Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/76482C624D1D11F184B3C654BA833773.roa
File:                     76482C624D1D11F184B3C654BA833773.roa (raw, json)
Hash identifier:          6lj2oNrXjkLAzkWc5123P9ksxaTq6OfdM3N50cMX7M4=
Subject key identifier:   E6:0D:E2:35:DB:0D:C9:62:1D:19:DF:C6:46:D3:CF:F9:91:98:2F:25
Certificate issuer:       /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial:       35B8
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/76482C624D1D11F184B3C654BA833773.roa
Signing time:             Mon 11 May 2026 09:40:36 +0000
ROA not before:           Mon 11 May 2026 09:40:36 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138984
IP address blocks:        203.96.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
                          rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13752 (0x35b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
        Validity
            Not Before: May 11 09:40:36 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a01a414-1213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:d0:68:71:cc:65:93:35:05:fb:41:93:87:
                    16:5c:3e:a8:ce:6d:ed:ad:dc:04:4d:81:4a:ee:2a:
                    a4:f1:f3:50:6d:62:b5:d4:cb:27:47:5c:3b:fb:a0:
                    11:66:32:34:a8:e4:43:26:10:59:eb:7b:35:19:2a:
                    36:c7:3b:f3:75:4b:09:bb:ba:ec:99:a3:10:33:26:
                    04:6d:b7:1b:04:fd:68:5f:6a:08:54:42:e6:e8:a6:
                    da:0b:1d:c4:cc:c0:c1:aa:ba:d1:0b:5a:f3:de:59:
                    4b:c5:15:a1:89:ab:90:9d:d0:2b:c7:7a:c6:7e:40:
                    4a:b6:24:99:82:d5:c1:83:b5:92:75:a0:39:13:3a:
                    ed:f8:bc:71:a6:8f:82:a9:f1:ab:06:dd:09:1a:65:
                    2a:0a:4e:f7:38:c0:d2:45:0c:75:a6:49:f6:19:2a:
                    11:da:94:3e:78:13:a6:3f:b7:d4:c5:8e:3c:14:a3:
                    10:e1:a2:37:49:90:17:ea:1d:85:d7:04:81:97:70:
                    c5:ef:e5:13:c9:a8:49:84:a3:47:04:51:e1:84:07:
                    30:00:ff:ef:89:9b:af:34:6d:17:5b:ec:c8:c6:45:
                    f6:ce:bb:8d:de:16:da:1b:96:7d:20:fb:a1:52:9b:
                    8f:8e:e5:67:d1:75:6a:66:f4:0e:d6:25:70:2b:80:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0D:E2:35:DB:0D:C9:62:1D:19:DF:C6:46:D3:CF:F9:91:98:2F:25
            X509v3 Authority Key Identifier:
                keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/76482C624D1D11F184B3C654BA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.96.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:7f:46:69:65:6d:88:56:76:e9:fa:ef:33:d3:15:06:35:52:
         84:70:f6:ba:2d:2e:12:a4:4f:39:96:35:b0:47:c7:22:c7:f5:
         ff:c9:c9:69:5f:77:7e:49:61:8d:8c:e9:6e:97:5d:74:5a:6d:
         6c:7a:1d:d5:bb:e5:ef:29:9b:64:78:8e:d1:d4:b9:3f:99:c4:
         6a:b5:29:23:be:5a:32:9d:67:8b:4f:fa:2f:71:3f:fe:a6:d1:
         97:ab:7b:7f:b8:39:51:e5:0a:c6:53:7c:31:82:a2:29:46:30:
         2c:1b:36:e4:59:66:9c:48:37:19:46:a8:37:c8:af:10:fb:9d:
         f8:e4:0b:38:f4:2b:a7:9f:90:f4:2c:35:cb:1a:57:e5:5c:bd:
         2d:87:e8:e5:bc:04:ff:47:89:67:6a:33:01:3d:3c:b6:69:0e:
         47:57:eb:e5:e0:bc:64:e3:ad:5e:1f:8d:57:4d:bc:02:4b:1a:
         01:3d:da:46:06:95:c5:83:2d:39:78:4d:d2:90:a3:ca:2a:61:
         8d:75:f0:3b:a4:c6:af:7c:21:7c:39:0f:54:ef:86:5e:cd:2e:
         a8:86:e6:2c:01:1f:3f:81:a8:24:68:ab:74:68:c8:f8:8a:16:
         ef:20:71:3e:99:93:ce:f7:45:78:57:e3:c0:ab:b1:b1:fc:af:
         6e:35:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:33:57 2026 by rpki-client