Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/74489676FBF711F0B6045B12716F56BC.roa
File:                     74489676FBF711F0B6045B12716F56BC.roa (raw, json)
Hash identifier:          PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=
Subject key identifier:   70:14:3A:65:76:63:F3:31:C4:57:D2:CC:6C:74:28:A5:BC:DA:DA:AC
Certificate issuer:       /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial:       05E6
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/74489676FBF711F0B6045B12716F56BC.roa
Signing time:             Sun 01 Mar 2026 18:22:41 +0000
ROA not before:           Wed 28 Jan 2026 03:14:27 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     140627
IP address blocks:        202.43.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
        Validity
            Not Before: Jan 28 03:14:27 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a483f1-5115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:07:61:70:60:48:56:11:86:7f:68:a1:74:
                    67:47:96:c9:3d:e4:32:9a:c2:b3:88:3a:75:69:66:
                    0b:7e:9d:05:21:5a:a1:0d:13:d8:ce:e9:e7:df:53:
                    21:82:be:f7:bf:b1:49:95:08:ce:7c:c9:ce:5b:15:
                    dc:3c:89:1a:58:d7:27:64:9c:62:89:52:44:a9:60:
                    c8:8e:f5:dd:b6:f3:f0:e7:3c:de:ee:d8:54:8d:7b:
                    5e:94:9b:da:3e:12:21:ce:85:29:47:01:16:b7:c1:
                    26:94:9d:38:cd:02:74:e2:f6:6d:56:d7:46:7c:0a:
                    fd:55:09:65:be:d4:cd:f9:d4:ca:1c:2e:6f:6b:35:
                    20:19:e0:9a:c2:38:0c:2d:aa:ec:e7:6c:d7:0b:14:
                    ad:93:cd:6b:d9:e1:fa:53:bd:f6:97:7d:a1:02:2b:
                    df:2b:3c:fe:fc:d6:73:dc:fc:b6:99:43:d8:68:fa:
                    61:90:4a:2d:4a:1a:e7:04:7d:2d:22:89:61:96:a9:
                    04:72:84:35:6e:d7:24:7a:a5:69:24:ba:9e:1c:4d:
                    dd:1e:98:84:0c:10:d8:f0:90:32:f9:fe:07:62:19:
                    15:1c:9e:9d:e4:97:e4:59:f7:1f:7b:4b:cf:ba:ea:
                    a9:25:9b:59:c9:b5:e7:fe:60:82:61:c4:16:4b:6d:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:14:3A:65:76:63:F3:31:C4:57:D2:CC:6C:74:28:A5:BC:DA:DA:AC
            X509v3 Authority Key Identifier:
                keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/74489676FBF711F0B6045B12716F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:25:33:c8:0f:75:95:3b:db:ec:12:9c:e7:7e:6a:c3:5e:09:
         45:da:df:d5:d9:ba:d2:45:fd:e6:b3:34:7c:95:4a:5e:36:ca:
         de:08:1e:10:dc:ec:a9:48:f2:eb:5c:67:1b:c6:ac:60:f5:54:
         ef:56:53:20:9a:53:91:a5:d6:23:1c:2a:13:4f:40:9c:af:1c:
         df:98:e2:c2:41:20:b9:fd:81:88:00:9f:4d:8f:f9:74:86:14:
         00:3a:85:a7:8d:cb:2e:ba:a3:25:1c:2c:b4:58:28:05:9c:c0:
         14:8f:c6:4e:7f:21:77:28:db:a0:18:fd:1e:12:ac:e0:b3:d4:
         a5:e3:12:93:af:e7:c0:7e:8b:80:e4:e6:02:db:6e:de:09:08:
         35:6b:ca:69:d6:32:f7:fc:f7:18:ad:84:77:ae:78:55:f1:9a:
         9b:01:9d:33:98:42:28:9a:37:b8:64:06:ed:b9:ef:6f:02:cc:
         db:ad:08:13:94:e8:e9:cb:f9:ac:c3:cb:99:57:18:d0:fe:b8:
         9e:8b:0e:5d:df:e6:22:c2:97:e2:3a:da:82:bd:47:e1:55:aa:
         de:d5:70:0f:d9:84:11:80:bd:cc:d2:e6:70:14:4d:6c:f0:3b:
         f2:b9:30:5c:d5:91:66:a2:ef:ee:31:80:39:f7:da:5b:0e:ab:
         ed:67:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:11 2026 by rpki-client