Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/1315AE3C38C611F1B2610B139C833773.roa
File:                     1315AE3C38C611F1B2610B139C833773.roa (raw, json)
Hash identifier:          Nn4az3gvmtvpnwU88x9RZU6hR49cyJgX4hxouZ3GtD0=
Subject key identifier:   51:C0:B6:30:48:4B:27:9F:1D:68:ED:14:24:A2:9C:28:08:E7:53:B8
Certificate issuer:       /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Certificate serial:       0CC0
Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/1315AE3C38C611F1B2610B139C833773.roa
Signing time:             Wed 15 Apr 2026 12:30:11 +0000
ROA not before:           Wed 15 Apr 2026 12:30:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4808
IP address blocks:        203.207.128.0/18 maxlen: 18
                          203.207.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
                          rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
        Validity
            Not Before: Apr 15 12:30:11 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69df84d3-1aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:ce:6e:23:6e:39:80:4c:8d:c5:fc:23:70:
                    6d:6c:a7:f4:a0:42:6d:5a:3d:4c:a2:73:a1:2d:9f:
                    35:76:98:f1:a8:7f:f1:c6:68:28:92:80:bc:5d:93:
                    ad:a3:c0:6f:88:e8:d5:7f:eb:98:99:99:0d:de:87:
                    58:71:45:e3:08:40:9b:11:0d:3e:4b:37:e9:6c:3c:
                    5f:f3:bc:4c:cb:d0:df:93:ec:65:ac:58:da:ef:2a:
                    01:06:b4:92:e0:cf:c9:20:03:6b:33:1a:69:41:04:
                    81:2b:64:62:56:0b:ed:36:bc:dd:bb:d9:d6:72:4f:
                    f0:46:92:93:c6:12:ee:ca:74:27:98:31:41:14:35:
                    3c:51:f2:8b:39:b7:93:79:a9:be:53:e3:99:75:27:
                    c6:26:bf:01:17:8a:9e:85:93:c0:b4:2e:91:54:cb:
                    e6:e0:42:a4:6f:c7:00:8b:6e:13:17:46:c6:61:23:
                    62:e6:c9:22:fb:60:75:99:93:a5:44:21:9e:60:f7:
                    ff:fa:0b:03:e3:81:cf:7c:df:09:0d:d5:1c:bd:ab:
                    5d:2f:ed:6e:ef:4c:01:df:49:de:a5:d9:ed:54:90:
                    89:56:fa:20:ca:12:11:ec:4d:82:59:9d:a7:d4:4a:
                    69:27:a9:f3:23:42:ec:af:89:08:4b:8f:b3:78:e2:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C0:B6:30:48:4B:27:9F:1D:68:ED:14:24:A2:9C:28:08:E7:53:B8
            X509v3 Authority Key Identifier:
                keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/1315AE3C38C611F1B2610B139C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.207.128.0/18
                  203.207.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:06:02:8b:34:a9:50:27:60:3c:29:16:f9:01:83:f1:3d:c9:
         ff:d0:3e:d1:22:64:d5:1f:9a:77:1e:a4:af:be:48:b4:c9:40:
         7f:61:01:17:08:1f:0a:39:1c:51:9c:63:5c:55:4e:69:7e:c4:
         75:30:20:9e:b5:b1:1b:38:6f:9e:7c:70:d2:53:d1:53:85:6e:
         34:96:e7:df:19:4c:d6:90:df:02:90:69:c2:52:7b:9a:67:1b:
         11:60:0d:4f:1d:e0:a6:54:e6:f1:1f:14:c8:58:db:86:1b:a2:
         d7:c0:3e:4a:eb:2c:2e:55:d0:f7:f6:d2:9a:17:28:b0:a2:c1:
         0d:f6:ee:71:cf:b4:20:12:3c:cc:92:68:ea:a0:cf:7b:39:8c:
         d3:75:8c:b0:e3:ef:f7:d5:af:3b:37:21:04:09:c2:31:2e:53:
         7e:0d:80:30:16:69:b1:2d:24:30:a1:34:22:26:9e:50:40:35:
         ae:68:ac:2b:43:7d:29:58:12:6e:3e:be:99:68:cb:5f:02:ea:
         1a:a5:3f:f5:29:44:46:80:ae:5b:c1:81:05:54:47:5e:90:a5:
         ed:db:ed:a7:43:0f:c7:4d:c4:ba:b5:d1:48:de:44:07:7b:d1:
         f7:ff:3c:c1:8c:02:56:34:b5:c2:26:6c:93:a9:3a:eb:1c:54:
         6c:d7:f9:c3
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw
ODExQjUwNzYwHhcNMjYwNDE1MTIzMDExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRmODRkMy0xYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt93ObiNuOYBMjcX8I3BtbKf0oEJtWj1MonOhLZ81dpjxqH/xxmgokoC8XZOt
o8BviOjVf+uYmZkN3odYcUXjCECbEQ0+SzfpbDxf87xMy9Dfk+xlrFja7yoBBrSS
4M/JIANrMxppQQSBK2RiVgvtNrzdu9nWck/wRpKTxhLuynQnmDFBFDU8UfKLObeT
eam+U+OZdSfGJr8BF4qehZPAtC6RVMvm4EKkb8cAi24TF0bGYSNi5ski+2B1mZOl
RCGeYPf/+gsD44HPfN8JDdUcvatdL+1u70wB30nepdntVJCJVvogyhIR7E2CWZ2n
1EppJ6nzI0Lsr4kIS4+zeOIZNwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFHAtjBI
SyefHWjtFCSinCgI51O4MB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD
RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc2NTYvMEVFM0E1QkMwQ0Q2MTFFQUJGNTYyNTUzQzRGOUFFMDIvMTMxNUFFM0Mz
OEM2MTFGMUIyNjEwQjEzOUM4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQGy8+AAwQFy8/gMA0GCSqGSIb3DQEBCwUAA4IBAQCWBgKLNKlQJ2A8
KRb5AYPxPcn/0D7RImTVH5p3HqSvvki0yUB/YQEXCB8KORxRnGNcVU5pfsR1MCCe
tbEbOG+efHDSU9FThW40luffGUzWkN8CkGnCUnuaZxsRYA1PHeCmVObxHxTIWNuG
G6LXwD5K6ywuVdD39tKaFyiwosEN9u5xz7QgEjzMkmjqoM97OYzTdYyw4+/31a87
NyEECcIxLlN+DYAwFmmxLSQwoTQiJp5QQDWuaKwrQ30pWBJuPr6ZaMtfAuoapT/1
KURGgK5bwYEFVEdekKXt2+2nQw/HTcS6tdFI3kQHe9H3/zzBjAJWNLXCJmyTqTrr
HFRs1/nD
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:55:18 2026 by rpki-client