Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa
File:                     62C9C1CEE03111EEBECE581EC4F9AE02.roa (raw, json)
Hash identifier:          oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=
Subject key identifier:   65:FB:3E:44:F9:EB:80:A4:41:A8:58:3B:AE:FD:6D:08:A8:E6:37:36
Certificate issuer:       /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial:       19A3
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa
Signing time:             Thu 02 Apr 2026 17:19:58 +0000
ROA not before:           Thu 02 Apr 2026 17:19:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     147314
IP address blocks:        203.96.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
                          rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6563 (0x19a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
        Validity
            Not Before: Apr  2 17:19:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cea53e-4729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:d3:f7:b3:c4:e4:b7:3b:bf:cf:bd:3f:f3:
                    0b:44:35:0c:85:58:4e:23:02:45:c5:75:00:21:68:
                    c7:17:d6:46:d3:f8:52:e5:42:f1:71:d0:f2:d1:c7:
                    13:03:68:b6:fd:fa:cc:9e:c8:b4:84:fa:34:48:5f:
                    d9:86:24:2a:75:c8:c3:53:d7:b8:87:f2:91:7b:78:
                    9e:c0:f1:2b:cf:f5:90:e9:d3:76:c5:e4:e4:ed:a2:
                    ee:99:47:eb:42:0a:1f:a5:27:2e:4a:bb:b0:43:81:
                    25:da:e5:3d:21:df:41:3d:6f:76:b6:89:f7:fd:14:
                    de:4b:a1:62:53:61:8a:15:95:92:fc:56:86:ab:e6:
                    0c:cd:23:f9:2e:b8:59:11:59:52:23:aa:e2:d3:c8:
                    6d:bf:43:a3:ff:dc:4f:ac:b3:79:17:c2:92:47:4a:
                    13:9b:5d:bc:6c:90:ea:8e:bd:a4:2d:7d:7f:fd:02:
                    47:fd:b1:39:42:3b:48:bc:55:ae:e2:25:e4:cb:91:
                    16:c4:32:35:22:a3:14:9e:18:3c:30:7c:e3:ac:f8:
                    d2:fa:70:4e:f4:e0:ea:a6:1e:dc:f5:85:92:8a:9a:
                    17:7d:55:2b:8d:2e:4b:5b:9c:a1:7f:db:11:79:98:
                    59:50:ac:2b:2a:74:22:1d:76:93:43:bf:1b:df:1e:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FB:3E:44:F9:EB:80:A4:41:A8:58:3B:AE:FD:6D:08:A8:E6:37:36
            X509v3 Authority Key Identifier:
                keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.96.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:72:6d:fb:24:50:d6:0b:9c:ed:70:87:10:e7:39:6f:16:
         d2:2e:37:2f:18:92:e1:8b:e1:6a:b0:8d:27:22:a9:bc:74:0e:
         e5:b6:a4:63:71:d6:f1:4b:19:9e:06:48:06:e8:10:0d:4e:1b:
         af:a8:95:bf:1c:07:56:dc:78:51:b7:29:4d:43:7d:0b:26:41:
         80:dc:8e:a9:61:12:d1:8f:62:c8:c6:01:f3:1f:a4:60:1e:2e:
         dd:ab:95:2c:c5:fe:84:05:36:dc:3d:72:90:87:77:3b:6e:83:
         dc:fd:ad:b3:ed:52:dd:fb:96:3a:1c:a3:de:4a:4f:bc:4e:c1:
         97:0a:3a:4e:a9:6b:67:b6:a6:aa:7f:96:a0:2b:a5:d5:ec:75:
         64:c1:b1:eb:1c:b2:7e:c1:39:19:5e:83:1e:b1:26:b7:ca:6d:
         a7:ea:d8:92:91:f6:c3:5f:79:0e:0f:06:2a:94:71:a3:01:a7:
         dc:9e:a3:1e:1f:2d:07:92:db:9e:b6:23:ec:ea:08:e5:43:da:
         d7:e9:06:55:c8:f9:a8:73:0f:95:ad:31:2d:d5:ff:8f:d0:20:
         af:9a:bd:13:75:7c:0b:30:49:a4:90:ab:c9:df:6c:8c:13:a8:
         76:55:0c:a4:03:c0:f7:19:73:dd:20:fb:e1:3d:a9:cc:4f:ac:
         8a:15:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:38 2026 by rpki-client