Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/2575F02EF56011EEACB7CB3CC4F9AE02.roa
File:                     2575F02EF56011EEACB7CB3CC4F9AE02.roa (raw, json)
Hash identifier:          E/Bp+DLGRsM68zJIAcm7TyJqnOn+olB8QysLXRwz0bI=
Subject key identifier:   7D:0E:86:B2:AF:4D:AC:6F:88:76:6E:F9:C5:BF:AF:81:A4:40:4B:34
Certificate issuer:       /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial:       0177
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/2575F02EF56011EEACB7CB3CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:11:32 +0000
ROA not before:           Sat 03 May 2025 05:12:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        117.55.254.0/24 maxlen: 24
                          117.55.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9
        Validity
            Not Before: May  3 05:12:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58c84-bb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2a:c8:bc:14:dc:6a:40:93:06:52:b9:b2:a8:
                    47:01:d9:46:f2:de:9a:16:a5:84:f6:d2:f0:f7:a6:
                    fe:5f:5f:db:b9:9a:eb:59:ac:49:40:1b:b2:03:b0:
                    d8:4d:4d:9e:06:9e:4e:01:4d:e3:9e:81:b2:34:21:
                    3d:ff:52:e9:2a:e8:25:1e:06:c8:b3:73:e4:c4:fc:
                    18:1d:10:a9:c6:68:70:0d:9a:14:ec:fa:1d:eb:30:
                    30:4a:c9:a5:2d:a9:54:fc:0b:7a:4e:a3:c2:3f:0c:
                    28:39:71:37:07:94:61:26:09:47:a8:76:8d:68:54:
                    5e:be:22:b3:14:9e:e8:62:55:89:87:d6:2a:8f:02:
                    05:3b:0f:e6:86:4a:94:94:9f:49:9e:57:b9:a7:29:
                    c5:b7:fe:e3:b5:a2:78:1b:ba:80:16:4f:9d:16:58:
                    1e:dc:70:94:13:27:81:63:af:c7:4c:4b:12:6c:97:
                    81:68:46:d5:7e:f3:8d:88:7b:3a:de:00:c9:cc:4f:
                    36:e0:bb:26:e8:58:26:09:74:aa:08:a7:7c:19:88:
                    c9:42:f9:b7:11:15:fb:c7:7b:2a:4f:b9:b6:93:e5:
                    e9:96:2b:a4:4b:fb:cb:1d:e5:2a:93:53:05:85:fc:
                    62:b5:77:34:26:04:f5:76:d4:d3:b4:43:ee:a7:fe:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0E:86:B2:AF:4D:AC:6F:88:76:6E:F9:C5:BF:AF:81:A4:40:4B:34
            X509v3 Authority Key Identifier:
                keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/2575F02EF56011EEACB7CB3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.55.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:63:74:a8:97:7f:23:47:d9:32:54:22:10:f1:b6:f3:30:11:
         e8:78:00:3a:63:8b:86:a8:33:40:b1:9f:49:d8:a3:af:78:e6:
         de:f5:6c:b0:83:cd:84:5e:a2:fa:07:20:86:9f:6e:d8:ad:59:
         dc:1a:48:9d:8e:9f:e7:4f:a8:ed:d3:85:59:54:c4:89:9c:8f:
         62:a0:c4:89:4a:53:15:4a:bf:7f:63:86:4a:9a:00:90:d7:f1:
         4c:d0:92:f6:e8:27:bd:b8:85:fa:b1:95:74:bd:01:46:5d:12:
         3e:3a:dd:00:4d:9b:ee:f8:4e:da:5a:0a:76:27:47:96:4d:98:
         b1:ea:fc:2d:c6:c4:61:0c:de:3f:d6:39:38:d3:77:62:17:71:
         9f:17:91:c1:26:89:8c:b0:45:8f:3b:22:0b:74:5b:8d:f5:3b:
         8c:0e:01:ce:e6:2b:c5:9a:78:34:91:56:0a:72:a8:74:de:40:
         b2:6f:ce:d5:ac:30:b1:ea:b5:99:60:3e:94:90:57:a3:16:a0:
         68:e8:eb:4b:e0:62:cf:da:20:ff:f3:1f:1a:27:a4:37:a2:e2:
         8f:99:93:b9:6d:1f:b1:17:fc:00:f5:81:70:52:e8:85:30:48:
         e1:6a:87:15:30:13:30:05:4a:13:d8:62:6f:72:18:12:fd:d5:
         09:25:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:53:16 2026 by rpki-client