Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa
File:                     ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa (raw, json)
Hash identifier:          1VgHobz4nzrs5NBqb89qRpxnur9wCmTVYrTP5UDXUqY=
Subject key identifier:   40:22:0D:27:18:C6:24:1A:33:69:B7:4E:67:1C:2D:9D:4E:18:78:91
Certificate issuer:       /CN=A91B8833/serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Certificate serial:       10
Authority key identifier: A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa
Signing time:             Sun 08 Mar 2026 08:53:55 +0000
ROA not before:           Sun 08 Mar 2026 08:53:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142179
IP address blocks:        192.232.52.0/23 maxlen: 23
                          192.232.52.0/24 maxlen: 24
                          192.232.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
                          rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8833, serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
        Validity
            Not Before: Mar  8 08:53:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69ad3923-fc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:ed:26:72:5d:ab:5b:53:14:c7:5a:d4:ec:
                    17:7b:df:c1:55:d2:09:58:ab:a7:f4:91:99:8d:f8:
                    2c:2a:f2:b7:9f:f9:ce:8a:19:36:b8:af:c5:ca:3a:
                    fb:cc:16:42:97:cf:18:47:8b:72:a6:21:77:93:8e:
                    8d:1a:ec:c6:4b:cf:98:3b:f2:68:81:02:10:fb:51:
                    49:7e:08:b2:67:f8:a9:1c:e2:59:2b:83:1d:77:f0:
                    97:95:d3:21:2f:1d:e3:1d:9f:b7:7f:aa:4b:f6:dc:
                    a5:50:5a:37:d1:85:5a:87:5d:1a:2c:7c:58:e2:a8:
                    fa:ad:41:4d:f9:f3:11:d4:a0:22:a0:65:9a:a8:8b:
                    f8:86:b8:cc:bf:8b:4b:26:48:dc:9b:94:83:15:ae:
                    57:f4:40:1b:92:51:a7:74:08:d3:67:82:e6:9b:79:
                    95:5a:bb:d4:24:52:7b:e2:b9:7d:ac:f3:84:00:d7:
                    8f:56:cc:6c:dd:a4:d6:77:f2:31:73:2b:ef:a7:89:
                    ff:33:b9:2b:c0:8b:5b:21:31:cc:6d:cb:db:48:0e:
                    27:92:ef:6d:e6:2d:2a:d1:e8:45:47:a7:ad:9a:fd:
                    fd:da:3e:be:34:db:24:c5:f0:f7:9b:5e:50:93:f5:
                    67:ed:5d:b7:f2:09:2c:be:ef:4d:e3:ef:47:37:67:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:22:0D:27:18:C6:24:1A:33:69:B7:4E:67:1C:2D:9D:4E:18:78:91
            X509v3 Authority Key Identifier:
                keyid:A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:15:4b:aa:1f:bf:bf:a0:f5:52:87:32:b8:37:5e:f3:fe:2a:
         6a:86:bb:5f:f9:14:c4:13:f3:db:02:6b:47:b4:79:f8:ff:55:
         a2:6b:10:01:6a:2f:d0:ff:98:99:af:7c:64:9b:ee:5a:9f:30:
         dd:77:ed:c5:aa:bf:a7:1e:85:89:b4:19:1e:3d:e9:1d:31:ab:
         d0:ea:a9:65:6e:fb:04:1b:93:7d:77:0f:d8:1e:b4:19:cb:fc:
         7e:ae:0c:e3:bd:72:a7:5f:ce:aa:4c:3a:48:70:fb:25:d8:00:
         a5:55:53:45:10:e3:84:6e:a1:b2:cb:20:b2:fc:32:ad:47:19:
         f1:a9:64:16:fe:5d:15:a4:52:a9:f3:33:6a:78:63:99:61:60:
         f6:5d:af:eb:bd:3f:e3:12:db:e9:3a:e2:ff:e7:06:1f:b7:3b:
         3e:d4:97:7b:c9:ac:97:a3:be:4c:47:59:d3:b3:01:a5:02:1e:
         50:8b:c8:b1:0d:4d:42:dd:bd:3d:c4:8b:3a:6b:72:a0:b4:b3:
         38:2e:ed:fa:03:80:42:e0:bd:5c:db:51:7a:0d:94:1e:38:30:
         5a:66:6e:cd:c1:35:02:40:3c:83:19:b9:96:54:8f:b5:54:0b:
         c5:96:6e:98:dc:ea:7e:5c:12:98:a9:7e:d0:0a:a8:e0:26:47:
         d7:a4:24:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:29:06 2026 by rpki-client