Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/A2939A381CB711EF8F98240CC4F9AE02.roa
File:                     A2939A381CB711EF8F98240CC4F9AE02.roa (raw, json)
Hash identifier:          KZIVQqjuq9teRuwe4DCZkRKCxKny4lGWVsTaGuYgtBY=
Subject key identifier:   8B:3D:4A:90:6F:F8:A1:76:F0:2E:7E:78:B2:68:34:10:7B:03:0F:D1
Certificate issuer:       /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Certificate serial:       0190
Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/A2939A381CB711EF8F98240CC4F9AE02.roa
Signing time:             Wed 01 Jul 2026 06:31:48 +0000
ROA not before:           Wed 01 Jul 2026 06:31:48 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152852
IP address blocks:        202.61.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
        Validity
            Not Before: Jul  1 06:31:48 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a44b454-71a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:1b:7e:71:be:61:1c:a2:49:44:a9:97:45:
                    de:4b:35:0c:de:68:0d:60:23:b7:d2:54:eb:8a:bf:
                    2f:a5:9e:65:1c:7d:9c:af:50:97:5c:98:ec:3b:52:
                    5b:8c:90:1f:bb:bd:46:59:0a:df:f4:00:e7:66:1a:
                    77:05:34:af:af:9b:6a:df:51:2a:89:e5:0f:6f:85:
                    37:81:1b:87:4f:08:34:9b:4a:ed:9a:64:ea:01:a0:
                    9b:7f:5f:67:0c:33:20:49:e3:4f:ea:87:77:61:c3:
                    ce:bf:28:32:8a:cf:0f:79:0e:10:e6:f5:f4:7d:5c:
                    d6:e3:d6:0b:46:f6:03:f4:02:f4:59:66:e8:5d:e3:
                    ad:79:88:61:45:98:c8:23:a6:5e:e4:0d:f9:b2:81:
                    f0:98:ae:15:ea:9c:36:84:b6:30:08:65:14:fd:27:
                    5d:d4:0c:a1:9e:02:d1:5e:fb:05:c8:fb:48:1b:d9:
                    de:63:17:2d:47:86:9a:98:86:d1:c8:a8:53:60:69:
                    65:bf:3c:e7:0e:a4:1a:be:42:d3:b3:30:fe:3f:65:
                    bd:36:7f:41:67:4c:b6:59:74:aa:4c:c4:e9:a7:78:
                    3e:88:40:de:b3:29:bd:60:09:a6:8a:4a:26:43:d9:
                    b3:f8:ad:32:15:c3:ae:a5:54:79:b9:d3:1b:e4:dc:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:4A:90:6F:F8:A1:76:F0:2E:7E:78:B2:68:34:10:7B:03:0F:D1
            X509v3 Authority Key Identifier:
                keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/A2939A381CB711EF8F98240CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:14:2f:39:a4:ee:77:f8:cc:1b:d6:99:12:a2:7a:78:c1:
         c2:71:90:2b:18:ae:1b:69:62:5d:a1:ca:eb:1a:ba:34:38:9b:
         b5:81:8a:ad:d0:07:a7:35:1f:33:7f:2d:b0:3e:c8:60:39:2c:
         63:f1:54:f7:9b:1b:4f:39:ce:47:64:11:93:a6:1b:52:ac:dc:
         ee:eb:45:71:39:5c:6a:9c:37:a2:09:af:1d:6c:4d:8a:e5:16:
         1c:d3:d2:56:4f:78:5a:51:11:d1:3b:4e:86:5f:21:46:cd:38:
         08:e7:74:f5:b2:3a:72:69:3b:e5:ce:9f:d2:b4:9c:1e:97:b9:
         d1:08:16:e3:78:3b:b0:30:9c:b9:9e:d2:dc:9d:9c:49:ac:be:
         fb:2a:6d:d5:29:a6:f1:a3:27:1d:03:1a:59:73:a7:d4:88:92:
         a6:a7:1d:45:81:60:5c:e2:b7:2d:d1:2d:95:fa:a9:5e:bf:93:
         11:ff:d2:f6:e0:ca:37:4f:d3:bc:38:b6:e2:93:3e:cd:fb:f7:
         4f:3d:26:91:63:39:b7:26:27:58:f3:3a:15:b1:28:41:e7:a6:
         e0:3e:cb:39:63:ac:32:f4:3b:1d:39:c8:19:9a:7d:9c:ca:1e:
         ff:bc:3b:b9:2a:3f:b6:7a:a6:48:76:db:57:19:91:e4:c7:f7:
         82:09:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:02:39 2026 by rpki-client