Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/1991E726C5ED11F18287A0703C11F970.roa
File:                     1991E726C5ED11F18287A0703C11F970.roa (raw, json)
Hash identifier:          Ml5KUcdrwB9W2rrYUH7fvKZ3Ju0oYV+L+QFLRRAxHQ4=
Subject key identifier:   EC:1A:EB:E0:85:9B:DD:81:41:32:D3:E6:6A:34:93:84:EC:88:DE:C9
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       369E
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/1991E726C5ED11F18287A0703C11F970.roa
Signing time:             Mon 12 Oct 2026 03:29:15 +0000
ROA not before:           Mon 12 Oct 2026 03:29:15 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     45758
IP address blocks:        182.50.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 14:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13982 (0x369e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Oct 12 03:29:15 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6acc540b-6807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:08:0d:20:e6:a1:9a:81:d0:db:7c:9d:0c:
                    e2:89:1b:d2:40:71:89:d5:b1:ff:23:7b:2c:a3:fb:
                    3d:95:16:00:40:2f:bc:7d:8d:0b:01:84:dd:7d:9c:
                    4e:a3:7a:c6:83:58:eb:ae:80:08:89:d8:16:93:3a:
                    d8:1f:96:22:b9:94:04:56:cb:9e:9f:96:0b:13:87:
                    04:4b:b7:28:d2:dc:5e:22:11:20:cc:0f:d3:f9:37:
                    40:06:71:61:d9:7b:7a:ff:33:d2:26:13:0a:bb:17:
                    67:7f:a5:4c:de:b5:1b:44:38:93:09:2f:06:42:e6:
                    e4:6b:ac:4c:f3:b2:2e:ca:3e:35:38:ca:e8:95:8d:
                    33:bc:5b:b7:65:ca:aa:2d:1e:c2:4c:14:a3:b0:e3:
                    1b:b5:f0:09:6e:fb:e9:d0:2f:2b:64:e7:80:79:8c:
                    70:f9:d3:37:7d:01:3f:a6:c4:9d:d7:ff:5a:ef:5b:
                    8c:ac:05:db:73:d0:b0:99:ca:fc:95:c1:87:69:2c:
                    b6:7a:c7:c4:e6:59:81:dc:c3:8b:9c:e0:46:c4:f9:
                    76:fc:d7:9d:58:70:24:33:b0:4c:58:5d:4a:b2:84:
                    31:b9:63:95:04:e2:9a:7d:bc:04:90:5e:6d:92:e4:
                    f9:61:de:9e:b3:77:66:e4:15:06:33:73:9c:47:24:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1A:EB:E0:85:9B:DD:81:41:32:D3:E6:6A:34:93:84:EC:88:DE:C9
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/1991E726C5ED11F18287A0703C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:01:ec:6c:bf:12:23:b5:ad:17:9d:a2:58:47:b7:5c:46:
         ac:de:e0:0e:3d:d7:7a:36:89:c6:3b:57:ad:6b:9e:d8:ca:eb:
         46:67:8d:06:68:a6:13:92:b6:19:16:50:6f:71:01:2e:70:82:
         38:83:d6:7a:ff:25:8c:35:66:93:fb:7c:42:62:b0:b5:28:c3:
         5e:67:a4:95:2d:9c:58:b0:1d:38:b9:8f:c0:4c:12:d8:f3:aa:
         b7:c6:8b:77:db:c6:9b:24:13:d8:ee:12:1f:01:94:2e:0b:4b:
         12:dd:2e:6b:13:5c:7b:26:a4:91:e1:f9:a9:cb:72:92:b0:96:
         66:19:43:71:e6:af:3e:b3:b4:13:d5:ba:90:07:81:66:24:fb:
         ca:da:b7:fb:6c:76:47:11:2f:34:1e:d0:c9:cc:33:6a:de:64:
         50:8e:5e:fb:27:8f:fc:0d:70:08:7d:2d:46:93:1a:ce:8d:0d:
         ce:b9:e7:e6:ad:bd:81:88:e2:d6:95:00:2a:e3:f6:58:ff:43:
         53:12:cc:53:b3:7b:e2:5e:35:91:1e:99:e8:ad:34:0b:a5:61:
         8b:7d:d8:1e:84:0f:53:63:aa:6a:fd:a8:23:7f:5f:db:42:5d:
         ae:93:70:f3:a4:f2:2e:52:c5:cc:a7:8c:a1:1d:90:9d:b3:34:
         e6:90:01:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:51 2026 by rpki-client