Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/E9CC4952DBB711F09A595FAD4E641951.roa
File:                     E9CC4952DBB711F09A595FAD4E641951.roa (raw, json)
Hash identifier:          wYT2EQO9tWff1SLhMXGfdomgltEhqCKkHfWiewZBsdE=
Subject key identifier:   40:16:19:87:60:A8:F1:D3:19:7A:B4:A9:1F:B3:98:D8:3D:DA:F6:DB
Certificate issuer:       /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Certificate serial:       56
Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/E9CC4952DBB711F09A595FAD4E641951.roa
Signing time:             Wed 13 May 2026 08:40:58 +0000
ROA not before:           Wed 13 May 2026 08:40:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18390
IP address blocks:        203.20.60.0/24 maxlen: 24
                          203.28.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
        Validity
            Not Before: May 13 08:40:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a04391a-3e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:03:02:9b:56:2d:4c:dc:68:57:e8:ef:a0:
                    0c:79:0c:59:c0:77:bb:62:7d:10:5f:fe:d9:f4:48:
                    09:09:25:5d:05:fa:16:c8:7b:74:34:31:ba:09:6d:
                    5c:96:97:89:a7:c7:93:25:f3:3f:c2:00:37:9c:2b:
                    09:17:6c:30:bd:21:8a:51:0b:44:73:92:0c:a5:2c:
                    2c:db:f0:c3:4e:24:c9:3c:8d:10:cc:92:3c:0d:5d:
                    7b:63:78:63:a9:91:3b:2c:ab:85:50:5e:72:2c:c4:
                    dc:c5:47:91:b1:1f:f5:93:3e:49:5e:da:ec:3f:50:
                    78:fc:3a:22:cf:84:c0:30:53:29:1a:0e:2b:ab:b1:
                    4d:cb:ac:4a:39:8c:16:49:2d:94:04:c7:7a:17:7c:
                    3c:75:a2:eb:d6:09:c3:1a:97:81:c0:98:06:8f:73:
                    42:b0:ba:c9:c0:a1:bc:0d:b0:69:85:76:a5:4f:8e:
                    07:af:e3:d4:d1:9f:cd:eb:33:11:8a:5e:1a:e3:0a:
                    ee:19:2b:80:53:66:f2:18:7d:88:c8:ad:93:6f:75:
                    ff:54:bf:c0:20:a3:97:7f:64:a1:a1:a1:f4:17:23:
                    5b:3d:8b:e6:c4:1f:2f:86:55:13:eb:d5:e4:71:fd:
                    5a:c4:c4:e7:77:e5:d3:34:5b:00:b1:90:a1:58:6b:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:16:19:87:60:A8:F1:D3:19:7A:B4:A9:1F:B3:98:D8:3D:DA:F6:DB
            X509v3 Authority Key Identifier:
                keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/E9CC4952DBB711F09A595FAD4E641951.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.60.0/24
                  203.28.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d0:a4:b1:d4:5d:42:8c:b0:6e:ce:76:d6:36:bd:4a:06:b6:
         61:45:37:4f:7b:cc:e0:c6:ca:0a:00:f8:26:3f:c3:c6:8e:8c:
         27:2e:01:d8:fd:ed:0b:44:6a:9b:db:52:3a:69:e1:44:1f:d5:
         0f:93:fe:49:fb:8c:ed:c6:64:c3:95:1f:4e:ac:ba:03:7d:eb:
         83:75:be:0a:46:b4:ae:cf:33:41:fe:c0:6a:c1:f0:19:a0:af:
         7b:01:bf:01:78:48:38:7c:6d:34:fc:fb:fc:56:0c:36:20:38:
         28:4d:8d:2a:09:61:a2:94:ba:da:30:8f:d0:06:a0:87:7a:0f:
         55:17:e7:58:ce:ab:fe:46:47:3b:98:20:d4:0c:71:13:fd:b8:
         d1:67:56:7b:2f:cc:80:51:34:51:28:7c:8c:72:93:56:18:34:
         bc:aa:7f:a4:ad:b6:80:ce:08:07:77:ce:cd:89:f7:24:71:a3:
         4a:2e:a5:c9:ab:2c:7d:5f:80:ea:5a:02:31:53:2b:43:5c:c1:
         e5:3a:aa:c3:51:46:16:93:d0:57:21:c9:b5:e7:68:2c:36:c3:
         de:82:d3:12:cb:b0:1a:4e:02:f7:95:20:7a:53:26:75:40:6c:
         c3:60:42:17:15:77:53:e1:04:5f:1c:5e:a8:df:f7:29:26:14:
         26:7d:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:54:39 2026 by rpki-client