Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/5376E736BDC711F09FB1B25EC4F9AE02.roa
File:                     5376E736BDC711F09FB1B25EC4F9AE02.roa (raw, json)
Hash identifier:          QU1LaAxAq+WVFCAy5YdES0JhfyZfSsHcQ7PvyTTta88=
Subject key identifier:   6D:07:FF:F5:3B:55:A3:4B:DA:47:A3:F7:F7:45:10:A6:22:6B:A3:EE
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0324
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/5376E736BDC711F09FB1B25EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:04 +0000
ROA not before:           Sun 09 Nov 2025 23:53:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     23679
IP address blocks:        202.134.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Nov  9 23:53:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4878c-751c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:a3:61:ad:f4:fc:50:96:55:94:03:39:97:
                    2c:93:98:bb:ed:69:0d:ec:dd:38:0a:9d:7d:80:5e:
                    31:8a:0b:6b:53:0c:0f:f2:d9:3e:77:25:9d:ea:ea:
                    9a:39:e4:59:3f:cc:d4:03:b3:d6:f9:ae:75:6d:4c:
                    83:d9:2a:44:a0:04:a0:f9:6f:22:98:0a:31:6a:20:
                    3a:cf:14:50:fd:37:7f:d8:81:75:75:65:61:c2:de:
                    89:4b:e3:58:56:89:99:54:f9:2c:bb:c9:f4:ac:49:
                    08:49:50:d9:3d:77:60:ae:04:a2:04:6a:94:02:79:
                    ec:5e:89:bf:5c:80:05:89:3a:64:94:f2:f1:c3:d3:
                    e2:87:d9:8c:fd:cb:f7:7c:56:44:1f:1c:a5:05:6c:
                    19:8c:83:78:0c:a6:e8:27:a5:22:89:08:36:76:da:
                    d4:1a:67:ed:57:3f:ee:05:ba:c4:d2:db:75:07:56:
                    2b:5d:b8:9b:6e:bc:90:69:4f:76:c8:bb:19:75:92:
                    3c:69:a3:38:e9:ac:51:59:7c:a8:6b:e4:70:af:96:
                    cb:ee:a2:13:d7:a8:b5:4e:a7:fa:e0:19:69:9d:63:
                    64:b3:a8:e8:10:65:2f:71:79:4f:7b:7e:a5:9d:70:
                    b8:90:53:1a:c9:67:9b:79:28:23:7e:5f:cf:ad:a9:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:07:FF:F5:3B:55:A3:4B:DA:47:A3:F7:F7:45:10:A6:22:6B:A3:EE
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/5376E736BDC711F09FB1B25EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:dc:6f:ee:7d:f4:61:6a:fd:2f:c4:48:20:44:97:e4:ce:
         d5:b0:5e:31:7a:c9:5a:34:c4:71:dd:89:e8:cc:a2:c5:d3:b5:
         70:dc:3e:c6:65:f4:6a:1f:05:e6:ca:0c:e1:d8:16:c3:5c:c3:
         9f:6d:b9:87:62:1f:6b:41:a1:28:c3:2a:5c:d8:a0:25:fb:fb:
         a8:5b:19:da:19:71:6d:17:b7:cc:a6:e8:f4:6f:07:14:30:47:
         4f:cc:16:ea:82:19:2c:63:76:bc:4b:c7:fe:cf:aa:d7:9c:d9:
         32:8c:6b:06:f7:56:0a:6c:06:0a:e8:ce:61:aa:df:ae:de:4b:
         55:78:46:a9:ad:9a:c8:b9:2e:a4:5c:88:32:8b:a3:55:b6:e6:
         fc:41:04:36:d1:31:e2:0b:03:4c:b5:31:79:c3:9b:76:e9:56:
         4a:3c:18:4c:c1:a4:73:b6:97:16:88:b7:2c:e0:bc:ea:ac:3c:
         72:a8:b1:49:39:0f:6f:d8:fa:32:5b:3f:0c:66:07:b3:70:2c:
         c9:12:fa:6c:41:8e:65:6e:aa:57:1b:d6:bd:30:06:54:7f:99:
         79:5b:17:d6:bc:70:ff:92:e7:10:d3:07:d1:b4:d9:56:7a:4b:
         a1:5e:fd:83:8c:81:49:4e:8f:8a:a8:63:4e:ce:72:b6:76:18:
         aa:7b:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:26 2026 by rpki-client