Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/682920E8427B11F19D68634EAA833773.roa
File:                     682920E8427B11F19D68634EAA833773.roa (raw, json)
Hash identifier:          x2eG4/ILxGmjj4wKNNNopQq28wtT+JRZR31JeLH+2m8=
Subject key identifier:   C0:E4:92:CC:25:C3:F4:97:82:E2:4A:72:FE:E0:83:D7:0B:1D:CF:A4
Certificate issuer:       /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial:       073C
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/682920E8427B11F19D68634EAA833773.roa
Signing time:             Mon 27 Apr 2026 20:55:22 +0000
ROA not before:           Mon 27 Apr 2026 20:55:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        203.5.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
                          rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
        Validity
            Not Before: Apr 27 20:55:22 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69efcd3a-6ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:3d:29:57:0d:c2:8c:cc:5c:89:47:73:ec:
                    0a:d6:4e:6d:be:f3:ff:b6:05:13:bc:85:56:de:3b:
                    a8:8d:44:e7:8f:d2:ae:ef:ee:46:4c:b6:f6:08:96:
                    f0:1d:d2:05:69:59:e8:bb:2c:37:d8:fa:28:be:e1:
                    4f:24:a9:45:48:a7:a2:60:17:b3:ed:c1:16:85:11:
                    ce:d2:c9:8e:f2:7f:4b:dc:33:b4:77:b9:08:b0:90:
                    49:9f:02:7c:a5:80:7b:13:9c:07:4b:b9:0b:45:57:
                    7f:27:70:58:4d:8a:2e:de:13:9b:c3:8a:fd:80:f7:
                    24:b5:dc:91:4d:9b:16:33:f5:5f:10:41:1c:7b:1b:
                    a1:48:e1:d1:3d:94:f5:13:60:01:b4:47:f1:27:a1:
                    d2:e6:7c:d2:de:8d:ab:2c:2d:ce:d5:ff:2f:59:0d:
                    13:8b:6d:2e:1a:b4:20:49:71:cb:66:12:a6:ac:63:
                    59:61:d6:f6:44:78:48:2a:40:1a:a5:da:30:d2:e1:
                    51:b9:e7:57:1d:d8:8c:d5:91:5f:2d:c0:1f:f9:9f:
                    2a:c2:1b:e8:4b:64:b6:a9:d1:a7:b8:94:6b:58:4a:
                    87:f0:2e:f8:b7:74:49:e9:78:22:10:25:2e:d1:70:
                    a4:f3:8d:6b:d5:c2:9c:c2:a0:a4:9e:5a:71:a5:81:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E4:92:CC:25:C3:F4:97:82:E2:4A:72:FE:E0:83:D7:0B:1D:CF:A4
            X509v3 Authority Key Identifier:
                keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/682920E8427B11F19D68634EAA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.5.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:a8:6b:45:00:57:aa:af:2f:4d:e2:9f:f3:db:a4:14:14:ce:
         47:8a:6c:31:18:12:54:78:4c:09:8f:ef:90:8f:75:fe:6a:54:
         df:e9:26:56:99:87:d5:42:47:39:37:7a:f3:d8:d5:51:50:ce:
         d5:52:33:9c:cc:f2:1c:a1:6c:8f:df:9c:ba:ec:45:50:5c:fb:
         68:dc:28:d9:50:92:77:26:1c:e2:7b:3f:85:c9:b7:dc:80:e1:
         50:ee:67:9c:3e:a4:02:2f:25:8d:30:d2:d9:3c:0c:d1:e5:73:
         1b:40:a9:01:23:0c:a0:e5:ed:03:2d:74:cb:b8:e1:46:0b:62:
         48:c4:70:50:3a:42:e0:84:97:8a:b4:11:1a:85:23:64:0d:d4:
         5b:49:18:50:a0:cb:9c:8b:26:f3:e5:91:99:9f:37:1a:dc:42:
         ab:07:80:47:ef:b9:d8:82:9e:48:55:ea:04:f1:06:10:89:32:
         13:0f:d5:10:62:cd:60:87:64:04:5e:28:88:d0:01:57:ac:86:
         ce:c1:7a:85:8a:1b:fd:cc:10:41:97:30:0f:30:67:f0:ef:bd:
         e5:96:92:44:13:12:e3:3e:72:46:e1:d2:5a:00:a4:89:58:2f:
         b5:9d:89:a7:8a:5b:50:8d:3e:89:5b:62:d5:2b:12:42:7b:a8:
         2d:c7:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:08 2026 by rpki-client