Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/197265906D4611F1B12173717447A888.roa
File:                     197265906D4611F1B12173717447A888.roa (raw, json)
Hash identifier:          8jLOemqhrCZWF+sxmoyvLGoqN4WLvYF1aJetU9SxMZ0=
Subject key identifier:   97:04:59:F6:77:DA:6B:4C:4D:91:83:DE:6E:A0:D0:A6:28:1C:82:B8
Certificate issuer:       /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial:       01C8
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/197265906D4611F1B12173717447A888.roa
Signing time:             Sun 21 Jun 2026 07:52:07 +0000
ROA not before:           Sun 21 Jun 2026 07:52:07 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     136396
IP address blocks:        202.50.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
                          rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 05:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
        Validity
            Not Before: Jun 21 07:52:07 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a379827-509e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:e0:05:17:9b:db:17:37:0c:13:78:34:c2:
                    8f:68:5c:03:89:a0:f2:4e:e3:e1:ef:9d:bb:b3:50:
                    f4:94:82:1c:74:73:cd:1e:20:ff:a3:91:88:ae:eb:
                    42:86:17:69:e2:e6:48:87:d0:78:c8:94:01:19:02:
                    ad:ae:54:0d:84:17:92:97:25:a6:12:64:7e:c0:54:
                    65:20:0b:bf:79:98:b8:05:73:08:6d:7c:26:a0:67:
                    73:80:2f:fb:6f:d2:60:dd:f4:6d:d1:07:78:df:61:
                    ab:01:c4:2d:e8:3d:a1:6d:e6:90:5d:64:b7:4f:3f:
                    a2:23:5a:04:7d:c5:a0:29:4a:af:3d:8d:0a:69:7c:
                    0b:f6:39:8c:b6:62:fa:9f:ea:ad:24:7e:03:e8:bd:
                    a6:de:81:3d:a0:26:d8:76:89:4b:04:5d:dc:6c:ef:
                    21:ad:ab:83:38:16:00:13:4a:ca:a8:d4:50:7b:28:
                    e3:eb:54:bf:9b:20:7f:59:b0:30:68:46:c0:eb:bf:
                    f9:a5:26:19:65:e7:cd:52:94:59:b5:a0:7c:cd:95:
                    23:f1:ad:32:a6:ff:c5:63:11:25:93:ab:4d:92:ac:
                    5b:e6:e2:b6:e0:14:24:83:a7:42:f2:61:42:a1:8c:
                    16:cc:75:f6:85:52:bf:5a:53:0c:78:29:35:35:f5:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:04:59:F6:77:DA:6B:4C:4D:91:83:DE:6E:A0:D0:A6:28:1C:82:B8
            X509v3 Authority Key Identifier:
                keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/197265906D4611F1B12173717447A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:89:d2:33:f7:4a:c8:8b:57:53:4c:61:ee:cb:62:73:65:9f:
         5f:15:f0:fe:04:2d:b0:6a:91:0e:b1:f6:f5:f0:d1:4a:ca:87:
         36:7f:b8:2f:05:0c:23:ec:dc:88:06:1f:96:f3:22:a5:3e:15:
         d6:8b:ed:d3:f6:06:4b:45:65:af:8a:6e:98:69:61:28:43:ef:
         ca:20:cb:27:d4:78:ce:73:35:64:99:e1:46:19:00:7a:fe:d9:
         3c:a7:ec:5e:94:01:1f:52:4d:11:52:c3:d3:6a:7b:20:7d:0b:
         27:3f:b8:6c:68:33:c6:ce:80:e2:be:e4:9d:dc:3d:fe:ba:75:
         39:b4:28:63:38:96:a8:a8:17:43:c8:24:27:e0:a2:fd:4a:75:
         4d:96:e8:46:ce:4c:3e:71:9e:8b:2b:8d:f8:e8:bb:9a:1c:0a:
         ae:5d:b0:8e:c6:8c:ef:43:9d:17:70:43:ec:df:0b:86:e8:88:
         ab:7f:1b:f3:83:a6:99:92:a3:87:30:26:ac:0a:54:49:1a:86:
         df:bb:12:19:e8:c8:15:96:df:35:f1:9e:72:f8:7f:6e:e8:3e:
         e9:d9:bb:ed:12:a0:6e:6f:a3:d3:f6:e5:b8:d9:41:64:f1:58:
         0a:75:86:ed:54:cf:c0:26:46:51:28:51:a1:9d:77:5f:32:c5:
         73:8c:ea:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 23:38:01 2026 by rpki-client