Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
File:                     52040BECDCBF11F0B2EC67DA4A6F56BC.roa (raw, json)
Hash identifier:          vUIB033joD05W1vwYQIm56abiliryWD1H/1nkRq8eJQ=
Subject key identifier:   7A:17:EA:1B:B4:34:2F:C4:31:A6:20:18:18:AE:0C:27:13:F3:04:3E
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       0130
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
Signing time:             Wed 29 Apr 2026 09:59:31 +0000
ROA not before:           Wed 29 Apr 2026 09:59:31 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        202.181.171.0/24 maxlen: 24
                          202.181.180.0/24 maxlen: 24
                          202.181.181.0/24 maxlen: 24
                          202.181.183.0/24 maxlen: 24
                          202.181.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Apr 29 09:59:31 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69f1d683-b9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:05:b5:9a:95:84:7c:64:a2:e0:a8:38:c1:
                    5f:91:92:59:e1:da:17:30:c3:d0:f1:ea:80:b7:53:
                    b1:0f:67:47:c5:7c:e9:af:c9:67:75:64:e8:08:60:
                    34:6c:e5:2d:4e:10:bf:7c:eb:f5:21:ab:8e:14:37:
                    e5:9a:79:20:d7:44:0b:c5:e5:6d:be:0d:3d:95:db:
                    29:5d:52:97:30:d3:b9:33:a8:4d:2e:73:47:78:70:
                    de:18:78:c0:47:4c:74:6d:44:e4:5a:7a:68:a9:14:
                    b4:c0:2b:eb:3c:bb:48:d2:d4:1c:bf:7f:86:1c:2c:
                    0c:0b:46:ca:08:dd:b5:85:81:e3:82:07:25:85:69:
                    52:5f:4c:be:df:36:d7:84:4d:42:04:c7:4f:4f:19:
                    68:48:68:24:c4:b4:81:45:c7:75:07:ef:2b:e1:97:
                    32:95:0f:48:49:f1:17:3e:2d:6e:6d:c1:3a:d2:a7:
                    eb:d6:6b:79:a5:cb:a1:17:5a:d6:21:71:62:40:6a:
                    3a:c0:fc:1b:da:9f:49:86:25:e4:14:4d:06:c1:83:
                    1a:20:69:4f:73:f2:a2:32:99:d4:cd:62:92:f0:70:
                    99:30:15:68:0c:25:36:bd:f8:54:5b:ce:8f:40:80:
                    1a:d7:0b:2c:38:3d:30:28:2c:76:ce:26:bc:9c:b1:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:17:EA:1B:B4:34:2F:C4:31:A6:20:18:18:AE:0C:27:13:F3:04:3E
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.171.0/24
                  202.181.180.0/23
                  202.181.183.0/24
                  202.181.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:47:8d:7a:ce:f2:12:91:44:33:6e:95:5e:87:89:27:33:7c:
         e7:4c:6f:22:61:65:90:0d:7c:75:71:a2:ac:14:e9:ae:01:08:
         46:c8:3a:25:47:af:de:f7:56:e5:e7:7d:eb:d0:db:b8:ff:29:
         4d:6e:1d:5c:3c:0d:3b:cf:a0:c1:e8:2f:9b:ca:ba:2d:1c:19:
         9d:bc:cb:fc:b3:fc:3e:db:2b:c1:2c:a1:83:c0:db:20:e1:41:
         3f:d0:f1:72:af:98:4e:3c:b4:ee:82:77:2f:e4:9e:ed:db:ca:
         8f:63:37:da:65:df:6d:e8:f5:03:eb:00:e2:a1:87:63:9e:f7:
         91:a9:2b:4c:8a:5d:b6:29:1d:83:67:4c:ec:4d:98:15:05:5f:
         6b:b6:e5:86:4d:ce:f0:37:50:81:01:77:f8:bf:85:4b:28:05:
         42:ac:eb:b6:67:81:9c:01:89:7d:a2:15:d1:b1:04:63:d7:b0:
         ef:26:ad:c4:cb:d1:a3:57:0a:a0:8d:b0:29:e7:4d:10:39:62:
         b8:e4:3a:78:0e:a6:4a:f5:75:4a:7d:0b:3c:0b:16:8f:ac:af:
         3d:18:6c:91:b2:87:70:b3:08:c6:35:9a:4f:47:8e:28:00:49:
         ea:3f:36:b2:e9:6d:d2:4f:ce:d2:df:70:79:92:92:0f:9c:78:
         ab:3a:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:36 2026 by rpki-client