Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/D1E78BC0A15D11EFBAE3332CC4F9AE02.roa
File:                     D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (raw, json)
Hash identifier:          J9p77l9cTrTV2+cKIR/IP5JcPOecPcSAMEsYAdt8Ff0=
Subject key identifier:   AE:F9:EC:EA:7B:39:98:B7:1B:4B:F8:C8:C3:01:70:C3:6E:C5:9B:25
Certificate issuer:       /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial:       0158
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/D1E78BC0A15D11EFBAE3332CC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 05:55:52 +0000
ROA not before:           Thu 03 Sep 2026 05:55:52 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     141451
IP address blocks:        203.33.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
        Validity
            Not Before: Sep  3 05:55:52 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a990be8-5d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:48:b8:5b:ac:55:1c:02:83:ec:59:b4:3a:
                    24:05:5e:b7:23:52:80:e2:d3:72:5a:05:f8:ec:6b:
                    37:22:73:90:df:0b:7e:b8:0d:ae:ab:a6:50:a7:3b:
                    35:58:9c:2c:2a:04:8e:b1:a5:47:0a:c8:cc:98:cc:
                    00:03:84:a1:7d:7b:f1:9d:36:dc:1d:65:b2:eb:ee:
                    88:09:61:a5:77:6b:3f:58:85:5a:3f:e9:e5:17:3c:
                    e5:c3:49:76:cf:b2:be:18:0f:7e:3a:06:ea:18:b6:
                    36:42:1e:16:87:66:bd:6d:3d:48:d0:94:54:21:a5:
                    8c:08:9b:12:a4:ed:d2:1e:3b:c6:f3:7e:e8:e3:5c:
                    28:00:cf:07:f8:0f:42:99:3c:1d:76:21:6d:cd:bb:
                    a0:24:19:12:7e:e2:ab:6e:79:a3:d2:43:b0:14:ba:
                    0a:12:d9:75:ea:db:40:bb:74:25:ae:e9:81:59:c0:
                    7b:3a:3c:8f:84:de:ea:a8:75:7a:bc:b8:7a:67:c6:
                    fc:c4:97:99:16:62:35:1a:36:7a:6f:4b:12:87:a6:
                    4c:87:49:e2:20:9b:8a:18:47:8a:df:bf:91:6b:94:
                    67:53:01:51:2d:cb:a8:d5:e2:66:61:b5:79:94:f5:
                    86:46:ff:ff:78:7f:f2:32:73:b0:67:13:30:1e:75:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:EC:EA:7B:39:98:B7:1B:4B:F8:C8:C3:01:70:C3:6E:C5:9B:25
            X509v3 Authority Key Identifier:
                keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/D1E78BC0A15D11EFBAE3332CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:90:ea:0f:86:71:e9:6c:19:a5:8f:94:67:49:64:ce:a9:a0:
         23:7c:0e:cd:fd:0f:5a:9b:50:ab:47:9a:cb:4f:fb:60:1b:c3:
         36:2b:5f:61:bf:55:a3:df:89:d1:3a:42:dc:a0:06:ea:63:8d:
         5f:90:43:92:ae:5c:3f:6f:04:36:7b:51:56:07:b9:2d:eb:3d:
         8d:4f:ef:42:3c:06:f9:fc:b2:c7:68:22:45:27:6b:ec:1c:e4:
         34:e7:3a:85:6b:20:5a:df:02:be:f1:7f:4e:c1:99:24:fa:16:
         c4:41:09:cf:83:e3:a9:ec:8a:31:67:59:60:60:ef:9b:84:5d:
         49:7f:98:de:54:72:dc:aa:8a:88:56:71:26:5f:08:36:43:8d:
         67:a7:b0:da:44:74:50:4a:17:e2:34:88:e5:b2:8f:2b:5b:a7:
         86:ee:ab:f0:19:34:15:4a:6c:9c:3e:98:1f:18:f9:ac:35:80:
         41:93:cc:b8:87:0e:d7:45:e0:ae:02:48:bf:12:48:e6:6c:43:
         81:43:bf:42:db:3f:bd:db:89:94:62:7e:db:2f:5d:c3:91:d8:
         53:99:ca:e1:ff:5f:06:54:38:de:36:4f:97:05:ed:e4:74:04:
         09:ca:f2:0d:24:71:09:a6:09:89:40:21:66:51:e5:bb:56:33:
         1b:05:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:27:29 2026 by rpki-client