Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/45776578492911F19166D80CA6833773.roa
File:                     45776578492911F19166D80CA6833773.roa (raw, json)
Hash identifier:          CE8GzORY1KhTBpgJKwSkDL4jBuBSGsmu4XVI6wUnlcg=
Subject key identifier:   E6:54:1D:81:FD:75:5D:17:7B:46:9E:EA:D8:1B:E3:A7:84:1D:03:39
Certificate issuer:       /CN=A91B0B89/serialNumber=986120E19431E2C3FE996503BE70072213549790
Certificate serial:       02
Authority key identifier: 98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/45776578492911F19166D80CA6833773.roa
Signing time:             Wed 06 May 2026 08:55:03 +0000
ROA not before:           Wed 06 May 2026 08:55:03 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154655
IP address blocks:        162.4.88.0/24 maxlen: 24
                          162.4.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B89, serialNumber=986120E19431E2C3FE996503BE70072213549790
        Validity
            Not Before: May  6 08:55:03 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fb01e7-c9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:14:83:4b:de:b2:c3:f9:40:40:a4:15:92:
                    3b:69:45:a6:29:f7:62:68:1f:5e:54:c6:d8:2c:74:
                    e9:33:9b:03:2f:72:87:98:4a:2f:96:06:d2:3e:fb:
                    b5:94:ac:1b:b0:36:d5:8c:25:ff:62:06:cb:76:99:
                    4f:51:ca:26:30:2c:d4:27:35:f3:36:67:10:da:70:
                    fd:72:7e:3a:97:31:3b:18:70:4f:d0:67:16:a3:19:
                    a1:88:18:f0:d2:24:5c:86:e3:c4:86:a4:8a:84:af:
                    d8:43:46:37:6e:bd:e4:92:0a:80:5a:0c:6e:ea:3c:
                    6d:74:5b:0b:e7:64:08:de:bb:5f:df:d9:50:41:82:
                    e4:69:4d:49:95:ff:ba:c7:c8:07:e8:5e:12:f5:99:
                    df:7b:fb:1e:c6:66:3d:99:e7:21:a6:45:97:9d:f6:
                    c0:eb:0e:22:f9:ad:24:b5:78:04:2c:f5:51:31:07:
                    84:76:c5:73:be:b2:b9:7d:2a:57:c2:99:4b:f9:eb:
                    d3:a9:c1:63:3d:55:9d:fb:c3:9b:a3:c4:e1:2f:e1:
                    1c:73:42:0e:a3:15:2e:0f:20:bf:c1:1b:c6:d9:e8:
                    24:3a:8c:db:a7:68:06:2d:13:ef:d0:ee:fa:05:db:
                    95:ea:a5:2a:03:a3:00:55:43:b4:3c:d2:15:b5:65:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:1D:81:FD:75:5D:17:7B:46:9E:EA:D8:1B:E3:A7:84:1D:03:39
            X509v3 Authority Key Identifier:
                keyid:98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/45776578492911F19166D80CA6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c5:3f:d4:91:54:3b:2a:95:b8:c6:8d:da:c6:b5:7b:13:7e:
         c5:46:13:c4:5e:dc:a1:aa:48:b5:32:3e:65:1f:cc:76:3b:52:
         98:33:e1:76:6b:cf:2d:fe:66:96:9b:72:13:d4:cc:e3:ab:66:
         f7:79:29:2e:11:b2:c3:91:66:ad:a5:1f:a8:12:9c:a4:b1:9c:
         5d:7b:97:26:c3:69:28:8b:13:d6:60:60:56:d4:86:99:44:d6:
         76:d2:9c:c8:59:f6:ce:d5:d8:94:61:12:62:08:45:56:43:94:
         fc:35:af:73:8d:b1:dc:9c:17:bd:dd:26:0f:00:f6:8d:06:a9:
         40:ca:e0:b8:c7:aa:95:28:df:22:55:43:aa:dd:25:8a:87:9f:
         20:18:58:d8:e8:40:66:2e:ab:92:0c:7e:5d:dc:a2:5f:91:9d:
         4b:99:78:8c:fe:b6:62:fc:6c:be:86:73:8e:39:7c:42:81:35:
         2b:6a:0c:c7:b2:e7:5d:5c:b0:ed:5a:e3:d0:39:ed:9b:e1:cc:
         65:80:41:51:3e:9e:05:91:b6:ac:14:2a:1b:ed:f3:64:8f:c1:
         a5:7c:89:25:0b:7a:a5:ce:65:09:32:76:0d:da:f2:a6:3d:22:
         72:a3:39:41:14:6f:fb:aa:6a:db:4c:72:68:ae:cd:72:df:95:
         78:89:2e:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:27:00 2026 by rpki-client