Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DA504F0E175911EC87322F85C4F9AE02.roa
File:                     DA504F0E175911EC87322F85C4F9AE02.roa (raw, json)
Hash identifier:          fBWTjHPBb9W8ORcqqmeo2+AlFAMHhNrE1/hdXfgEV54=
Subject key identifier:   F4:F5:E2:79:5E:75:E1:94:28:3C:C7:DC:6E:50:37:95:F3:02:86:33
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       0719
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DA504F0E175911EC87322F85C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 23:44:12 +0000
ROA not before:           Wed 02 Sep 2026 23:44:12 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     4804
IP address blocks:        1.44.0.0/21 maxlen: 21
                          1.44.8.0/21 maxlen: 21
                          1.44.16.0/21 maxlen: 21
                          1.44.24.0/21 maxlen: 21
                          1.44.32.0/21 maxlen: 21
                          1.44.40.0/21 maxlen: 21
                          1.44.48.0/21 maxlen: 21
                          1.44.56.0/21 maxlen: 21
                          61.88.184.0/24 maxlen: 24
                          61.88.185.0/24 maxlen: 24
                          61.88.186.0/24 maxlen: 24
                          61.88.190.0/24 maxlen: 24
                          119.225.240.0/21 maxlen: 21
                          119.225.248.0/21 maxlen: 21
                          202.139.72.0/22 maxlen: 22
                          203.2.75.0/24 maxlen: 24
                          203.10.68.0/24 maxlen: 24
                          203.202.52.0/24 maxlen: 24
                          203.202.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Sep  2 23:44:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98b4cc-bc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:3e:35:a6:7c:9c:a7:b0:0b:9a:d3:a4:62:
                    3f:f5:6a:30:37:e1:e1:5e:0b:a3:00:26:ce:e2:c4:
                    51:0c:68:2d:dd:2a:94:a8:68:62:d4:d2:39:21:e0:
                    6a:3c:81:5f:43:4d:39:fe:a6:5c:ae:0b:e6:35:f5:
                    4a:11:45:82:85:c0:aa:c2:8c:74:ca:a1:d3:2d:9d:
                    2e:92:30:f8:cc:2f:bb:2b:e7:ba:46:12:a2:29:6c:
                    ac:0f:32:c6:ad:37:17:ed:b6:1c:83:e8:dc:93:8a:
                    ed:19:ee:c7:3c:b1:0c:66:b8:16:3a:c6:81:07:97:
                    63:e5:c6:a5:6d:e2:b8:49:8e:be:69:ee:b4:27:f5:
                    f0:5f:e3:8a:78:8a:d7:9f:dc:22:c4:6a:80:f8:96:
                    2a:93:a0:d9:e5:fc:9e:8a:31:52:a4:33:5c:19:0e:
                    8c:1b:ed:a8:f9:e8:0f:42:29:a8:7d:81:17:6e:bf:
                    97:b3:53:55:6d:d9:ee:8b:66:c8:41:46:cb:35:5f:
                    75:ec:83:80:e5:f4:3b:27:7c:29:fa:60:7f:22:8a:
                    d5:53:d7:cc:3c:64:03:7c:a3:c0:c0:1c:ea:ab:4c:
                    5b:3a:a4:e6:cd:4f:27:0d:83:63:1c:97:5b:fc:dd:
                    2d:92:35:8d:44:6d:0d:5b:74:0a:f1:23:66:92:98:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F5:E2:79:5E:75:E1:94:28:3C:C7:DC:6E:50:37:95:F3:02:86:33
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DA504F0E175911EC87322F85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.44.0.0/18
                  61.88.184.0-61.88.186.255
                  61.88.190.0/24
                  119.225.240.0/20
                  202.139.72.0/22
                  203.2.75.0/24
                  203.10.68.0/24
                  203.202.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:f2:8d:a8:10:ed:9f:35:ef:24:17:a4:40:4f:98:89:23:
         13:36:ba:b1:8c:7c:3d:ac:c4:f9:11:eb:79:af:88:d1:6f:2d:
         a0:5a:f8:2b:c8:60:29:0b:90:f4:f5:1c:85:79:1d:5c:1d:96:
         ab:a2:43:53:06:50:96:1c:cd:2c:0b:39:d2:9f:46:86:74:53:
         00:45:78:61:3b:4f:7f:ac:76:04:69:33:d7:27:f6:69:22:4f:
         f1:7d:34:c4:2b:33:0e:de:e7:66:2b:f9:e5:dc:24:7b:c4:2c:
         fe:21:c3:19:a2:3a:c0:15:b0:e5:23:10:f8:08:f0:e7:e5:2d:
         e3:0a:5d:88:92:3d:9f:d8:4d:ce:d2:63:08:72:be:ff:a6:ab:
         9d:ea:9b:f0:d4:54:50:de:57:30:ef:94:d7:f0:73:d9:37:b8:
         6c:4b:15:af:bc:55:76:c2:14:a1:b1:be:16:45:a8:4f:53:37:
         6e:62:48:0e:b5:19:a9:52:c1:07:96:18:c3:cb:3b:4a:e3:96:
         09:2b:21:5b:f5:90:c7:09:ac:b9:f4:0f:02:72:a8:be:d3:e5:
         ae:9a:97:15:c6:c6:2e:5c:54:39:f4:c9:47:d7:d8:4e:28:45:
         3d:dc:0d:e3:ec:ba:62:4c:8b:0b:d6:b5:10:73:9e:d2:39:9a:
         77:f7:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 08:52:18 2026 by rpki-client