Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/04594232DEA011EE91181415C4F9AE02.roa
File:                     04594232DEA011EE91181415C4F9AE02.roa (raw, json)
Hash identifier:          0K33p+5a3MtWPDXgFg5/N6ACaerP5yYdkkaGo2hJbX4=
Subject key identifier:   46:62:10:68:58:67:DF:79:C2:E1:99:38:CE:8B:9A:09:50:24:07:D7
Certificate issuer:       /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial:       025A
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/04594232DEA011EE91181415C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:15:35 +0000
ROA not before:           Wed 16 Apr 2025 16:55:25 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     37988
IP address blocks:        195.114.14.0/23 maxlen: 23
                          195.114.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
        Validity
            Not Before: Apr 16 16:55:25 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a42de7-751f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:05:9f:56:f6:2c:c0:61:e2:2c:78:39:53:
                    a7:4b:ef:7d:64:8d:c1:34:1e:79:c8:7e:51:da:62:
                    85:bb:71:21:3f:f0:59:eb:27:c7:f4:81:15:c8:a8:
                    f9:fc:9a:e0:94:6a:ea:c4:46:94:86:2f:06:62:fb:
                    5d:74:19:a2:ba:c8:30:4c:42:e6:4d:45:8e:00:c5:
                    b2:f4:16:35:d8:51:43:e7:94:42:13:fa:d0:2b:f7:
                    e9:8a:45:7d:d8:d6:f9:9a:16:2c:8f:ed:f0:18:ad:
                    10:aa:71:6b:2d:38:3e:0a:27:90:71:1a:92:b9:e6:
                    f8:b3:2e:31:c2:b2:93:9e:ed:ce:30:5e:ce:e5:7c:
                    19:41:6b:cd:f2:19:17:66:fb:b0:a3:40:fd:61:ca:
                    13:ef:dc:2c:0e:3e:07:fe:15:70:79:9d:b8:d9:9d:
                    0a:f2:02:58:1c:af:47:85:a2:93:dd:84:75:99:cc:
                    89:c6:f8:b4:5d:35:dd:5a:7c:b6:94:de:a8:f0:e8:
                    c2:7c:4b:a5:26:69:87:eb:f2:93:cb:db:2b:7d:3f:
                    78:dd:8c:e8:82:0e:83:c1:b7:f3:45:16:dd:7b:8d:
                    e1:dc:72:55:44:32:49:ad:83:f3:fc:7b:7c:96:cb:
                    0a:ba:d8:d7:7c:a7:26:5a:c0:fc:ec:5b:93:41:ce:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:62:10:68:58:67:DF:79:C2:E1:99:38:CE:8B:9A:09:50:24:07:D7
            X509v3 Authority Key Identifier:
                keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/04594232DEA011EE91181415C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.14.0/23
                  195.114.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:fa:75:4e:c5:f2:c9:32:17:9e:e1:6b:f8:a2:04:14:c0:1f:
         10:b1:6d:4c:66:c6:75:6b:17:51:d5:a6:d3:68:46:cf:93:f4:
         5d:32:4c:67:a3:bf:5d:b7:4f:77:16:7c:05:6b:57:95:18:64:
         68:91:72:b6:0a:e4:8d:eb:b9:f6:24:c6:85:38:bd:6c:cd:c9:
         b1:23:1d:38:3f:ab:e9:9b:62:92:9a:f4:41:bb:3d:de:3b:6b:
         59:1c:44:b7:0a:70:3c:b0:67:35:57:ac:f8:f1:b0:54:e9:e4:
         27:a5:ec:a2:5c:ca:7e:b2:b5:36:88:1f:b4:4d:c6:86:68:eb:
         bb:db:6c:32:65:f4:2d:9a:79:06:11:9d:09:6c:19:60:51:be:
         ac:be:0a:5a:f0:4b:e4:a6:a2:87:dd:42:81:9c:a3:c8:32:49:
         11:ab:08:a3:a5:6d:0a:6c:ae:bd:11:e5:01:e2:88:4a:ab:65:
         91:fa:64:a7:35:3d:e4:e6:d2:66:03:00:27:95:52:3d:63:a3:
         54:77:eb:24:06:94:c1:35:92:30:ba:93:6d:d7:86:af:be:24:
         05:08:b1:88:af:7f:71:55:fd:ff:3d:ea:45:81:7e:ed:2e:e2:
         21:e7:ae:85:d9:41:b9:e2:47:e1:75:a6:7c:1b:9f:54:65:95:
         03:95:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:23:13 2026 by rpki-client