Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/E8E194B8A5CC11EC85A86A1FC4F9AE02.roa
File:                     E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (raw, json)
Hash identifier:          bD2C5/DgW70VY50hOjBpLKvWt5B7bnvlv0UfjlxEnfk=
Subject key identifier:   41:1B:D4:CD:4C:84:41:3E:F1:E6:32:E0:F1:FB:A0:11:1C:AF:37:E4
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       043A
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/E8E194B8A5CC11EC85A86A1FC4F9AE02.roa
Signing time:             Sun 19 Apr 2026 00:32:59 +0000
ROA not before:           Sun 19 Apr 2026 00:32:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142005
IP address blocks:        85.113.86.0/23 maxlen: 24
                          193.149.158.0/23 maxlen: 24
                          193.149.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 00:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Apr 19 00:32:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e422bb-6ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:bc:e5:3e:e8:95:bc:e7:e7:0c:77:6f:a7:
                    02:a1:19:8b:bc:3e:59:ba:ae:f3:8b:60:73:26:c9:
                    e4:aa:fe:90:05:3c:36:5d:04:e0:01:c4:21:5d:8a:
                    60:9d:06:41:99:1c:79:68:ff:af:cc:96:74:ba:dc:
                    ae:4b:d1:96:f2:0e:13:6b:5f:36:d3:41:5a:0f:2e:
                    25:1e:a6:f7:65:71:e3:cb:21:5b:a4:3c:bd:0b:cd:
                    47:b8:8b:10:89:7d:9e:fa:19:3d:fc:0b:21:7b:b0:
                    29:5e:7b:b5:74:41:74:f7:74:09:7d:9a:ca:c6:4a:
                    45:80:fc:1f:1f:d2:12:81:79:29:79:6d:c5:96:88:
                    b3:fe:77:11:2d:b5:3b:79:e3:38:50:96:f5:0f:9d:
                    9a:73:43:14:1b:32:b6:1e:dc:40:7f:55:18:de:a5:
                    f8:dc:00:b9:8c:75:59:0f:30:e4:b1:0d:42:14:eb:
                    e6:87:13:6b:0d:4c:55:fa:38:f2:91:73:ae:62:2c:
                    0c:0e:75:68:78:59:f0:fe:40:0e:4d:a1:f1:a1:db:
                    e6:16:39:fa:41:73:05:09:61:9b:98:1b:3b:3b:99:
                    79:89:47:20:de:08:e5:30:7f:b7:97:88:89:9a:b5:
                    71:15:50:f0:08:98:4d:24:92:53:c5:11:a0:ae:52:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:D4:CD:4C:84:41:3E:F1:E6:32:E0:F1:FB:A0:11:1C:AF:37:E4
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/E8E194B8A5CC11EC85A86A1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.86.0/23
                  193.149.158.0/23
                  193.149.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:5c:e4:71:f5:06:87:88:4a:e2:f7:a6:79:88:0b:5b:aa:
         26:1f:c7:aa:78:b0:bb:b8:bd:d5:0f:61:c1:4c:68:5b:eb:b2:
         90:77:fb:86:4b:ad:7f:de:49:93:d2:78:53:af:30:9c:05:10:
         db:51:2b:83:e4:bc:6f:64:d5:30:71:c0:f1:5a:2b:25:2c:95:
         c2:14:45:88:ee:47:98:51:24:d4:6f:b9:d0:16:55:d4:66:8e:
         02:a3:2f:f9:81:78:04:cc:c9:c1:f1:cd:ad:07:9e:3f:25:9c:
         9b:cd:71:d7:58:fc:5c:36:74:a6:c0:30:0d:35:60:c2:0d:43:
         48:67:06:6f:f8:fd:01:a0:2e:68:22:d6:6d:a3:d9:b6:93:9a:
         cc:9c:89:2d:a1:41:74:49:2b:35:e9:97:15:62:d5:cd:d0:cc:
         e3:9f:d3:0e:d1:10:4d:15:99:5c:74:0a:d7:27:4d:2f:e8:d8:
         48:5e:4e:cd:aa:cc:f8:e8:93:20:c6:61:7a:89:b0:a7:a0:13:
         81:1c:3b:b1:0e:b5:5d:39:cc:51:de:5d:a3:02:f0:4c:59:1b:
         d7:f1:be:0d:a8:2f:94:0f:29:56:5b:51:c6:36:11:dc:2c:23:
         1c:8b:fb:28:f6:93:8d:a9:bb:77:df:67:30:83:1d:ca:1c:2b:
         45:48:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:41:57 2026 by rpki-client