Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/CAB4E520455111F1948CBD49A9833773.roa
File:                     CAB4E520455111F1948CBD49A9833773.roa (raw, json)
Hash identifier:          QPCmy8z5Tsl2gxw51p+EgKnHOdeHl/XaVRVpoOC+to0=
Subject key identifier:   CB:F1:B3:35:54:D0:71:3C:43:DC:7F:45:06:E1:5E:23:6E:67:76:31
Certificate issuer:       /CN=A91644E2/serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Certificate serial:       03
Authority key identifier: 76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/CAB4E520455111F1948CBD49A9833773.roa
Signing time:             Fri 01 May 2026 11:35:02 +0000
ROA not before:           Fri 01 May 2026 11:35:02 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132279
IP address blocks:        203.2.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
                          rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91644E2, serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
        Validity
            Not Before: May  1 11:35:02 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69f48fe6-fca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:43:b2:18:e1:e9:7a:e0:37:53:b8:a5:ba:
                    e3:6b:f3:d4:7d:7f:83:c4:29:fa:52:37:92:20:25:
                    b6:68:8e:a3:cd:b9:76:76:17:19:a0:3e:bc:c7:57:
                    ed:d2:d6:2c:c4:76:9a:7a:50:53:86:39:77:93:60:
                    3d:e2:1c:56:12:32:60:f7:8f:fd:cd:83:4d:41:3b:
                    0b:a5:14:7c:13:22:82:e0:4e:6c:13:d6:9f:85:a2:
                    9a:2c:19:ea:31:25:b7:49:4a:ee:7d:42:6d:50:d1:
                    b9:a7:99:1a:74:0c:a8:c2:48:41:e9:b5:89:7f:81:
                    34:99:67:2b:ab:95:d6:c7:70:2d:2b:4a:34:26:69:
                    70:2a:5e:52:b6:a7:d4:01:f1:38:83:c8:01:ae:a9:
                    ee:70:33:11:5d:82:78:82:c4:b9:4c:3a:13:c8:85:
                    98:f2:a9:18:f2:e8:50:46:3c:0f:0b:d6:1c:05:8a:
                    35:d7:29:70:a8:95:8f:65:40:29:a4:15:2f:76:6c:
                    0d:ef:cf:b3:5e:2d:9a:cd:82:15:1f:68:b8:93:3b:
                    9c:0e:b5:ba:0a:60:5e:12:84:d5:58:30:fd:a1:16:
                    1b:23:c4:2d:96:81:76:17:63:b3:25:dc:d5:1a:9a:
                    8c:64:75:37:a3:65:f3:d5:f8:95:1f:be:bf:f5:8e:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:B3:35:54:D0:71:3C:43:DC:7F:45:06:E1:5E:23:6E:67:76:31
            X509v3 Authority Key Identifier:
                keyid:76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/CAB4E520455111F1948CBD49A9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.2.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:11:7e:1a:44:02:fc:76:0a:8b:df:22:1a:90:53:fc:d1:e8:
         9e:7c:49:c7:c5:7a:88:52:7d:d4:b5:fe:d6:68:03:cd:39:9a:
         4e:79:24:d8:1c:ee:2d:18:dd:32:cd:ed:cf:cc:51:b5:36:0d:
         b1:62:8a:97:37:cf:26:d8:3d:06:87:3d:00:24:2f:74:ee:cd:
         cb:ba:5c:ea:66:23:89:ad:c5:7c:77:6f:af:7f:8b:11:5d:17:
         ed:1f:19:27:e8:17:ee:29:53:a1:30:2f:6f:ec:aa:09:e1:68:
         b8:6b:84:fb:77:30:73:14:04:14:a1:30:ec:54:c3:3d:9d:0a:
         b3:0f:43:53:bb:96:82:dc:32:a2:b4:e9:7c:b1:eb:52:35:0d:
         54:bc:25:67:38:41:ad:69:55:4c:ee:49:1e:41:18:b6:51:ab:
         4e:b2:e8:d1:2d:2e:ad:90:ee:48:bc:77:4d:4a:44:a1:82:35:
         58:32:44:d6:f8:f8:84:44:82:72:3f:b0:ba:0b:d7:e1:2c:d3:
         ab:4b:5b:53:a6:2b:86:dd:89:68:82:92:29:32:ac:30:51:3e:
         f5:4a:1e:d7:bb:df:2d:8e:86:71:f7:ec:59:5d:44:7c:c9:cd:
         04:e5:0f:30:44:bf:f4:23:44:23:fd:f0:a7:1a:04:2d:fb:cc:
         67:c2:a6:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:18:06 2026 by rpki-client