Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/E4653316C87211E9ADADA185C4F9AE02.roa
File:                     E4653316C87211E9ADADA185C4F9AE02.roa (raw, json)
Hash identifier:          +xrfw+PMfK0lsfCpKdypZSJ7HrqpfwkVGn+eLq+hX/c=
Subject key identifier:   69:05:7B:F8:87:14:FA:02:78:A3:05:98:BE:4C:32:5D:A0:34:35:8A
Certificate issuer:       /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Certificate serial:       0E0A
Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/E4653316C87211E9ADADA185C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:21:46 +0000
ROA not before:           Wed 30 Apr 2025 17:57:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17733
IP address blocks:        202.161.32.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
                          rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3594 (0xe0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
        Validity
            Not Before: Apr 30 17:57:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4052a-b24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:d5:ed:15:06:da:a3:bf:09:54:dc:08:5c:
                    52:4a:b5:e7:de:26:82:c8:15:ff:8d:b2:b1:64:59:
                    11:a5:c7:ef:2c:3b:64:b5:1a:99:73:e0:1f:33:19:
                    37:70:31:c7:db:39:0c:bf:15:94:f2:c9:b6:72:34:
                    28:76:87:c1:22:52:bb:63:47:57:af:d1:18:b2:2f:
                    70:e9:c6:65:c3:56:6b:66:56:9a:57:23:72:5b:ec:
                    88:73:60:ff:34:47:85:67:56:e6:ab:05:05:51:a6:
                    33:07:b1:1d:56:29:76:15:81:92:04:3c:31:94:07:
                    9d:a8:3d:da:b3:e8:cb:87:f2:b1:39:34:fc:1b:98:
                    fd:33:6a:69:ff:2a:04:0d:06:d3:aa:88:00:27:67:
                    e6:63:11:c6:5f:9f:1b:4e:97:38:f0:fd:c6:b3:86:
                    f6:ee:15:71:e7:d0:6d:f9:15:b8:7b:36:70:0c:75:
                    7c:b3:19:30:4b:56:e5:ea:dc:2b:ef:d8:01:7e:6b:
                    76:bd:6c:21:8a:57:53:cd:9e:d2:da:87:c6:0c:6f:
                    0d:3f:6b:1b:33:4b:a4:07:dc:ed:1e:a3:88:b6:fa:
                    63:76:cd:a6:d9:d8:f8:bb:1f:d7:e9:02:23:8b:ad:
                    cb:ee:bf:20:0d:12:43:1d:70:81:3a:6d:5d:4c:ba:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:7B:F8:87:14:FA:02:78:A3:05:98:BE:4C:32:5D:A0:34:35:8A
            X509v3 Authority Key Identifier:
                keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/E4653316C87211E9ADADA185C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.161.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:c0:de:b9:8c:c0:0b:a0:34:c1:2e:91:44:42:08:a9:f0:
         b9:f4:dc:a5:ae:f7:7e:20:1c:a2:44:49:4e:bf:bb:e8:bb:6c:
         9a:d9:b2:25:b3:fb:e6:fa:83:9e:47:77:e2:37:01:db:2a:df:
         2a:48:df:94:28:86:d3:e6:c7:10:78:db:48:dd:fc:5f:19:01:
         6e:50:64:3d:ea:69:fe:c9:08:4f:6f:87:7c:be:2d:cd:00:8e:
         18:b2:1d:5d:11:e8:e5:7a:ac:67:d4:25:9b:47:f6:af:6c:ff:
         19:88:4e:c8:17:78:61:f9:3f:6e:d5:5d:6b:95:88:00:cc:4a:
         b8:74:5f:8b:95:e0:60:d6:7f:ea:49:f5:63:3b:38:97:24:46:
         23:86:2c:85:8b:0b:c0:eb:e1:e1:f3:d5:5e:15:47:e2:8d:6b:
         5c:46:68:73:1e:8f:ea:c7:76:7b:81:41:78:fa:20:d8:a3:3e:
         ce:a4:22:e0:bf:11:69:7c:ac:2a:0a:53:ab:6e:9e:b1:66:bb:
         29:82:d5:f8:53:58:72:4c:d7:2d:36:07:1e:9a:85:50:76:52:
         c8:84:3a:b3:fa:46:fb:9b:66:79:f9:88:20:ad:df:7d:56:8d:
         d7:77:17:ba:90:2c:3b:24:49:52:d5:85:f5:5f:2c:97:15:4a:
         cd:07:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:40 2026 by rpki-client