Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/6C523164E03F11EE87838439C4F9AE02.roa
File:                     6C523164E03F11EE87838439C4F9AE02.roa (raw, json)
Hash identifier:          j08RGf04FdX/xIitHauHUQrvUNZaizkLeJ3LyPUNoUg=
Subject key identifier:   53:5B:B5:93:F9:00:D0:17:BA:4A:21:91:FC:76:00:52:95:67:6D:FB
Certificate issuer:       /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
Certificate serial:       0181
Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/6C523164E03F11EE87838439C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:15:24 +0000
ROA not before:           Tue 29 Apr 2025 05:41:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152637
IP address blocks:        202.37.52.0/23 maxlen: 23
                          202.37.52.0/24 maxlen: 24
                          202.37.53.0/24 maxlen: 24
                          2401:8860::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl
                          rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
        Validity
            Not Before: Apr 29 05:41:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59b7c-6ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:da:68:37:08:89:03:d2:04:1b:9c:82:5b:
                    8c:4b:18:1f:a1:02:80:e1:74:a2:f1:58:4c:b0:f7:
                    d6:b5:25:2e:ad:12:af:cc:76:54:74:58:a8:5e:20:
                    9c:8e:71:74:f8:b6:de:c3:09:78:e5:59:fc:ad:88:
                    11:ec:a0:9d:7a:5a:a3:93:bb:c4:4b:53:10:d8:3a:
                    d2:7f:76:78:6a:0c:e0:d3:d3:26:c9:49:04:ae:7f:
                    84:7a:e4:14:e3:8b:07:c2:ee:17:40:e2:6e:12:73:
                    3d:64:81:89:02:39:ac:8a:a1:4a:24:b8:23:d6:da:
                    1f:69:da:73:03:3e:ae:e2:47:db:94:55:a8:63:c9:
                    ec:dc:bd:cb:3b:ee:31:30:cd:84:b5:05:3c:7b:58:
                    6c:17:4e:9d:65:af:d5:89:01:a0:65:a2:e2:05:1d:
                    63:bc:a0:5d:b9:fa:31:51:7a:67:5a:8c:2a:b2:85:
                    33:e2:4a:48:92:66:38:c5:01:e8:52:0f:6c:14:d3:
                    8a:10:ab:21:5f:15:a9:e8:81:f7:7f:53:98:af:9e:
                    c7:a2:84:9d:fd:7c:da:df:47:36:49:4a:f8:3d:ae:
                    81:e4:e7:af:ed:f2:8c:3f:a6:14:03:e6:51:a6:35:
                    14:57:d2:cd:a2:e2:d9:df:2d:0d:cb:97:5f:55:c0:
                    d6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5B:B5:93:F9:00:D0:17:BA:4A:21:91:FC:76:00:52:95:67:6D:FB
            X509v3 Authority Key Identifier:
                keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/6C523164E03F11EE87838439C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.52.0/23
                IPv6:
                  2401:8860::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:a8:00:a6:18:ea:c1:9d:d7:db:dc:e1:16:0d:44:ba:fd:0e:
         79:d8:85:40:5f:ae:5c:d3:61:c4:61:cf:8b:89:b3:1d:af:0c:
         f3:73:03:ae:02:59:69:d0:26:b5:48:e4:dd:70:9f:76:cb:48:
         61:49:bd:f2:53:b3:64:8d:16:f1:c8:46:74:88:ef:59:42:dc:
         52:5c:9f:80:20:ee:64:9e:99:ee:ce:25:6d:a1:94:4f:62:e4:
         76:14:69:79:89:c0:4a:12:ba:e3:be:fd:53:05:78:5d:85:4f:
         d4:c7:52:6c:25:47:b8:76:c1:d1:7a:d4:f6:cb:a8:af:80:3c:
         e4:72:3a:00:35:f6:b7:69:ed:00:8a:06:f2:75:15:46:f9:a5:
         8e:5c:45:36:2b:0d:7b:5f:08:f1:fe:14:0a:f6:76:65:d0:5e:
         50:e1:05:35:c1:31:b4:33:eb:19:70:d9:62:cc:33:36:af:72:
         ba:8d:5a:a5:b0:88:32:76:b0:16:9f:09:44:fc:f0:90:68:85:
         92:57:95:72:6a:64:e6:1a:60:5a:d9:ca:07:aa:a0:db:db:35:
         34:71:e7:02:47:cd:01:c4:c1:66:7f:a9:0f:53:17:f7:76:c0:
         e2:b9:74:12:8e:1d:bf:97:3b:2b:06:23:51:1b:98:7c:da:d8:
         b6:25:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:53 2026 by rpki-client