Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/503AD2CE4A9611F1A049A813B0833773.roa
File:                     503AD2CE4A9611F1A049A813B0833773.roa (raw, json)
Hash identifier:          eMI4seMRCma3ImNVMgqTfW73MKcVkDpEG1UHQ54jlRM=
Subject key identifier:   39:84:0C:B4:4A:75:4F:E7:AF:07:9F:23:00:17:E2:DE:4E:4B:75:EE
Certificate issuer:       /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial:       1F
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/503AD2CE4A9611F1A049A813B0833773.roa
Signing time:             Fri 08 May 2026 11:11:46 +0000
ROA not before:           Fri 08 May 2026 11:11:46 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     213549
IP address blocks:        163.128.216.0/24 maxlen: 24
                          163.128.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
                          rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
        Validity
            Not Before: May  8 11:11:46 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fdc4f2-95aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:da:24:55:de:c9:b2:ea:86:fa:84:33:89:
                    92:62:5a:1c:e8:b1:a1:d2:48:f5:0a:7a:c8:52:cb:
                    c0:c7:53:d4:9d:ce:cf:24:a5:56:da:d9:86:f4:ec:
                    03:4f:7c:cf:73:dc:30:64:87:79:d1:d7:40:56:2c:
                    10:0d:87:ef:2f:2f:e5:dc:3c:64:6f:f7:64:b7:3b:
                    8f:f3:3a:43:0e:ab:1e:31:cc:dd:b7:b3:60:0b:af:
                    57:35:e9:1e:92:a8:11:aa:89:af:8a:28:cc:f0:82:
                    79:74:b6:1a:2c:ee:dc:3d:46:6b:18:2c:75:ae:5d:
                    23:0f:15:84:b7:2d:ec:f7:8e:a7:ff:bd:75:1f:57:
                    53:aa:52:6e:be:2b:e1:fa:04:c9:c6:0d:4b:1f:de:
                    b8:80:54:7b:70:b3:5a:20:d5:33:f8:19:02:0c:8b:
                    96:45:23:26:5f:30:17:51:64:03:e1:a3:88:16:52:
                    92:6b:01:44:ad:e8:c3:a6:d7:d3:2f:20:10:dc:36:
                    d0:79:e1:e2:d2:b9:73:42:95:85:88:47:76:de:a8:
                    16:7e:20:06:fc:39:21:15:67:26:3a:9b:ae:fb:20:
                    43:30:56:ca:29:c9:a5:22:6e:91:27:ec:88:e1:4f:
                    c4:28:8b:92:c2:2a:19:cf:cd:6a:dc:5c:d4:f7:18:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:84:0C:B4:4A:75:4F:E7:AF:07:9F:23:00:17:E2:DE:4E:4B:75:EE
            X509v3 Authority Key Identifier:
                keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/503AD2CE4A9611F1A049A813B0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:42:d7:f7:fd:45:a9:f0:03:40:b1:df:84:53:c4:40:8a:b8:
         82:1c:95:f6:49:ac:ba:e6:b8:a7:7c:8c:69:36:48:cd:61:89:
         bc:b3:43:71:6e:f9:ed:83:12:e9:9e:70:00:79:6f:d2:37:ce:
         61:f3:b9:92:88:94:39:f6:99:88:4c:4e:da:e3:c4:46:8a:2f:
         ad:83:f7:74:57:16:4b:bd:db:e3:f4:bb:c5:5b:4c:e4:89:53:
         a9:86:1f:93:0d:81:4f:15:b8:10:de:a1:31:1c:4c:2e:1b:b1:
         eb:63:02:37:74:2b:06:42:f5:6a:f6:5f:76:bc:bc:ee:32:13:
         a5:05:f0:65:92:d5:88:90:3b:d2:17:44:1a:8c:8a:da:81:83:
         e6:ea:a7:a6:f8:79:40:ba:bc:1c:62:9f:34:d6:c7:c2:70:f7:
         8e:0f:00:38:d9:a7:c7:c7:9d:3d:a2:5e:65:a1:f2:e4:53:c2:
         52:a7:3d:89:49:0c:8c:45:73:92:ae:2c:cb:42:e6:23:d1:43:
         f0:21:37:2b:40:f0:e2:92:51:c4:32:2d:82:51:d4:2f:4a:1f:
         0e:dd:d9:76:95:64:d7:8d:15:19:b8:2b:32:bd:63:2f:fa:86:
         81:7b:5d:4a:84:a2:ca:86:9d:47:64:f2:8a:06:13:6a:f8:5b:
         05:55:58:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:41 2026 by rpki-client