Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa
File:                     4034878C531411F0B5969F4DC4F9AE02.roa (raw, json)
Hash identifier:          Z6ny3a79tk4mktg3oocnwafxfa8++GDa/6xXAsjURUM=
Subject key identifier:   9B:2D:5A:9C:80:65:84:E4:8D:2B:E3:42:9A:00:F4:3B:6D:21:57:FA
Certificate issuer:       /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Certificate serial:       01AB
Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa
Signing time:             Tue 05 May 2026 04:37:27 +0000
ROA not before:           Tue 05 May 2026 04:37:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9734
IP address blocks:        203.20.114.0/24 maxlen: 24
                          2001:df3:b540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
                          rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
        Validity
            Not Before: May  5 04:37:27 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69f97406-f910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:3c:53:17:44:11:bd:3f:e9:cb:79:f9:2d:
                    2d:98:f2:5e:fc:82:3d:8d:ed:a3:dc:4d:aa:90:58:
                    2b:78:8e:e0:09:fa:39:28:39:41:ca:44:cf:38:6a:
                    cb:60:c2:ef:cf:8d:bd:f2:ac:c3:12:b4:14:b1:3a:
                    34:5b:ad:97:3a:69:c3:24:57:d9:b7:9e:09:21:81:
                    8f:a5:49:1d:b8:57:0a:18:2e:a8:18:bf:16:82:d3:
                    a8:c2:cb:c1:df:22:2b:91:4e:d7:46:db:e5:44:f1:
                    9f:39:90:9f:f7:de:4c:ba:2d:11:3b:a8:1f:df:aa:
                    44:1c:2f:19:d3:77:99:0f:1e:b7:b0:9f:29:b6:04:
                    cf:93:c0:06:24:bd:62:95:b1:a3:70:35:0f:20:fc:
                    3a:02:22:04:bd:f1:71:a6:b9:73:05:de:21:9e:9b:
                    80:d0:93:54:a6:c3:ed:2e:de:a4:c9:dc:a8:ab:38:
                    3d:4d:25:6e:56:d3:f7:54:69:db:ca:5c:cd:84:14:
                    c6:d9:6a:07:5c:ad:4c:08:cb:f6:f3:f7:5d:83:0c:
                    cb:67:b1:92:a5:33:05:a2:5a:94:96:4f:42:8b:a1:
                    64:d9:2d:7e:82:2c:a8:1b:e3:55:24:5c:93:57:31:
                    b3:1a:7b:14:74:3a:c1:66:ca:3a:d8:2a:70:d3:31:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2D:5A:9C:80:65:84:E4:8D:2B:E3:42:9A:00:F4:3B:6D:21:57:FA
            X509v3 Authority Key Identifier:
                keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.114.0/24
                IPv6:
                  2001:df3:b540::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:2e:2c:f0:5b:77:c6:97:af:b5:1d:97:95:b6:d6:37:b4:a4:
         73:30:82:02:b7:59:3d:99:84:00:03:e0:6b:b9:b4:20:e0:e3:
         90:94:07:1f:a9:4b:84:48:0f:f3:b3:64:a9:86:4c:b8:59:af:
         1f:57:d1:20:e9:ed:ac:b5:66:09:46:78:2a:8b:2d:8f:9c:7e:
         b1:f7:f0:fe:e7:ca:3b:87:25:89:bf:fb:70:12:0b:99:8b:15:
         d8:82:c9:5f:de:a0:58:0e:ef:c8:d4:28:b8:80:cb:cc:4e:68:
         03:6f:6b:52:fa:54:a4:fd:26:b8:dc:8e:42:42:60:87:db:a1:
         dd:d3:29:03:30:2a:12:dc:fa:b3:35:08:5a:f1:aa:75:5c:a1:
         1e:c6:8d:ae:39:9e:81:14:f7:74:40:c5:b9:8b:e4:d7:37:ad:
         c5:8b:2d:89:ba:0a:e6:9b:8c:11:b1:84:f0:dd:9a:05:2f:f0:
         27:47:23:6a:76:b4:4c:8c:5a:38:82:92:5c:a9:d3:82:a2:c9:
         f7:c1:42:58:87:3e:5c:db:9b:03:dc:ae:70:1e:88:2a:03:e1:
         c4:60:6d:6e:0a:7a:0a:89:b4:2c:44:51:71:03:9d:fe:e6:d4:
         69:ce:56:3b:ca:f6:2f:18:58:12:ad:3f:96:8d:db:ac:31:42:
         85:57:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:41:21 2026 by rpki-client