Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/A2939A381CB711EF8F98240CC4F9AE02.roa
File:                     A2939A381CB711EF8F98240CC4F9AE02.roa (raw, json)
Hash identifier:          uaEjjX3xQXPDwGTVKpdhJdD/ZyTOwq1GfMDyFN6Pqjg=
Subject key identifier:   71:92:16:68:34:1A:58:32:A2:F3:6A:25:2A:6C:F5:D6:5B:0E:03:06
Certificate issuer:       /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Certificate serial:       0150
Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/A2939A381CB711EF8F98240CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:34:24 +0000
ROA not before:           Fri 27 Jun 2025 05:45:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152852
IP address blocks:        202.61.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
        Validity
            Not Before: Jun 27 05:45:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a583cf-8aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:61:81:a1:b3:82:3b:35:e1:cf:34:0c:e9:
                    30:e8:c0:c8:f8:41:e6:59:bc:a9:c5:19:8d:cf:90:
                    29:ec:88:f1:23:01:d3:fa:77:81:01:bf:f5:52:10:
                    9e:c0:e5:5b:fc:a8:fb:8e:63:f3:2c:a8:2b:ee:62:
                    6e:0c:c7:88:5d:00:a4:99:bd:c6:51:7c:f6:7d:e1:
                    ac:8f:19:79:87:b6:a6:2e:1a:c2:b2:cb:30:28:93:
                    4c:c0:76:fe:fa:91:5d:7b:34:2f:53:2b:f2:63:2c:
                    a5:7f:5b:2a:e6:7e:7c:04:e3:f5:2b:8d:fe:d2:c9:
                    3c:51:fb:16:14:53:d1:87:6f:f2:cd:e7:7b:b0:92:
                    be:35:18:d0:5c:83:06:81:50:d9:6b:ea:b9:62:1e:
                    e0:cc:98:64:ab:7a:58:69:1c:81:36:e8:47:a8:b3:
                    d5:cf:09:64:5f:65:b8:42:9a:a9:b1:d4:80:43:95:
                    3f:fd:01:3f:1f:56:7d:74:a7:c0:e7:f3:55:35:fc:
                    53:1e:69:bf:8b:f4:c4:9e:e0:de:31:b9:c1:0c:1c:
                    f2:b0:d4:f0:a4:4f:d4:eb:ae:4a:bb:eb:76:a5:22:
                    bb:78:ea:1f:ab:2c:b7:7e:b6:a4:67:5f:0b:ff:a1:
                    76:71:ca:51:2a:16:fb:98:36:d1:45:6b:d5:9b:09:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:92:16:68:34:1A:58:32:A2:F3:6A:25:2A:6C:F5:D6:5B:0E:03:06
            X509v3 Authority Key Identifier:
                keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/A2939A381CB711EF8F98240CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:9f:6f:30:bd:05:9a:c7:fe:7e:e7:69:6d:4a:4a:ac:e1:
         80:f8:9c:92:84:39:68:99:c8:a7:26:4d:02:cb:28:cc:e8:94:
         b5:aa:da:18:1c:a3:9d:fb:47:81:5d:a4:f1:fb:08:8d:3a:0b:
         d2:10:ae:02:19:37:a3:14:83:7b:64:f5:62:21:e7:62:f6:23:
         8f:1b:7b:fe:2a:54:f1:4e:02:c6:f6:0d:5d:10:f7:e3:1b:a6:
         08:aa:db:15:c0:14:da:8b:17:f6:6b:61:e2:08:05:e2:fe:03:
         95:23:f9:c4:5a:81:12:33:d0:cd:5f:bc:6c:07:f1:70:47:b1:
         02:6e:2e:e0:82:b3:63:c7:25:da:88:55:37:fe:17:a8:49:20:
         5b:c6:9c:ec:f8:52:36:e1:31:5a:da:cf:79:e4:99:22:5c:b8:
         dc:55:05:7f:e4:e4:89:97:d9:b6:6d:ef:2f:fd:3c:d1:7c:c9:
         16:21:f4:dd:2b:f0:7b:6c:6e:67:ab:db:17:57:64:d3:af:d0:
         74:6d:2f:54:dd:de:a0:8e:8f:e0:e0:27:34:fa:34:2a:bf:d5:
         64:aa:12:6d:9e:ec:77:de:7e:dc:68:ae:fc:c1:b0:67:9a:fd:
         c9:80:25:0d:75:70:23:01:ea:94:5f:8c:3e:f5:95:32:24:5a:
         53:31:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:55 2026 by rpki-client