Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/B74BF7F018BF11EFB54AFB20C4F9AE02.roa
File:                     B74BF7F018BF11EFB54AFB20C4F9AE02.roa (raw, json)
Hash identifier:          PmHnCW9wuHVesyB6pjwdM0nSHd68dr8hBmAABYCg/4o=
Subject key identifier:   71:E3:A7:43:D1:52:AF:EC:8D:4B:6D:0C:BD:59:D7:F4:05:84:E3:1D
Certificate issuer:       /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
Certificate serial:       0144
Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/B74BF7F018BF11EFB54AFB20C4F9AE02.roa
Signing time:             Thu 29 Jan 2026 04:23:39 +0000
ROA not before:           Thu 29 Jan 2026 04:23:39 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152175
IP address blocks:        36.50.98.0/23 maxlen: 24
                          203.29.114.0/23 maxlen: 24
                          2401:5a60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl
                          rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
        Validity
            Not Before: Jan 29 04:23:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697ae0cb-e3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:69:09:e4:ec:48:7e:7a:e7:93:a8:12:a1:
                    9e:05:b8:f6:51:43:50:0b:6b:59:04:78:c6:9a:e1:
                    1e:36:69:63:d2:30:d2:80:68:e7:d7:17:6a:09:92:
                    85:64:65:76:81:a7:8c:66:f4:51:b5:f9:db:e6:2d:
                    bf:fc:c3:88:ea:dc:51:d0:ac:2e:20:cf:02:1e:eb:
                    d8:d9:81:9d:ad:de:c4:cf:f3:0e:da:a2:ba:1e:80:
                    f4:4b:71:ce:a3:29:6c:36:01:6b:e1:d5:c1:7e:e1:
                    e9:e8:92:cb:5e:ac:d1:cc:ea:d9:9a:33:e0:ba:a9:
                    9e:a8:cd:0c:52:53:2a:51:dc:49:df:da:0e:cf:c5:
                    6a:36:09:3f:df:83:7e:3e:4a:73:37:17:95:43:ad:
                    bd:8f:68:92:ae:50:ce:8b:29:ce:4e:e8:b6:fc:3e:
                    12:4f:f6:6c:99:08:a0:c0:9c:66:7f:bd:29:83:94:
                    d3:57:60:e9:28:b5:6a:a4:a5:42:6f:11:a6:a8:e6:
                    a9:d8:a8:1c:1b:91:79:76:bf:71:ff:8b:fe:1b:05:
                    a8:34:02:7d:6a:51:d4:d5:71:cc:cc:61:56:bf:28:
                    e5:ee:dc:66:5d:7d:1f:cf:ab:ae:5a:be:62:e9:b1:
                    4f:89:ec:42:f3:68:d1:87:54:68:62:1e:b1:17:8f:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E3:A7:43:D1:52:AF:EC:8D:4B:6D:0C:BD:59:D7:F4:05:84:E3:1D
            X509v3 Authority Key Identifier:
                keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/B74BF7F018BF11EFB54AFB20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.98.0/23
                  203.29.114.0/23
                IPv6:
                  2401:5a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:67:c9:9f:cc:bc:79:00:6a:5d:13:3c:b3:e2:5f:6e:f5:e4:
         ca:89:46:a3:77:6a:eb:03:86:68:7a:30:51:31:98:a7:7b:fa:
         f6:db:b9:a7:31:c7:28:aa:ae:e4:73:2c:42:58:94:8d:5c:b2:
         7f:33:ac:cd:a4:66:44:98:c1:ee:75:a8:56:be:19:68:9a:5f:
         04:8b:2e:e9:77:b5:78:40:6a:ef:94:14:dc:82:75:59:42:d5:
         73:c4:d8:75:32:c1:d7:6f:65:9e:b4:8e:d2:73:5f:a9:a3:b8:
         d9:63:ea:ab:e2:5f:65:d6:aa:e3:02:4f:f8:9c:40:1a:34:ed:
         5b:66:bb:b2:4c:b3:82:55:0e:9b:85:19:a1:94:1d:7f:93:35:
         ac:2e:47:2f:44:2d:02:68:3e:ec:7b:f4:09:57:74:7f:09:71:
         06:8e:66:3f:46:d5:ae:14:22:ad:ca:09:49:ca:36:f1:3f:ce:
         0d:1f:22:2e:90:e6:3f:e6:5d:9a:1f:fb:80:bc:9a:66:15:ed:
         e9:de:53:93:db:ef:4a:81:40:41:00:68:a1:7a:5e:86:a2:87:
         76:fa:46:fc:2e:87:62:ff:69:ff:0d:c4:c1:55:d1:c1:27:dd:
         29:8c:72:ca:7b:0d:74:c1:0e:ab:a4:b8:4c:80:d5:37:45:90:
         1c:35:d6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:50:32 2026 by rpki-client