Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
File:                     0099AE56536911EE8594503BC4F9AE02.roa (raw, json)
Hash identifier:          A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=
Subject key identifier:   9C:60:5D:EE:82:C2:43:0E:BB:E4:F8:63:85:F0:89:EC:75:02:2C:D8
Certificate issuer:       /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Certificate serial:       01DC
Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:57:07 +0000
ROA not before:           Fri 09 Jan 2026 03:22:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4768
IP address blocks:        192.107.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
        Validity
            Not Before: Jan  9 03:22:23 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a59733-2a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fe:31:03:73:85:21:d8:39:17:58:88:05:c9:
                    f3:51:78:37:26:bc:9f:57:a7:6f:cc:ed:0c:67:50:
                    75:dd:cd:e2:1d:a0:01:f7:e5:f8:6f:74:df:b8:12:
                    65:57:ce:c2:2c:52:c0:c9:2f:12:d3:c2:f1:8d:86:
                    57:fe:b8:0b:88:22:fa:07:77:fa:fa:64:a4:1a:41:
                    47:dd:02:3d:59:0b:db:83:72:53:6c:d3:78:9b:d3:
                    7a:58:f5:80:49:ff:cf:ce:93:43:18:d9:3f:1b:2c:
                    dd:74:ca:ee:cd:90:69:fb:0d:aa:7a:20:c6:d4:c1:
                    70:60:62:df:37:2e:d3:73:c3:5b:18:60:dd:c0:88:
                    d1:e1:b1:62:3d:6f:b8:6e:6a:f1:29:45:04:f2:b8:
                    6f:88:4c:13:f2:80:5f:45:34:8e:67:bb:9a:5f:79:
                    d2:f6:be:5d:63:a9:71:ef:df:e6:a2:9a:b2:c9:b0:
                    67:29:58:19:58:2c:ba:67:49:75:b1:50:86:84:ab:
                    be:84:47:76:b5:44:3a:e4:09:66:93:95:7a:ae:50:
                    84:43:e3:36:c0:36:d3:da:c2:d8:a8:e2:dc:f6:aa:
                    b4:e8:2c:86:52:7d:a8:88:a9:ac:00:4c:91:f7:ee:
                    d0:17:1a:95:fb:e9:36:60:d9:4b:c2:86:e4:01:bf:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:60:5D:EE:82:C2:43:0E:BB:E4:F8:63:85:F0:89:EC:75:02:2C:D8
            X509v3 Authority Key Identifier:
                keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:01:7e:37:92:fc:66:4c:e0:50:37:f2:a3:06:79:21:05:
         01:8b:aa:8a:e4:1a:50:d4:79:55:23:30:04:3f:69:58:f4:15:
         d8:1d:db:4c:1d:a3:20:0b:ed:b3:93:af:80:a1:4f:54:9d:40:
         b5:36:86:a5:49:34:59:c8:8c:57:2f:93:d5:35:ee:0d:b3:b9:
         42:46:fd:b7:54:48:48:14:cd:79:1a:1b:71:ac:97:1e:6e:e3:
         56:50:48:ad:b2:16:5d:9a:bf:52:d6:af:e5:1e:48:e8:cc:dc:
         72:6b:c7:4f:4c:e6:57:0a:e1:71:3a:0b:e7:14:ad:a5:b9:5e:
         3f:e2:97:d9:6e:d0:a1:78:52:29:ee:df:a7:50:94:4c:7c:20:
         37:ee:cd:a0:f0:ce:89:50:ef:d6:bc:27:fd:72:46:58:98:6e:
         59:8e:db:a0:c1:a7:3f:f5:42:c1:8a:ca:4e:9b:f0:05:c8:9b:
         e0:ce:af:cc:d4:d7:21:e0:bc:27:70:d3:29:23:00:5a:1a:02:
         f4:0f:2b:79:61:cc:5d:7f:4a:ec:e6:16:31:fb:e9:35:6b:01:
         de:9b:26:4f:ce:bc:04:54:61:37:be:70:31:ce:52:92:0d:85:
         05:cd:3c:55:c0:be:48:76:b0:52:71:d3:6b:43:8a:0c:84:f9:
         93:e9:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:06 2026 by rpki-client