Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/24528B3C076811F1A996F976023D8C67.roa
File:                     24528B3C076811F1A996F976023D8C67.roa (raw, json)
Hash identifier:          bWgfDX1GE7EGRP9RARHJZONgLN/vb6Xu6Lzu2McBHoI=
Subject key identifier:   A7:4E:F9:94:18:FF:35:72:9E:E5:BA:A8:72:FA:F8:57:48:5F:89:72
Certificate issuer:       /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial:       1085
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/24528B3C076811F1A996F976023D8C67.roa
Signing time:             Fri 08 May 2026 18:21:19 +0000
ROA not before:           Fri 08 May 2026 18:21:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21734
IP address blocks:        111.221.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4229 (0x1085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
        Validity
            Not Before: May  8 18:21:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe299f-5f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:44:11:46:b7:cf:a0:af:8f:83:ae:13:3c:
                    33:81:85:16:13:00:13:5b:eb:0c:1c:28:a3:71:37:
                    db:36:1f:e2:d5:16:ef:34:e5:78:d5:8a:93:de:80:
                    ea:4a:f7:f5:c1:28:76:cc:62:72:47:21:6b:b5:db:
                    83:aa:32:fe:bf:c1:3e:b7:81:f4:c3:30:b3:e2:33:
                    0f:f1:31:f1:4f:61:77:c6:22:59:19:60:38:53:b0:
                    ad:96:b1:cf:b2:40:14:7d:25:be:f5:86:94:9a:10:
                    79:1b:b5:eb:4c:db:9b:cf:1e:f0:11:21:5c:1a:cc:
                    b3:49:b6:41:b7:39:4b:7d:9a:36:53:e0:1a:59:0f:
                    2b:6b:7d:36:21:74:56:ab:e5:b3:29:95:d3:dc:45:
                    c9:cd:56:1c:18:3b:d9:3f:63:5a:8d:6b:4f:31:6d:
                    9a:f0:29:87:bc:0f:c6:de:67:44:1d:70:85:ab:e1:
                    7b:5c:75:34:e3:d8:81:7d:c9:16:90:e5:de:da:2e:
                    35:c9:fc:ef:0a:65:f3:64:34:41:0c:73:4e:54:2f:
                    b3:76:ef:69:bc:fd:7f:4b:11:75:09:0f:07:6f:25:
                    16:45:31:cd:d7:f0:82:f3:e3:b0:d3:73:0c:33:d3:
                    e6:c4:30:de:e0:09:e6:05:90:f4:da:cd:cc:1b:11:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4E:F9:94:18:FF:35:72:9E:E5:BA:A8:72:FA:F8:57:48:5F:89:72
            X509v3 Authority Key Identifier:
                keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/24528B3C076811F1A996F976023D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.221.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:70:01:47:a7:80:29:f0:98:7d:83:74:44:a7:4b:58:a9:
         a3:dd:cd:b4:13:6a:d0:57:40:66:cb:a0:9d:15:53:b5:8f:6e:
         2a:0c:69:48:d4:4c:99:81:89:12:08:3b:d0:48:83:99:aa:54:
         96:76:fa:3c:f7:9b:cb:d2:4a:50:1d:06:2c:fb:e8:44:0a:32:
         3a:92:dc:cb:39:d9:64:5b:e0:65:19:ee:99:be:99:46:5b:cd:
         93:68:fd:ac:51:69:88:77:62:09:5c:dc:4f:a9:50:d6:69:2b:
         08:a7:2b:2e:9d:07:58:02:a2:5a:1f:1c:a6:08:f1:c8:f9:fd:
         62:37:7c:f4:60:47:0b:e3:91:ec:bc:23:68:4b:2e:99:93:39:
         f4:42:7a:56:f6:20:a3:47:5c:86:83:0a:2e:6a:25:c3:4d:20:
         43:5c:63:df:e9:5c:49:85:3a:05:f9:2e:c9:05:59:e8:0c:93:
         a9:30:12:ce:0b:49:29:fa:fc:4e:52:42:d0:45:51:0e:0e:c7:
         22:a5:61:63:73:b3:f1:d1:bc:39:22:fc:2b:77:84:80:85:21:
         49:7e:f8:0c:73:c9:7b:da:69:9d:22:49:91:f6:84:be:83:57:
         c8:55:ff:8e:54:ef:e7:ec:4b:8c:b0:03:40:6a:c3:53:a5:5b:
         e8:4e:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:28:16 2026 by rpki-client