Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/E5DB5238DFBD11EC8E203126C4F9AE02.roa
File:                     E5DB5238DFBD11EC8E203126C4F9AE02.roa (raw, json)
Hash identifier:          ukvq4q+WUo9M3bWh6pJLSaPBet3ApLWl9pgkS4gI7ag=
Subject key identifier:   F8:73:D5:2F:B6:AC:3B:C5:D4:90:81:C9:36:44:32:44:2F:C1:E1:61
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       3116
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/E5DB5238DFBD11EC8E203126C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:22:58 +0000
ROA not before:           Sat 02 Aug 2025 15:52:08 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45962
IP address blocks:        203.56.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12566 (0x3116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
        Validity
            Not Before: Aug  2 15:52:08 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a467e1-7881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:e0:b7:f2:90:ae:13:98:dc:a3:ca:66:92:
                    76:22:d1:a1:f7:c1:dc:a3:b5:98:06:30:9c:79:fe:
                    42:2f:44:ea:85:3e:38:2f:83:f9:e8:d3:da:4d:77:
                    08:fb:55:b5:99:98:d6:22:cf:25:11:96:d0:41:06:
                    79:d2:05:3e:36:c7:7a:96:89:c3:f5:b1:f1:b6:47:
                    ff:72:e8:d3:6f:61:1d:5a:ef:2d:34:cf:18:cc:2b:
                    a3:a5:e6:39:d4:98:57:59:6f:00:20:41:df:f5:a3:
                    16:37:42:cd:e9:5f:ba:00:59:df:5d:db:aa:dc:7b:
                    ad:d4:7a:0d:f4:4f:21:88:98:4a:d8:fa:83:38:9f:
                    53:bd:f6:03:61:da:84:ee:05:40:9d:af:bf:8c:8b:
                    70:bf:fe:57:f1:6c:48:f7:a7:fc:38:20:86:a0:28:
                    1a:83:39:59:40:bb:9d:87:47:51:64:a8:0f:ba:69:
                    5b:f8:79:25:d1:fd:66:19:d9:c9:62:f8:69:0c:60:
                    02:18:d2:ce:64:1d:9f:3a:a5:1d:78:56:fc:b8:4f:
                    51:c8:4f:4d:df:5e:45:96:bb:74:0c:c9:bd:37:6c:
                    f3:1c:e4:4a:9d:92:06:1e:92:69:9c:11:06:0c:24:
                    5e:ce:47:d3:b4:23:db:4f:46:49:46:b4:71:aa:d2:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:73:D5:2F:B6:AC:3B:C5:D4:90:81:C9:36:44:32:44:2F:C1:E1:61
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/E5DB5238DFBD11EC8E203126C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:8a:a5:37:b3:06:c4:c9:41:14:d0:50:fd:f6:bf:f8:a2:95:
         3a:74:7a:98:81:58:ba:1c:43:d4:02:af:5e:ae:64:4d:50:48:
         ee:35:8d:57:da:81:d3:41:7d:49:ed:18:15:f8:ef:a7:bd:20:
         e9:8e:9f:6e:a2:b1:88:d0:18:1c:fe:9c:11:65:ad:13:57:ec:
         e3:a1:78:c4:48:c5:0f:d9:5f:52:f1:72:35:f8:68:10:2c:1d:
         3e:94:a6:13:d9:0e:9d:0f:78:44:f2:5a:01:db:e5:b1:2b:ba:
         af:d2:56:35:c5:5d:60:57:39:ce:c8:ed:9d:8a:7a:f1:d0:b1:
         74:67:e7:f8:3f:88:8d:68:a9:68:fd:52:bb:46:76:66:8f:8b:
         1d:4d:67:75:b3:63:fb:a1:47:df:ed:27:d0:64:31:36:ed:78:
         dd:46:5e:d2:56:8a:d7:e5:1e:37:79:63:60:aa:22:4c:2d:74:
         53:cd:85:93:13:a1:ac:3c:69:1c:08:4f:16:e6:b0:1b:32:d7:
         6f:ed:f8:08:5f:72:e4:9f:a7:d8:af:63:b1:6b:90:c3:91:0d:
         ab:33:01:ad:b6:07:0c:e2:70:67:3a:44:65:1c:ac:50:54:0d:
         86:4a:dd:18:79:03:07:d5:fa:e1:9f:7d:6f:10:c2:82:f4:53:
         47:cb:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:11 2026 by rpki-client