf:e3:45:a6:49:07:34:a1:f0:
                    8c:28:2f:e4:2c:5a:d5:95:4d:61:1f:c4:99:8a:33:
                    39:68:e5:73:91:ac:eb:ef:bc:cf:7a:5d:a8:3c:8d:
                    9d:94:da:be:57:0b:ff:48:13:f7:2b:3f:fa:50:30:
                    a7:f4:06:c5:8f:5f:51:8b:12:c5:cb:b2:7e:51:2d:
                    e2:4e:0e:ab:da:26:6f:7c:26:4d:e7:f4:b6:56:c2:
                    06:ba:7e:f5:eb:85:75:70:a3:02:61:b8:27:8e:1b:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B5:DB:7D:88:13:B4:C9:82:9F:3B:6A:24:C8:32:EE:1D:E8:B1:1D
            X509v3 Authority Key Identifier:
                keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/74CECB38FBF711F0B6045B12716F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:44:0c:de:17:88:3e:82:7c:0c:70:82:c9:bb:82:9d:78:52:
         f3:14:81:c4:72:39:24:3b:20:72:09:ca:18:b5:9a:93:e3:6b:
         a9:a5:80:05:0c:d1:bf:37:28:c8:7a:0b:62:81:5a:a9:0a:24:
         99:dd:a0:0e:e2:8b:bb:ae:27:ef:e3:a9:dd:a6:04:e4:aa:ea:
         e0:b0:d4:40:d1:b9:d7:93:42:d4:4e:6c:5a:9d:49:3e:30:b1:
         86:c2:bd:f0:af:58:05:7d:cc:ef:6f:a3:95:90:9d:d9:b8:01:
         87:a0:0c:1d:67:c3:e5:75:44:f9:ee:2d:72:1a:cb:76:8a:93:
         2c:a3:50:10:e1:f5:d9:e0:2d:fe:23:5f:01:71:a5:da:3e:56:
         3b:20:cb:7e:db:16:06:ce:7a:3e:30:9a:1a:e6:52:44:04:db:
         3c:0c:05:93:92:ae:7a:df:bc:eb:b8:20:1c:2a:3a:28:be:34:
         7a:37:24:a3:15:b3:69:ed:2b:5b:5e:68:be:3d:49:b6:c0:62:
         5d:1f:5d:55:d5:bd:3a:12:58:f3:42:1a:48:23:99:5b:16:38:
         58:89:35:68:f0:f6:43:5b:a0:b3:53:b8:7c:cb:0d:07:d4:6c:
         5f:21:c9:7e:bb:ce:b2:7b:70:10:f0:ab:94:e3:17:21:d4:1b:
         68:7f:8e:09
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy
MEM4RkQ1N0IwHhcNMjYwMTI4MDMxNDI4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODNmMi01ZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAteGznsYOcFV4BU2asW8DCbO0+QEoMVWuAqXWD+KpzGBgG3FUYUyCWNqssD0V
66Y4S73UF852s0sevpI2oiXJSI8Op/rOfmzUhePmZF/VL/ljJPG3sgVcJNFsQ3s0
hwFufXbh54+BnR1d2pOoyEyxdUU1CkXtNt+Gggxg7yEdC4wOt41ZN9zVgX6Ig8Wb
RteMzgK9v+Wy9tSfr4C/40WmSQc0ofCMKC/kLFrVlU1hH8SZijM5aOVzkazr77zP
el2oPI2dlNq+Vwv/SBP3Kz/6UDCn9AbFj19RixLFy7J+US3iTg6r2iZvfCZN5/S2
VsIGun7164V1cKMCYbgnjhvI8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBm1232I
E7TJgp87aiTIMu4d6LEdMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2
MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUNENzIvNDU3NkE2NzIyNjEyMTFFQ0I5MzE5OTQyQzRGOUFFMDIvNzRDRUNCMzhG
QkY3MTFGMEI2MDQ1QjEyNzE2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyisFMA0GCSqGSIb3DQEBCwUAA4IBAQCQRAzeF4g+gnwMcILJu4Kd
eFLzFIHEcjkkOyByCcoYtZqT42uppYAFDNG/NyjIegtigVqpCiSZ3aAO4ou7rifv
46ndpgTkqurgsNRA0bnXk0LUTmxanUk+MLGGwr3wr1gFfczvb6OVkJ3ZuAGHoAwd
Z8PldUT57i1yGst2ipMso1AQ4fXZ4C3+I18BcaXaPlY7IMt+2xYGzno+MJoa5lJE
BNs8DAWTkq5637zruCAcKjoovjR6NySjFbNp7StbXmi+PUm2wGJdH11V1b06Eljz
QhpII5lbFjhYiTVo8PZDW6CzU7h8yw0H1GxfIcl+u86ye3AQ8KuU4xch1Btof44J
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:24 2026 by rpki-client