Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A194680629DA11F1A7234B1B9B833773.roa
File:                     A194680629DA11F1A7234B1B9B833773.roa (raw, json)
Hash identifier:          m+d8rKrNikI8my7pp1HxKiLAoYdPJmoBfyQi7R0kHN4=
Subject key identifier:   54:E9:D0:DA:39:6A:38:D5:A3:25:D3:A1:15:61:B8:45:91:1C:6B:B0
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       25
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A194680629DA11F1A7234B1B9B833773.roa
Signing time:             Fri 27 Mar 2026 12:44:02 +0000
ROA not before:           Fri 27 Mar 2026 12:44:02 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     4515
IP address blocks:        206.161.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 17:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Mar 27 12:44:02 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69c67b91-eaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:47:5e:b5:19:7b:34:19:f6:a1:cb:0a:79:
                    5e:fa:1a:84:0d:5e:36:60:99:80:1a:30:33:0e:85:
                    a5:84:cb:b8:14:1f:eb:43:ec:10:8c:41:26:da:49:
                    c3:c7:99:3d:05:ac:80:26:6c:34:e6:aa:8e:0f:0d:
                    df:a5:0d:e1:81:4c:5a:1d:2d:8c:20:1f:12:7e:9f:
                    b7:b9:d9:a3:dd:a4:78:cd:24:59:4b:b4:56:49:77:
                    2a:04:91:75:57:f9:62:43:e9:4c:a7:79:0b:f0:b5:
                    bf:e6:03:d7:fb:d9:9b:20:e1:5c:a8:e7:40:cc:58:
                    e0:4d:8f:0b:e7:1e:80:f2:e7:85:c7:0e:76:6c:a8:
                    f8:7e:ed:e5:fc:23:ff:63:f1:f6:52:39:00:8b:46:
                    05:10:53:31:09:23:e7:d7:d6:db:4b:2a:bf:29:ef:
                    7d:80:cc:13:d6:f4:6e:eb:03:56:b9:e8:86:15:b7:
                    77:64:ec:5c:8f:42:9a:7e:24:fb:9a:f9:92:63:6b:
                    20:98:77:49:0e:f1:00:97:41:9a:14:63:c0:71:92:
                    b9:72:b6:1f:69:3e:21:85:13:36:1e:e4:63:0e:60:
                    98:88:a6:e0:b5:49:d3:40:c3:dd:de:61:f7:57:20:
                    95:95:26:64:ae:59:bf:b5:02:07:e8:dd:fa:34:2f:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E9:D0:DA:39:6A:38:D5:A3:25:D3:A1:15:61:B8:45:91:1C:6B:B0
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A194680629DA11F1A7234B1B9B833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:44:1f:bf:d6:e3:7d:e2:7e:d5:41:fc:34:b1:17:d2:b9:3e:
         4a:63:fd:cf:26:9a:12:a2:eb:92:87:63:03:0f:6f:ca:08:f3:
         3f:41:e4:56:45:9c:93:4c:24:77:c3:e6:a3:16:cb:66:13:53:
         ee:73:65:e8:2f:c2:6b:9c:ed:bc:94:39:d2:3e:32:bd:5f:23:
         88:69:0c:fa:8c:a8:4e:73:02:d8:43:8f:e5:10:fe:d8:cf:81:
         06:9f:8d:c8:5c:de:bc:2a:57:30:91:ec:bd:cf:30:6b:54:be:
         42:dc:dc:4a:36:51:fc:6b:11:e8:c4:55:be:06:e0:7d:85:aa:
         7a:2e:84:6f:c4:da:e1:f2:51:98:4d:c0:6c:0e:ca:69:fc:3c:
         4a:91:09:12:58:88:8f:0b:b8:5b:e3:50:cf:91:e1:25:aa:a8:
         f0:94:d9:ed:f0:36:d1:a1:42:93:7c:b8:3f:5a:73:a3:1f:45:
         61:7f:b1:8c:5f:18:e2:13:e4:a7:f7:1b:11:8c:64:54:0c:c9:
         74:4e:7b:7c:4e:a9:fe:aa:27:b8:92:84:ac:bd:3b:5d:56:57:
         ff:38:d1:47:cc:f1:34:6e:2e:fc:88:5f:b0:a7:be:af:f5:37:
         ee:91:a0:7f:44:ad:f9:da:42:f8:f0:86:3b:89:69:88:39:92:
         99:df:4d:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 19:00:22 2026 by rpki-client