Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/35341F3E4EAE11EF811DC17BC4F9AE02.roa
File:                     35341F3E4EAE11EF811DC17BC4F9AE02.roa (raw, json)
Hash identifier:          NWWfC45uzKuvZ4dw6yp0ErfNgMsQne0/8ctWSm0IyCU=
Subject key identifier:   C5:24:65:29:C2:48:E4:2A:37:B1:7E:07:53:CB:C9:9C:69:FD:1F:74
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       0735
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/35341F3E4EAE11EF811DC17BC4F9AE02.roa
Signing time:             Thu 30 Apr 2026 22:28:21 +0000
ROA not before:           Thu 30 Apr 2026 22:28:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        194.193.16.0/24 maxlen: 24
                          194.193.17.0/24 maxlen: 24
                          194.193.18.0/24 maxlen: 24
                          194.193.19.0/24 maxlen: 24
                          194.193.28.0/24 maxlen: 24
                          194.193.29.0/24 maxlen: 24
                          194.193.30.0/24 maxlen: 24
                          194.193.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Apr 30 22:28:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3d785-0c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:2d:85:d7:b3:c8:47:90:c5:0c:48:5f:32:
                    4f:86:17:2b:2d:47:fe:cd:75:4f:ef:2b:74:c5:57:
                    e3:27:d8:a9:4a:c9:8a:c9:2e:bd:50:9d:6f:63:ce:
                    1b:1f:81:b4:59:6a:7e:33:16:57:0b:6c:fe:f8:88:
                    1d:ae:bc:65:af:98:e2:e8:dc:72:be:29:1f:94:c6:
                    24:f3:c5:5d:ab:82:7c:08:64:77:ae:d1:03:54:f1:
                    ba:c8:83:ca:24:3e:91:2d:8e:06:89:b6:66:d1:8a:
                    38:fd:33:e2:63:2c:64:72:87:78:fa:68:c7:bc:57:
                    d0:6c:78:88:6a:bd:a3:fe:c6:3f:9b:8a:57:23:01:
                    a4:c4:60:79:35:a2:57:92:83:84:29:97:da:85:b9:
                    79:d0:41:85:7d:50:95:53:e5:cc:10:38:87:62:15:
                    52:46:a4:00:3a:17:78:cd:4d:81:65:0f:7b:99:8c:
                    d1:a2:06:f8:94:1e:61:5e:23:93:60:99:82:9d:45:
                    49:46:90:a5:6b:0e:dd:84:a9:e4:2a:5a:32:b4:88:
                    64:cd:d5:25:05:25:27:c5:1a:e1:de:68:24:7c:d0:
                    0e:f9:10:20:eb:1c:c5:29:b0:a2:24:de:8f:43:39:
                    e4:ad:9d:ca:50:53:89:5c:d7:db:a1:d2:99:39:28:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:24:65:29:C2:48:E4:2A:37:B1:7E:07:53:CB:C9:9C:69:FD:1F:74
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/35341F3E4EAE11EF811DC17BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.193.16.0/22
                  194.193.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:53:b6:fa:48:38:e1:4b:98:68:81:2e:00:fd:71:a6:eb:41:
         1d:84:15:e1:d4:1c:c7:1c:e4:30:34:35:af:21:66:b9:bf:7e:
         28:e5:f1:76:fb:d2:b7:4a:4a:2e:46:ed:25:04:8c:24:2c:34:
         a9:12:26:f0:9c:e1:ac:f6:79:d8:b2:7a:77:a8:45:2a:8f:c1:
         18:51:8f:50:6a:5a:0f:cc:2f:db:b4:7e:87:93:67:68:46:87:
         25:ae:4a:f0:31:24:b0:c4:d0:38:e5:96:44:9f:a6:0d:f1:8b:
         cc:8b:f8:31:b2:b2:35:0e:5b:23:19:62:ed:44:84:6c:f2:72:
         2e:71:72:3c:d9:b8:2b:b4:45:af:ba:e6:2c:81:69:14:44:28:
         ac:b3:5c:d6:9a:4f:6e:96:85:a2:05:74:4e:31:07:07:16:57:
         71:3d:e1:f8:19:c2:a6:06:b7:f2:6c:63:64:e3:ca:85:ab:f5:
         e9:09:bb:be:52:86:98:06:3e:18:6f:84:43:94:fb:1e:22:34:
         d1:76:40:25:1f:e7:04:2d:eb:e4:ee:b5:a7:c4:b8:cb:2c:11:
         ec:69:9d:3b:ac:02:c2:cb:47:fe:27:50:82:a7:63:db:c0:7d:
         b9:b4:9b:e8:c6:2a:95:4f:32:0a:42:03:ae:66:83:3a:65:c1:
         f4:0b:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:22:39 2026 by rpki-client