Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/41339BFA973D11F184508C1C3711F970.roa
File:                     41339BFA973D11F184508C1C3711F970.roa (raw, json)
Hash identifier:          ErCTpmbM2VNJ1hvCRE7AmqqAa2l2NDuA3762i8vtV40=
Subject key identifier:   9F:10:6B:39:FA:0A:EF:ED:04:7D:6A:C4:DC:5D:48:53:4F:0F:35:2A
Certificate issuer:       /CN=A91443EA/serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC
Certificate serial:       02
Authority key identifier: 17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/41339BFA973D11F184508C1C3711F970.roa
Signing time:             Thu 13 Aug 2026 17:34:37 +0000
ROA not before:           Thu 13 Aug 2026 17:34:37 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154831
IP address blocks:        163.52.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl
                          rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443EA, serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC
        Validity
            Not Before: Aug 13 17:34:37 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a7e002d-9a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:09:91:b0:49:27:67:c7:8a:3f:b6:10:b2:
                    7d:96:c6:cc:8f:fc:eb:59:e2:4e:da:83:6d:1f:81:
                    03:8a:68:98:3d:bc:9b:49:ee:df:79:00:58:52:62:
                    e6:9a:b7:17:d3:28:97:24:a2:2d:1a:72:43:61:05:
                    ca:ed:77:70:f7:27:30:d1:46:8e:d6:60:ef:cf:dd:
                    16:87:ca:6b:14:ef:39:3d:e2:c7:53:7e:8e:36:6c:
                    6d:ea:06:93:74:53:dc:7f:7d:d5:64:62:6c:69:63:
                    21:4f:a6:36:8c:30:83:e9:d3:68:94:cc:83:c5:3d:
                    df:f6:08:1c:29:4e:c3:ea:1f:86:b6:40:b3:00:36:
                    b1:e5:ac:85:57:da:8f:45:ef:b6:33:14:30:a7:20:
                    ec:43:fa:06:8b:da:e6:c5:e8:5c:6f:4c:4b:3a:bb:
                    b3:ea:aa:62:9c:a8:b0:4c:6b:f7:33:e2:fc:4c:92:
                    4a:f1:ea:55:d5:c7:ce:14:34:e4:b6:3a:4c:85:06:
                    bb:12:d9:61:28:5f:03:c0:e1:71:c2:03:91:6e:e5:
                    d0:d5:04:38:95:c9:e9:61:e8:5f:11:28:ec:4b:d4:
                    df:90:69:d7:14:37:45:c7:ad:6f:04:cd:d2:3d:0e:
                    b1:b2:8f:4c:47:19:aa:16:76:f8:20:f1:0c:75:db:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:10:6B:39:FA:0A:EF:ED:04:7D:6A:C4:DC:5D:48:53:4F:0F:35:2A
            X509v3 Authority Key Identifier:
                keyid:17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/41339BFA973D11F184508C1C3711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:ef:71:ac:89:f6:54:4d:dc:b4:ee:bb:a6:d9:74:c2:d8:3f:
         4d:96:5f:cb:79:12:e3:1b:7b:0d:ed:c7:a1:a1:7c:e8:87:08:
         9a:9d:54:e2:35:36:34:64:29:b1:b9:d4:f2:f7:3e:ee:1f:e0:
         5a:da:76:e0:98:12:ce:e1:bc:e9:e4:c6:88:01:e9:f6:12:ea:
         17:04:8f:3e:f1:4c:c8:1b:96:96:a0:65:ed:8d:ab:36:72:02:
         5c:b6:bc:3a:48:61:61:32:4d:81:f7:5f:64:0a:cf:91:b7:9c:
         79:69:4b:b3:2e:81:ff:19:e9:15:e9:e3:99:4d:7b:f6:fe:47:
         05:e3:1c:30:6c:33:a5:f8:f8:72:6c:c9:82:cb:57:44:6f:d6:
         3b:7f:cb:fb:c0:23:3c:fb:c0:d1:77:37:ff:d4:97:92:23:7e:
         b5:20:d4:e1:d9:4f:b7:cf:76:db:d3:df:5b:bc:52:c0:7f:08:
         75:33:84:94:81:65:3c:0a:01:82:26:e0:a6:e9:94:57:5c:b6:
         ee:14:9d:51:40:81:41:f7:a3:79:a8:63:f9:dd:11:3d:f5:de:
         79:5e:2f:8a:2e:6b:d6:01:c4:f4:e0:1b:2e:4e:d5:21:20:e2:
         c2:67:9e:88:40:23:f6:8f:8c:cf:7e:7e:b7:82:9f:f3:63:a3:
         4a:c3:18:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:08 2026 by rpki-client