Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/C2E6D1F63C0911F19D18A1CEB2833773.roa
File:                     C2E6D1F63C0911F19D18A1CEB2833773.roa (raw, json)
Hash identifier:          PLPriTbZpga1d0Ygy1kWk5OtBKo4jT5HT/wMgziotHQ=
Subject key identifier:   BC:02:06:F6:AC:27:47:0D:68:4C:DD:8E:B9:88:AB:EC:2D:F1:E5:BB
Certificate issuer:       /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
Certificate serial:       56
Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/C2E6D1F63C0911F19D18A1CEB2833773.roa
Signing time:             Sun 19 Apr 2026 16:06:45 +0000
ROA not before:           Sun 19 Apr 2026 16:06:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154351
IP address blocks:        138.252.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
        Validity
            Not Before: Apr 19 16:06:45 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69e4fd95-0393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:89:a2:be:e1:87:5d:f8:4d:d9:c4:08:b2:
                    5f:40:2e:01:91:b7:bc:91:2d:05:ac:42:45:1f:e4:
                    0a:b3:67:6c:a3:28:50:c8:71:40:8b:84:43:0b:fe:
                    b2:24:4d:4b:fd:77:b4:4f:ee:1b:3a:a8:6c:a0:55:
                    d9:b0:2f:d9:7d:9f:a2:5b:04:43:dc:f1:c2:c1:7e:
                    7b:a0:c4:00:cd:56:3b:6d:8b:ff:79:f6:ed:05:29:
                    09:a8:11:b2:61:c8:e9:fa:5b:44:f0:42:86:ad:d1:
                    a7:3c:93:85:1b:bb:ff:cc:71:f1:d2:a6:a7:4d:fe:
                    18:03:9e:78:9d:9b:5e:8f:fb:fa:4f:55:0c:66:b1:
                    67:60:ae:53:24:ad:42:d6:96:d8:3c:74:b5:74:16:
                    10:26:d4:8b:ba:bb:54:a9:49:be:bb:9b:3c:5a:80:
                    13:4b:32:6e:c1:2a:48:14:07:10:c6:db:9a:38:56:
                    24:12:b5:61:b3:36:96:8c:c9:b5:20:c3:13:5e:4e:
                    23:61:60:74:26:7e:b8:9e:9e:8a:a7:3c:01:3e:46:
                    ce:03:a9:48:0a:fe:5a:34:d7:52:26:39:bd:10:f7:
                    a6:c5:f8:09:d0:c3:c9:a5:68:0c:cf:8d:2f:29:66:
                    4a:20:02:53:b0:cf:21:af:e4:38:5a:34:3a:84:1f:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:02:06:F6:AC:27:47:0D:68:4C:DD:8E:B9:88:AB:EC:2D:F1:E5:BB
            X509v3 Authority Key Identifier:
                keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/C2E6D1F63C0911F19D18A1CEB2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:d5:9e:1c:42:b1:f6:24:5a:50:0b:e2:45:4c:2c:43:06:
         28:63:c9:13:ae:e9:60:2e:b6:46:da:d7:ab:8f:d1:9a:24:8d:
         d4:56:a6:c9:41:58:82:cd:81:c7:46:9d:40:ea:e6:cc:bd:fa:
         a7:79:75:38:f5:ed:0c:df:75:b3:54:df:6a:2c:e8:57:21:3b:
         43:73:2d:4c:1e:ec:8d:36:19:19:a2:e0:a2:74:73:9d:8b:29:
         97:d2:c2:ab:42:c5:f4:2a:5d:ae:37:a0:36:2e:4f:56:a7:24:
         48:cc:28:d6:31:cf:50:cc:7a:62:b3:48:21:cb:c1:e9:86:56:
         85:d2:47:26:00:52:f2:a3:9a:47:aa:39:f9:6f:ec:05:91:b7:
         dd:79:05:3f:41:c3:e2:5d:54:1e:72:d2:2e:bc:a1:d7:c1:d5:
         67:b5:e6:f4:14:42:96:ca:2f:44:aa:34:36:78:8e:fe:65:d0:
         9c:65:a2:84:ad:3f:ba:0f:9b:fc:64:d9:5d:5e:a9:b6:c8:5d:
         37:bc:2c:e3:39:0e:62:c2:6a:65:33:69:c2:2f:ad:0a:f1:4e:
         de:f0:c6:13:fe:e6:06:5a:9e:4d:fd:fb:b9:e8:ee:27:9b:c5:
         95:ef:f6:dd:c3:10:31:13:f1:e5:32:e4:11:29:1d:c6:03:e3:
         30:b6:55:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:00:20 2026 by rpki-client