Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DAE15A7248F911EC9F04C439C4F9AE02.roa
File:                     DAE15A7248F911EC9F04C439C4F9AE02.roa (raw, json)
Hash identifier:          yll6EleWhluFREKT8NzETIGMZoAw4Is6iNKhftN9k0s=
Subject key identifier:   96:E8:C9:9C:2F:A4:9B:E6:13:1F:BB:4C:87:B4:06:A2:65:82:E9:DA
Certificate issuer:       /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial:       074D
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DAE15A7248F911EC9F04C439C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:04:32 +0000
ROA not before:           Thu 16 Oct 2025 23:33:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        204.48.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
        Validity
            Not Before: Oct 16 23:33:45 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4638f-23b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:67:52:75:77:70:6f:96:10:4a:31:8a:9c:
                    fb:dc:7e:68:05:a1:fa:c1:e9:4a:d2:7c:52:52:2d:
                    91:ae:9d:ec:48:4b:b3:7c:e1:fa:1f:08:34:3c:ee:
                    02:14:30:64:df:7e:45:a1:83:61:a1:9a:02:d6:c8:
                    d8:25:23:dc:a1:db:bd:32:d7:05:1b:74:38:7d:1f:
                    9b:54:6c:f5:c4:ef:34:65:8d:83:1c:85:28:78:6b:
                    50:5b:00:23:ed:9b:83:37:1e:8a:f9:d1:55:64:67:
                    00:45:53:93:58:49:37:06:82:31:78:84:81:79:82:
                    d7:fd:43:18:bc:29:35:15:19:10:49:7f:88:47:2d:
                    65:63:ef:15:7b:bf:b1:b9:2d:9b:38:0d:1a:62:c6:
                    50:40:5b:be:2b:ec:bb:3c:07:d1:f5:44:cc:18:b5:
                    73:ba:31:95:91:f6:ef:dd:28:8a:34:ba:9a:90:45:
                    aa:16:8d:0b:93:15:aa:af:6e:f8:83:ec:9f:7c:e6:
                    75:00:1d:7a:ee:ef:73:33:5e:70:0d:77:d1:45:c7:
                    d4:82:d0:77:74:3a:98:4d:ed:e8:56:af:af:a7:1a:
                    30:13:b6:45:11:78:6e:64:d1:b7:e9:f6:92:f8:0e:
                    31:fe:7d:08:c9:47:56:65:10:b0:60:18:91:36:13:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E8:C9:9C:2F:A4:9B:E6:13:1F:BB:4C:87:B4:06:A2:65:82:E9:DA
            X509v3 Authority Key Identifier:
                keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DAE15A7248F911EC9F04C439C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.48.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:12:eb:ae:ce:2b:81:ce:d2:53:da:1d:0a:3b:c0:07:c5:
         7f:f7:d9:82:ef:a7:89:d6:b4:f5:f3:3e:ae:17:3c:05:4b:11:
         b0:b9:a0:14:17:4c:04:58:29:32:45:13:51:40:50:a1:af:2e:
         c2:df:eb:82:34:04:23:5d:52:0a:0d:e2:9c:a8:81:74:e2:3b:
         76:e7:f2:b1:7b:07:09:c5:54:e6:87:e3:1a:be:05:f7:d9:6a:
         77:b8:66:c1:9c:d0:5d:7e:19:e9:8a:1e:d4:0e:73:74:1c:53:
         6e:47:c0:79:2f:1f:22:98:61:8f:91:4a:d0:01:2c:53:9a:38:
         69:96:03:90:8d:18:a8:18:b4:83:2b:40:88:7a:2d:4a:c3:ba:
         e2:1a:83:9a:5d:cb:14:43:0d:da:1f:d6:e8:d3:b3:90:7f:aa:
         9a:5b:2e:4d:24:7f:15:57:86:26:e3:db:de:85:5b:53:d9:28:
         b8:11:a9:10:31:b5:92:7c:6b:b2:9d:ce:09:2a:da:f9:39:cc:
         da:7e:94:0e:0e:7c:d4:32:c6:dd:10:d1:57:3b:77:e7:93:bf:
         90:af:dc:06:2d:b5:05:63:2d:f0:ec:ae:cb:3d:c5:da:ca:90:
         b3:93:e9:63:3f:eb:5c:b5:c0:b6:e1:96:87:e2:a3:18:90:96:
         1e:ad:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:22 2026 by rpki-client