Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/54F4ED62A4D511EA863BC00AC4F9AE02.roa
File:                     54F4ED62A4D511EA863BC00AC4F9AE02.roa (raw, json)
Hash identifier:          zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=
Subject key identifier:   5A:D5:09:B3:8D:A3:7A:3D:2D:0B:33:FE:10:D8:FB:D6:DB:2A:29:20
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       280B
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/54F4ED62A4D511EA863BC00AC4F9AE02.roa
Signing time:             Tue 28 Apr 2026 16:19:44 +0000
ROA not before:           Tue 28 Apr 2026 16:19:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38264
IP address blocks:        115.186.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10251 (0x280b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Apr 28 16:19:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f0de20-4c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:f7:b9:f0:80:b7:a7:85:2b:23:75:18:e4:
                    fb:8b:da:af:56:0d:bc:d9:a1:3f:b9:51:6e:80:69:
                    6b:ca:05:ef:4f:03:ce:85:30:21:2e:7e:c2:b3:f1:
                    d7:1e:d1:b5:a0:34:3e:af:99:05:58:8d:e2:42:47:
                    17:13:6a:81:5c:56:26:c3:e9:3b:bf:a6:69:c4:2d:
                    8a:be:c1:13:19:35:0c:7a:d8:cf:c2:d4:64:a5:70:
                    4e:3b:0a:ad:fd:a0:77:ab:fe:0e:97:bf:73:d3:29:
                    18:4b:95:4e:5b:44:97:69:b7:13:e9:06:75:04:20:
                    2a:f7:40:93:d5:2c:20:ce:87:e6:15:48:f6:b2:d5:
                    8a:9d:dd:9c:d1:d5:e9:1e:7d:99:29:ab:03:df:c8:
                    71:03:8c:61:59:48:a3:53:76:1b:31:6c:1d:41:34:
                    7d:ce:1e:04:59:63:77:3f:e8:50:af:50:b4:bb:55:
                    20:fb:f8:4b:e8:d7:0f:6d:38:f8:6a:1e:8f:08:c5:
                    3c:08:b3:da:b5:d4:cd:6f:c6:bb:54:ef:d8:0b:43:
                    de:0d:89:a0:fb:af:14:4b:c6:06:d6:23:0d:80:27:
                    71:37:c1:8e:1d:cc:b1:8e:5c:10:86:3d:c5:8b:fc:
                    e8:b5:d1:c8:4f:57:81:52:d5:00:33:a6:77:5e:98:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D5:09:B3:8D:A3:7A:3D:2D:0B:33:FE:10:D8:FB:D6:DB:2A:29:20
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/54F4ED62A4D511EA863BC00AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:bf:82:27:48:17:36:b9:2a:37:09:49:65:5d:92:80:6b:
         9e:b7:f0:f3:89:06:23:e4:7c:3a:8f:1f:e8:b3:d3:88:00:22:
         2e:07:8f:2f:fd:51:a5:3b:9f:3b:25:38:c9:83:b2:f5:90:42:
         b7:17:1c:58:38:09:b3:d7:a5:39:ab:e4:65:05:56:b1:49:24:
         e3:66:b1:a8:f7:29:09:7e:30:57:94:23:ec:e8:32:c8:c1:d9:
         7b:48:16:a8:ba:23:bb:2c:fd:9e:90:04:c3:fa:a6:81:10:87:
         c6:bd:6c:29:cf:87:b2:cf:d5:24:4d:e9:53:05:5c:49:af:18:
         7d:88:e6:17:4d:02:93:47:c4:f7:0b:ef:31:48:1e:ed:5a:a6:
         37:74:c2:9d:a6:c3:7e:b8:b2:cc:8e:c0:11:51:30:5c:05:5d:
         45:61:15:00:b7:7a:55:2e:26:d6:bb:f6:e2:df:b6:85:13:a0:
         57:56:c7:56:65:94:59:1e:07:9d:fd:2f:d2:e7:26:fe:ee:79:
         81:0c:3e:01:8c:8c:83:db:97:99:6c:31:9a:24:d1:ca:88:19:
         e0:0e:f9:14:76:8f:59:2a:f6:dc:0b:70:1e:69:9b:9a:c3:23:
         e9:26:e6:e6:41:57:c9:db:3d:48:ff:43:b0:5e:f3:92:b2:d8:
         0a:f4:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:49 2026 by rpki-client