Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/D2A3A988902511F0B63B0A6EC4F9AE02.roa
File:                     D2A3A988902511F0B63B0A6EC4F9AE02.roa (raw, json)
Hash identifier:          dmuwaSGWHJEp3qUCeEei6uqK+13TFdbeP+m8d7qkuQ4=
Subject key identifier:   61:BD:22:6B:FB:73:82:E2:3B:18:1A:6C:FD:95:BE:30:DD:2C:73:42
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3828
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/D2A3A988902511F0B63B0A6EC4F9AE02.roa
Signing time:             Thu 08 Oct 2026 15:15:13 +0000
ROA not before:           Thu 08 Oct 2026 15:15:13 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     22773
IP address blocks:        175.29.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14376 (0x3828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 15:15:13 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac7b381-d34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:54:2e:0a:d7:25:0c:c0:12:97:0b:c4:4b:
                    60:6f:fe:3d:4c:6c:e5:e0:29:7b:d9:d2:b7:d7:23:
                    6b:e9:85:e3:d2:4a:f7:37:eb:51:59:b2:0c:a6:d2:
                    f6:2f:d3:83:73:a9:d2:da:11:02:db:3e:24:55:98:
                    9f:20:32:7a:01:63:38:18:9b:ea:bb:ce:a3:b1:5b:
                    fb:d6:3f:4d:80:23:2c:32:4c:94:90:f2:ff:4c:be:
                    b6:a8:73:50:64:2a:93:e2:62:49:c0:32:61:eb:4d:
                    e6:b4:7b:d8:92:e1:84:57:41:b9:e6:ad:01:18:b3:
                    08:10:37:38:4f:3b:f3:49:85:2a:fd:a2:06:fe:5c:
                    d3:c3:df:56:a2:01:33:c2:51:c5:54:ee:67:7e:0a:
                    1e:de:53:7d:38:e6:af:0d:37:0a:6a:28:db:2c:8c:
                    78:e7:4b:80:f8:bb:6f:83:55:ab:69:09:5c:d6:5d:
                    42:9c:be:bb:e5:80:98:8d:55:79:29:5b:ea:19:b1:
                    ee:7e:45:25:b0:52:bc:83:9a:8b:9d:05:05:98:2f:
                    c0:1c:36:4f:10:ce:d0:e9:1a:aa:d3:b0:03:aa:b5:
                    06:1c:88:f5:e7:81:13:89:fb:65:f4:32:73:67:04:
                    9e:29:c5:50:f7:fe:7a:7e:75:2e:94:fd:70:d7:f2:
                    9d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BD:22:6B:FB:73:82:E2:3B:18:1A:6C:FD:95:BE:30:DD:2C:73:42
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/D2A3A988902511F0B63B0A6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:ac:23:c3:9d:ca:ba:35:6f:9f:1c:af:34:ee:c3:b6:db:5c:
         fe:54:92:58:ab:4e:7d:33:94:0b:1f:8c:7f:8a:bb:e2:cd:bc:
         13:b6:eb:d0:6f:92:ac:ab:de:2b:6a:db:f1:ef:ca:39:af:e8:
         5f:b0:4e:f5:bd:6b:6a:e2:b1:7c:ab:e2:60:21:a2:69:ff:8b:
         fa:91:f9:44:62:28:70:01:8c:3a:de:a3:46:f3:7c:94:a7:60:
         83:b7:86:c5:94:32:c4:03:17:06:ca:73:fb:21:14:96:dd:08:
         a7:aa:c5:75:bf:9e:c6:6e:cf:a4:ac:8f:40:d6:82:42:c0:71:
         be:0f:f5:da:7d:35:e9:27:45:bd:b9:bb:f4:90:92:af:d6:63:
         15:70:cc:57:a4:27:18:23:eb:d9:cf:26:49:92:9c:f8:6d:33:
         3f:63:cb:c7:68:9d:2f:4a:1d:e7:7f:a6:4a:12:f7:7c:1e:ac:
         99:28:84:d4:42:cc:fc:04:7f:01:39:a4:b6:5a:2c:b6:df:4e:
         64:94:29:38:72:8e:f3:ff:dd:a2:62:78:df:c9:b8:26:60:33:
         12:ac:8b:1c:a8:5b:52:97:d6:bf:1b:c5:c7:ee:d8:2a:70:0a:
         2a:8a:32:eb:b5:65:42:d1:83:58:34:fe:e0:bf:dd:ea:92:cb:
         04:67:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:42 2026 by rpki-client