Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
File:                     B2CE886C07B811F0992B401EC4F9AE02.roa (raw, json)
Hash identifier:          Rlkxd/WwIg6t5LjMKrnowD32g4ytbqCMIvolbiK4MHo=
Subject key identifier:   AE:BD:17:1B:0D:0D:71:93:B0:B3:39:FF:D6:48:D3:33:B5:1F:31:8F
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       61B2
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 08:51:43 +0000
ROA not before:           Mon 06 Jul 2026 08:51:43 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        203.184.180.0/24 maxlen: 24
                          203.184.228.0/24 maxlen: 24
                          203.184.229.0/24 maxlen: 24
                          218.189.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25010 (0x61b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Jul  6 08:51:43 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a4b6c9f-41e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:86:42:c2:ae:60:23:21:27:08:07:18:d6:
                    67:57:c1:33:d7:ff:20:85:a2:08:aa:82:51:fc:dc:
                    c8:43:8c:af:31:9b:6a:13:7e:88:5f:81:3a:75:32:
                    4e:71:a7:87:97:17:b9:b7:95:76:fb:a0:84:e2:95:
                    b9:ce:69:31:f9:d4:27:e8:90:dc:d7:56:d9:e3:9a:
                    31:85:ea:cc:3e:2b:3a:49:4d:8b:9d:f6:c9:17:6c:
                    b5:53:ee:e3:ab:38:e3:81:ff:14:b9:9f:9e:eb:c1:
                    01:fd:06:bf:44:13:98:0c:57:3b:97:da:77:4d:46:
                    59:a7:cf:41:eb:fb:83:49:ad:17:bf:d1:32:6d:6b:
                    e8:34:c1:2e:fa:a4:8e:91:fa:fb:4a:8e:53:c1:80:
                    b8:a7:17:a1:c3:0e:54:b6:1e:7d:53:07:1e:bc:8a:
                    2b:b9:56:f0:14:af:c7:46:94:ac:e3:46:54:59:83:
                    74:bc:d5:72:ab:36:9f:03:09:2f:82:df:3b:d9:bc:
                    9a:c7:c9:42:8f:74:58:1f:08:d8:18:f7:79:41:03:
                    29:25:6f:e0:d9:21:29:3e:87:16:58:44:95:f7:4a:
                    7d:8c:d4:c1:6a:e9:84:9e:9c:c8:74:b1:00:04:86:
                    10:9b:47:41:e5:41:06:6d:47:83:05:f5:11:c7:62:
                    96:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BD:17:1B:0D:0D:71:93:B0:B3:39:FF:D6:48:D3:33:B5:1F:31:8F
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.184.180.0/24
                  203.184.228.0/23
                  218.189.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:0e:72:f4:a8:05:f5:40:29:35:0a:75:bc:03:34:e5:9c:
         29:6d:c3:64:6c:ba:94:01:af:dd:78:1e:40:b0:fb:8f:7e:d2:
         a1:c1:ca:1e:2f:b8:aa:06:1d:10:a9:73:ba:94:09:ad:2f:b7:
         74:32:f4:8c:c2:88:b1:2b:2e:f7:54:8e:1f:66:c1:75:cb:b3:
         66:c8:01:09:b6:b8:eb:e7:a0:ba:fa:43:f7:d9:c4:31:8f:d0:
         02:24:36:9e:73:b9:56:b7:ff:42:27:0b:ed:55:e2:ce:5a:82:
         9c:8d:2d:87:4f:7c:0d:64:1d:c1:f8:9b:ee:d2:71:8b:2a:7c:
         23:f8:f5:73:8d:c2:55:c1:9e:95:a8:d8:7c:b3:a8:66:fb:c7:
         24:1c:ff:97:65:60:8e:76:3f:01:c5:aa:a1:8f:bb:d2:61:7f:
         75:41:05:a9:45:81:a3:f2:3d:1e:51:09:34:24:68:60:2e:79:
         e0:64:04:3e:f3:bc:cd:74:70:a9:a4:84:69:fc:7a:c3:21:a8:
         89:98:84:2b:5c:09:46:31:ec:12:28:f1:f2:65:cb:07:a5:ca:
         3b:da:c8:73:27:26:7d:c5:41:ad:8a:52:0b:d0:91:ec:ae:8d:
         2c:32:3c:e1:20:ee:c6:34:b3:ad:44:5a:80:e7:88:19:9a:84:
         c2:48:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:31 2026 by rpki-client