Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A7432F4E221011F09599EB53C4F9AE02.roa
File:                     A7432F4E221011F09599EB53C4F9AE02.roa (raw, json)
Hash identifier:          2lWcdwSsqnteN3cr8iI9TEJFzz97z0GHj2FcmUPcDqs=
Subject key identifier:   25:19:A8:16:F5:38:3C:D7:CE:07:B8:50:DA:9B:FE:A0:BB:32:15:D8
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       617B
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A7432F4E221011F09599EB53C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 20:25:38 +0000
ROA not before:           Thu 16 Apr 2026 20:25:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     23730
IP address blocks:        218.188.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24955 (0x617b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Apr 16 20:25:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e145c2-2127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a3:11:15:dd:cc:4c:0e:f5:e3:31:a4:95:d2:
                    07:dc:17:94:d4:a9:65:4f:ef:b2:7f:ed:f5:13:b6:
                    70:57:9c:1b:85:72:dc:89:7c:51:7c:1d:8f:42:b0:
                    e6:02:2a:19:c7:e2:ce:d2:e1:24:a5:b0:45:0e:52:
                    3b:d0:8f:df:c2:8e:df:f4:04:17:81:e0:92:a7:80:
                    94:f3:7d:4b:e5:98:bd:db:32:57:9f:d8:64:4a:8e:
                    5e:4c:bc:61:78:45:9f:c4:a7:41:65:a2:0f:e4:19:
                    b7:d6:da:45:4f:e7:5f:84:7b:bf:a0:c4:53:e5:c9:
                    cc:c9:e7:f3:88:d1:32:90:34:2a:a7:9c:70:61:25:
                    19:5b:71:0a:a4:6f:9a:c6:31:99:5d:38:0f:21:33:
                    89:79:df:33:32:4e:15:9e:31:ea:ed:b4:84:bf:3d:
                    a1:ef:bd:85:86:bd:57:3e:91:ff:7a:30:ec:b0:12:
                    6a:de:2a:1c:0e:90:72:32:a0:c6:cf:04:87:5e:60:
                    80:be:72:dc:29:1e:04:82:f7:2f:f2:a5:dc:14:3e:
                    71:ce:46:1c:b0:9f:4d:76:29:90:02:87:97:5b:2b:
                    cb:66:cc:dc:13:57:1c:b3:da:d7:6f:1a:bf:fa:79:
                    b9:e1:d7:93:fd:81:b2:6b:8c:d9:b2:fd:d9:6c:19:
                    85:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:19:A8:16:F5:38:3C:D7:CE:07:B8:50:DA:9B:FE:A0:BB:32:15:D8
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A7432F4E221011F09599EB53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.188.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:ec:77:a6:69:85:31:0d:cf:26:0b:14:59:b0:f0:3f:a6:
         3e:bd:df:04:80:8c:0d:f0:d0:d2:9a:e2:a4:22:62:26:fb:3b:
         e8:b1:75:14:14:d0:e8:ef:3d:20:06:82:0c:e2:3d:95:30:1f:
         bd:dd:ab:2b:55:11:e9:ab:aa:32:e9:1c:85:0d:26:1e:4e:89:
         8e:20:2a:eb:62:7e:cc:89:27:3f:9c:37:f3:ac:cd:83:88:70:
         09:85:32:37:a8:26:07:c9:d3:c8:92:9f:6e:37:6d:27:ff:cb:
         84:38:c0:e9:76:1c:2d:71:5d:c8:63:74:f1:ab:96:f1:b4:43:
         a5:ef:a7:09:ca:28:cc:3c:03:6b:83:f9:50:63:5b:d4:e2:f9:
         46:26:fd:2f:69:32:ff:9a:d2:ae:1d:28:58:ee:9e:98:16:73:
         ad:c1:a4:6d:c1:4f:cc:3a:b6:f2:e2:98:6e:0a:99:e6:75:8f:
         26:a5:65:23:00:bd:b3:7e:1c:38:6b:06:15:88:7c:ab:5f:8c:
         ef:7c:4d:d7:64:3b:be:1d:8a:9c:b5:fb:e5:c1:42:2c:ec:82:
         f9:b5:39:98:33:8b:ec:05:c6:0b:4a:0f:f8:bc:2f:c3:d2:54:
         f5:a4:67:a4:29:a8:9f:47:68:e0:f1:f3:aa:53:2b:68:0a:b4:
         4c:8e:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:38 2026 by rpki-client