Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/B3849A9A359311F09B54926FC4F9AE02.roa
File:                     B3849A9A359311F09B54926FC4F9AE02.roa (raw, json)
Hash identifier:          5TjucLw3rqG1PVaTMa1TZO4hKoccTXSUW0WPJZfPVSg=
Subject key identifier:   4B:02:2B:C2:D4:61:EE:93:92:09:52:27:20:E4:7A:61:B1:42:F6:A4
Certificate issuer:       /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
Certificate serial:       EB
Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/B3849A9A359311F09B54926FC4F9AE02.roa
Signing time:             Thu 07 May 2026 06:40:12 +0000
ROA not before:           Thu 07 May 2026 06:40:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137453
IP address blocks:        163.223.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 06:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
        Validity
            Not Before: May  7 06:40:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fc33cc-58fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:10:fb:9c:ec:06:a3:9a:97:37:ac:9d:96:
                    53:3e:65:60:d4:df:90:81:12:4f:a3:7e:c8:32:97:
                    e6:52:00:02:92:c0:74:90:7f:27:2b:82:d1:c9:88:
                    34:49:28:f7:43:26:84:3b:30:f2:44:88:ea:45:bd:
                    e1:27:ea:ac:11:94:d3:2b:c6:5a:3e:5d:b7:fe:3e:
                    0b:67:2b:fc:8c:b3:9b:47:dc:83:c5:e5:e6:ec:08:
                    ab:da:59:6c:7c:b9:1f:6a:b4:82:ae:b7:ab:60:90:
                    59:09:a7:5d:35:af:d8:32:f8:da:e9:37:55:86:e5:
                    7f:76:93:4b:24:58:4b:99:3e:73:01:cf:d9:3e:f8:
                    bc:b9:c5:24:c7:b4:00:f4:20:bd:18:43:86:c7:61:
                    57:1f:b6:94:29:7e:49:13:63:e8:a3:37:83:5a:89:
                    e3:a5:1d:3b:9e:33:e0:d8:97:d9:3f:04:ab:7a:21:
                    4b:d3:83:f0:20:91:63:f4:7c:2b:19:61:ec:8c:db:
                    da:ea:e7:60:5c:3e:c6:2d:21:59:65:77:d0:30:e6:
                    92:ba:14:f9:b3:76:35:8a:2d:6f:9c:b2:67:54:e4:
                    05:a9:43:fa:71:39:77:ef:f3:fb:e9:24:4b:46:15:
                    4d:09:ae:60:dd:cd:88:57:74:20:e0:e8:47:04:ad:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:02:2B:C2:D4:61:EE:93:92:09:52:27:20:E4:7A:61:B1:42:F6:A4
            X509v3 Authority Key Identifier:
                keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/B3849A9A359311F09B54926FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:08:da:c2:94:60:89:a9:14:a6:2d:bd:7f:61:ed:a8:91:
         10:fd:09:66:96:91:c0:26:04:42:e7:03:b2:d7:5a:92:31:19:
         f8:d6:d0:09:06:f1:37:a8:4a:98:ae:99:3e:98:be:c5:ad:09:
         14:ad:40:8e:ab:20:38:cf:03:99:6a:06:79:0c:a9:01:94:af:
         91:67:a1:f6:06:fe:3a:61:44:11:8d:ef:3f:f5:87:33:84:e9:
         58:5e:0a:68:97:df:cf:23:08:8e:cd:74:16:8f:9b:15:44:8b:
         e3:b3:36:98:55:37:08:93:f6:a4:2f:60:d3:94:35:70:a8:80:
         4c:70:d8:a1:c9:d5:40:e1:c1:ab:68:26:3c:95:28:3c:0c:34:
         2f:62:40:51:6e:3e:c4:99:d9:ff:2d:18:10:22:96:69:ea:30:
         e5:c0:f9:ca:a1:5b:49:5b:d1:5f:77:3b:ff:0a:b3:13:c9:15:
         81:c7:ef:cb:1c:39:66:ba:eb:6b:d5:6b:e1:57:84:3e:76:3b:
         07:0f:38:be:6c:90:0e:39:9a:b6:53:53:2d:17:33:84:14:c5:
         09:a3:db:d4:2f:5d:eb:98:11:ec:a2:3f:43:91:3e:65:c2:d7:
         36:69:95:4e:3b:c2:8e:52:62:9f:9f:2e:18:55:db:32:0d:54:
         a8:b8:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:14 2026 by rpki-client