Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/CB54BF04390611EF93BAC362C4F9AE02.roa
File:                     CB54BF04390611EF93BAC362C4F9AE02.roa (raw, json)
Hash identifier:          kLjhocO4FL+k41rYkftxKSvqWVqba2SSvjF5+kCmRHo=
Subject key identifier:   2D:EF:8D:03:EF:B3:B7:B2:5E:1D:69:24:2E:F1:2F:B3:4E:67:AE:B0
Certificate issuer:       /CN=A91874B6/serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
Certificate serial:       0141
Authority key identifier: EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/CB54BF04390611EF93BAC362C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:12:13 +0000
ROA not before:           Sat 03 May 2025 05:42:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        203.18.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl
                          rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91874B6, serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
        Validity
            Not Before: May  3 05:42:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5a8cd-8073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:ff:a8:a1:22:6f:51:20:0c:11:c8:65:96:
                    90:2a:0e:45:8f:2e:10:eb:a8:c0:14:48:c8:52:fe:
                    63:14:5d:f9:63:df:bd:84:c3:2c:8d:e1:bf:1d:6e:
                    fc:89:a4:0e:03:ba:f6:97:15:eb:21:d9:b9:db:99:
                    d8:b5:15:f3:81:e6:1c:0f:93:0d:bc:5e:fb:26:72:
                    34:08:1a:a5:f2:c0:f8:f7:c6:92:64:0c:d9:d0:94:
                    99:8a:73:59:e8:9e:6c:c6:29:f6:40:d3:9c:75:56:
                    39:4c:39:fb:01:4b:10:d5:62:af:a5:23:75:19:fa:
                    bd:73:f0:0a:4c:c7:01:4f:b7:da:23:6f:88:ad:69:
                    44:28:0f:51:cf:aa:bb:f0:62:79:1f:78:57:1b:f1:
                    de:63:4e:d4:ab:8f:28:40:bd:a0:1b:07:7c:89:b8:
                    f0:7f:db:8d:31:4d:fb:13:34:77:2d:32:be:8b:d9:
                    56:f4:99:4e:6c:d5:7b:ff:5b:27:87:a1:07:86:6b:
                    f3:04:cc:eb:92:0d:50:5a:88:3a:88:90:29:dc:62:
                    75:5a:4f:59:a0:dc:9a:e9:3d:d5:56:fc:e4:36:a9:
                    94:48:33:ce:51:82:dd:4f:da:2f:91:d7:07:f8:64:
                    d7:c1:a2:1c:b6:46:ac:92:8a:51:c9:11:0d:c4:a1:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EF:8D:03:EF:B3:B7:B2:5E:1D:69:24:2E:F1:2F:B3:4E:67:AE:B0
            X509v3 Authority Key Identifier:
                keyid:EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/CB54BF04390611EF93BAC362C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.18.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:04:1f:43:7d:ce:a0:67:ea:ae:0c:fd:f8:00:2f:db:a5:c8:
         4d:e1:45:02:51:22:0d:9f:00:e1:09:39:65:f7:ce:b8:72:c2:
         f4:ff:d7:6c:45:7d:5b:a1:14:e7:e8:85:82:9b:a1:8e:dd:33:
         71:75:e3:c8:09:19:dd:98:e3:d7:40:4f:47:58:b6:4c:a2:0f:
         37:89:bc:6d:9c:4e:c6:5e:3b:43:e8:d2:6b:db:e7:d8:f1:a3:
         f0:a2:de:39:6a:67:3b:c5:79:80:69:d2:67:b1:e6:8d:6b:10:
         7e:51:e1:32:f9:d3:40:c4:5d:76:a7:b8:14:91:3f:5c:af:d7:
         1d:ba:87:cb:92:e8:19:2a:d2:37:78:60:7e:ad:f8:49:28:ed:
         4f:a1:8d:81:fa:58:cc:8a:e6:bc:f9:81:a9:bc:bd:14:f6:32:
         e4:87:e2:a9:9f:52:af:c5:fb:0a:4d:79:22:2e:0c:35:ab:c1:
         5d:fe:26:3d:c0:22:d2:8d:71:c8:c2:99:bc:e3:7f:22:d9:95:
         5d:23:c2:7e:2e:cd:5d:78:3f:92:09:ba:48:43:d1:c2:94:f1:
         2f:06:f3:09:80:f2:6d:4a:4c:48:cd:b6:01:ab:2b:57:82:48:
         c4:64:26:e6:d9:d5:5a:d2:67:c5:5c:12:19:45:33:2e:af:ea:
         95:1c:56:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:32 2026 by rpki-client