Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/4F9ACB7461F511F0A6467D40C4F9AE02.roa
File:                     4F9ACB7461F511F0A6467D40C4F9AE02.roa (raw, json)
Hash identifier:          Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=
Subject key identifier:   1E:25:B9:C5:EC:3F:D7:F0:D7:B3:DD:13:AF:AA:62:40:F6:A1:AC:E9
Certificate issuer:       /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial:       02DD
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/4F9ACB7461F511F0A6467D40C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:01:24 +0000
ROA not before:           Thu 01 Jan 2026 01:20:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        164.52.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 01:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
        Validity
            Not Before: Jan  1 01:20:35 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47ef4-8998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:40:d1:e8:03:bc:fb:92:7f:d3:71:56:46:
                    c0:b4:0f:96:39:5a:57:b4:b3:6d:d8:90:51:61:75:
                    b1:29:56:a8:3b:12:57:36:23:6e:67:1d:2f:3d:05:
                    9f:0b:f6:fa:75:65:9c:ac:e6:c9:83:4b:12:db:80:
                    51:b2:0a:e3:ed:72:16:1d:dd:98:ad:c4:f4:f2:a6:
                    ea:0a:3e:af:a8:62:d9:20:0b:88:63:c6:01:03:ae:
                    11:7f:e6:45:43:3e:54:54:3d:1e:d4:27:64:0c:83:
                    0d:67:78:ec:75:bf:b7:3f:91:a4:4c:85:9a:2e:99:
                    c4:1a:34:f4:02:91:d5:1e:f8:57:57:eb:41:bd:b9:
                    6c:bc:7a:d1:61:72:be:7b:73:9c:2c:3f:e5:ac:0c:
                    bd:58:c2:43:20:49:9e:05:8c:75:e3:04:65:95:e2:
                    b5:3f:7b:fb:13:5e:62:e6:52:00:ef:8b:ac:96:4c:
                    7a:8a:62:8c:29:32:56:72:b3:20:f1:3f:6a:12:37:
                    ed:22:82:c4:a7:4d:bf:5c:de:ef:59:54:4e:b6:53:
                    66:8e:ea:6c:d3:0f:fa:8c:0d:71:42:2c:d1:dd:59:
                    4a:f2:ab:00:0f:36:b8:e5:48:19:fa:24:fb:23:4d:
                    cc:01:1e:1f:fa:1a:50:4b:25:ca:1b:b3:14:f0:be:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:25:B9:C5:EC:3F:D7:F0:D7:B3:DD:13:AF:AA:62:40:F6:A1:AC:E9
            X509v3 Authority Key Identifier:
                keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/4F9ACB7461F511F0A6467D40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.52.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:15:f0:bf:fa:9a:e9:73:87:46:cb:f1:0a:f0:74:d6:73:1b:
         7f:80:cf:ba:28:9e:b1:12:4e:4c:25:93:7b:8d:4a:c7:49:5e:
         27:1a:dd:b3:09:4b:a4:a2:5c:4a:ff:a1:f0:8f:dd:51:c4:24:
         43:3f:5d:5d:f6:df:70:22:b3:c2:47:a6:ed:fa:93:96:0e:7a:
         8c:10:41:d7:ac:af:76:71:c3:59:10:68:60:8a:89:0e:3e:32:
         a0:c9:e5:28:21:e0:aa:88:60:cf:b3:10:e5:4a:76:98:42:79:
         ff:0c:4f:63:4f:67:cd:e7:73:4f:ef:33:22:ca:fe:9e:3c:2d:
         7f:2e:40:72:38:18:d0:f6:17:9a:df:5f:4e:e1:cf:4e:6c:ba:
         48:72:58:3d:bb:61:47:33:db:6f:70:3a:5a:be:5d:88:28:e9:
         b2:55:1d:2a:7b:e4:ea:9b:c4:44:bd:83:14:a4:b1:a2:55:38:
         87:05:d7:f0:99:4c:6c:e7:cd:5c:c1:cf:41:4f:85:87:44:b9:
         4d:46:b9:9c:c6:7c:bc:55:8e:b2:5e:0a:fa:c7:0a:c9:45:ec:
         44:9d:b9:de:b2:79:c8:8d:ee:cd:af:2c:52:4d:c2:24:ea:bc:
         91:33:a9:6b:47:fe:b6:b1:bc:43:3a:52:d8:76:07:3c:bc:ab:
         67:8d:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:26:17 2026 by rpki-client