Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/2F734D2E860111EFB49EB20DC4F9AE02.roa
File:                     2F734D2E860111EFB49EB20DC4F9AE02.roa (raw, json)
Hash identifier:          AXziCFMFYEtBXdtY9dmpKm88jTn6EGy7D69LF+swI3Y=
Subject key identifier:   2C:8C:D2:48:D7:DA:80:2C:C8:5B:9F:48:79:F3:53:1A:98:E9:F0:5A
Certificate issuer:       /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9
Certificate serial:       019C
Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/2F734D2E860111EFB49EB20DC4F9AE02.roa
Signing time:             Sun 29 Mar 2026 04:39:14 +0000
ROA not before:           Sun 29 Mar 2026 04:39:14 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152643
IP address blocks:        202.37.46.0/24 maxlen: 24
                          2401:fa60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl
                          rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9
        Validity
            Not Before: Mar 29 04:39:14 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c8acf2-a189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:42:61:4c:30:f6:7c:f5:23:01:d0:ca:13:
                    8b:c9:9a:55:6a:a1:30:3b:c9:80:a3:16:b8:b1:48:
                    53:df:e5:1c:95:cd:8f:6f:13:96:df:5e:b7:72:93:
                    32:e5:26:13:62:27:e3:9a:20:8e:4d:55:68:39:b7:
                    c7:28:87:60:99:f0:fd:86:10:6d:ba:04:7e:b6:bf:
                    40:24:97:21:79:2e:33:f1:76:95:ed:1c:50:88:2b:
                    3a:80:f0:bb:e7:36:52:2b:82:60:80:84:64:89:cf:
                    d5:6d:f4:75:aa:74:ce:15:64:ca:67:3b:ea:29:f4:
                    7b:63:a9:a8:2a:55:23:cd:af:e7:83:20:a3:30:8c:
                    3b:71:84:b2:e5:b8:05:45:a2:ff:d3:d9:75:e8:81:
                    d4:e6:b1:b0:fd:05:b8:fe:59:88:e4:d4:99:38:28:
                    65:9a:96:21:b7:14:6f:31:dd:74:ee:bf:9e:04:68:
                    a0:cf:a8:e2:77:7a:28:8f:e9:fe:96:2b:22:11:ba:
                    12:fa:b6:56:38:ba:82:2c:38:fc:7b:b7:62:3e:4f:
                    14:d1:c2:2d:ef:4f:c9:7a:0c:dd:6f:a8:d9:e8:d9:
                    20:c1:2c:46:7b:94:ab:02:5d:d0:1f:4e:a4:83:18:
                    6d:aa:a2:0b:64:0c:36:67:93:7b:f4:26:71:ac:ce:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:D2:48:D7:DA:80:2C:C8:5B:9F:48:79:F3:53:1A:98:E9:F0:5A
            X509v3 Authority Key Identifier:
                keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/2F734D2E860111EFB49EB20DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.46.0/24
                IPv6:
                  2401:fa60::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:49:ec:3b:9d:e8:e1:34:b3:05:d7:7d:93:63:45:d3:38:8d:
         b6:85:0d:92:9d:8c:8a:40:3f:2e:ea:65:da:6a:ab:b9:25:fc:
         a3:61:3e:07:2d:3c:d3:0c:eb:a1:38:b4:ae:99:00:f1:0a:7d:
         36:11:62:f7:ac:5f:a5:b9:79:d3:9d:c8:08:14:26:0e:d3:39:
         df:ae:de:d8:16:62:a5:88:8b:16:df:98:3f:18:f7:c9:8b:68:
         a8:3d:47:a1:d9:cd:b6:8d:0c:ba:96:c5:38:9e:5b:40:fd:3b:
         ec:30:9e:dc:9f:4e:65:a8:58:da:f9:7d:a6:3a:0a:7d:c5:d8:
         78:5b:1c:82:a7:8d:df:ab:b9:b4:59:b8:f9:e5:91:7b:aa:dc:
         76:f7:63:33:23:49:bf:1e:57:f4:86:c2:e9:6c:2b:82:a9:ab:
         b3:22:1d:6c:7b:dc:7c:2a:6e:ec:99:ac:8c:66:92:a2:08:a4:
         44:e5:1c:17:d6:d9:1d:23:08:3b:f8:42:ed:9a:76:95:f2:5a:
         84:55:d9:c6:29:70:6e:64:ba:06:0f:3e:d1:fb:02:fa:01:26:
         0a:8e:d7:cb:a2:70:67:ad:a9:7a:e1:e6:07:0d:61:be:b8:b0:
         87:a3:ec:e6:8d:d5:97:4f:13:e2:44:bd:e8:dd:77:f6:bc:69:
         dc:c8:b7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:01:48 2026 by rpki-client