Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/605B17F8E19611EC8AD57C6CC4F9AE02.roa
File:                     605B17F8E19611EC8AD57C6CC4F9AE02.roa (raw, json)
Hash identifier:          CWmQKY2/QmBRZT94uG0rGyG5reZbZWhYR6NCJaw+5tY=
Subject key identifier:   20:BF:43:A6:DD:31:09:E7:F7:FF:99:A5:48:85:A2:51:0F:9E:C3:1C
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A18
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/605B17F8E19611EC8AD57C6CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:33 +0000
ROA not before:           Wed 27 Aug 2025 01:05:44 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137392
IP address blocks:        203.172.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584 (0xa18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:44 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5884c-75fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:76:41:b8:52:09:12:e9:ba:7c:68:df:9b:
                    f2:7c:2e:e8:c1:e2:ff:de:cb:50:ba:7b:4e:55:0d:
                    55:66:69:ca:f4:9e:77:64:a5:77:ac:d3:86:dc:f3:
                    4a:b9:40:36:15:cf:ad:6f:dd:47:da:1a:f8:23:a1:
                    56:6e:5d:80:ee:55:c8:04:19:ee:61:e7:71:93:d7:
                    31:56:15:86:06:a3:da:1a:96:9f:47:2f:ba:9b:c3:
                    0b:40:bf:66:0a:89:44:d3:59:a2:ef:da:92:b6:5c:
                    46:32:53:c5:ff:ca:0b:dd:d0:03:ee:4f:a1:0e:59:
                    4a:ec:93:21:f6:80:ca:7b:83:3a:d2:46:5c:77:c2:
                    78:c2:a0:d0:22:f0:71:f7:e6:90:05:7a:38:5f:0c:
                    6b:97:74:db:10:68:46:cf:da:42:34:ac:18:c7:a8:
                    85:ed:67:d5:0e:4a:1d:fc:64:3d:08:31:f9:3f:0b:
                    ad:c3:4c:dc:5c:21:e6:b5:c2:7e:bb:c7:cd:92:57:
                    f9:0f:5e:91:9b:73:ff:bb:c6:45:7f:71:51:55:21:
                    27:87:0b:3a:00:6a:a8:4c:67:e8:ec:de:22:dc:ce:
                    ee:94:0f:c7:36:8f:88:22:fd:18:08:64:a1:51:27:
                    93:00:54:d6:6a:ac:28:85:98:84:97:ba:18:1b:88:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BF:43:A6:DD:31:09:E7:F7:FF:99:A5:48:85:A2:51:0F:9E:C3:1C
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/605B17F8E19611EC8AD57C6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.172.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:4c:7e:15:51:4b:4a:95:c0:a2:e9:73:66:7a:e3:40:97:46:
         8a:9b:b4:8c:69:5c:7d:7b:23:e6:1f:2c:d4:0e:48:36:48:0c:
         22:74:e7:db:40:f9:c0:01:c5:87:1d:8d:44:3b:30:e6:e3:3b:
         14:ed:4e:53:96:b6:6a:06:25:b3:b8:83:d3:ba:ea:e4:f5:aa:
         c2:e9:6d:b5:89:cb:e4:37:e6:c5:cf:19:c3:56:38:bb:1c:f8:
         ca:44:50:1f:b2:a0:70:1a:51:d1:7a:b0:9a:7d:29:67:63:f9:
         a9:e8:a6:e5:6c:82:84:a3:23:0e:67:84:52:4e:e8:33:00:21:
         ba:93:36:7b:9e:1e:2a:1e:4c:a1:f4:9a:4a:b9:1b:df:ed:0c:
         49:0e:76:0b:5e:84:01:05:53:e3:8f:26:61:c7:45:d2:b5:f6:
         6b:3f:b4:ce:d7:c2:a7:53:9c:30:8d:30:d8:cd:64:bb:6a:73:
         5d:1d:63:9a:07:04:81:3c:8a:77:c3:47:03:8e:24:d4:00:13:
         3b:9b:3e:b6:e7:ea:69:07:b7:ed:c7:a5:2c:69:7c:73:2e:a5:
         11:63:6a:9c:c5:95:b8:57:2e:0a:96:ea:de:d6:15:a4:7d:d7:
         6a:64:ec:f7:16:81:60:74:bd:df:01:91:7e:2e:9a:96:33:02:
         cc:88:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:19:58 2026 by rpki-client