Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E0030A5899A611F0ABDEA227C4F9AE02.roa
File:                     E0030A5899A611F0ABDEA227C4F9AE02.roa (raw, json)
Hash identifier:          PXkxMqaJfBPQyC3KOpIYJQ1qaqtkl8H55RiiLPCtSEo=
Subject key identifier:   DD:6A:0B:66:CA:9A:7C:15:94:FC:32:EC:CA:1C:24:D8:90:B3:3F:18
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       037D
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E0030A5899A611F0ABDEA227C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:33:49 +0000
ROA not before:           Fri 05 Jun 2026 02:33:49 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        202.134.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 02:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893 (0x37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 02:33:49 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a22358d-6743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:0b:c1:18:e3:9f:57:6d:d1:86:7b:f5:02:
                    12:98:48:c4:0b:30:87:19:a1:e3:3e:f2:93:08:ee:
                    e7:25:ed:de:9a:87:03:85:75:c6:8a:b3:a4:75:3a:
                    9b:88:f5:9f:b5:ee:ec:bb:be:74:b7:40:66:da:33:
                    a5:dc:c1:c1:ba:43:13:75:a0:7a:0f:21:b0:34:39:
                    1b:fb:1b:07:33:e2:01:e9:30:1d:c5:a7:1e:9c:3a:
                    bc:2f:7c:05:d1:d4:1d:8f:b1:85:20:0e:4f:16:e2:
                    b2:77:d5:54:91:be:47:d8:53:0a:c9:35:57:cf:2d:
                    d8:26:44:27:42:45:ed:5f:21:c0:60:55:af:bb:37:
                    ee:29:4e:c5:9a:42:8b:c1:38:97:27:e3:96:ba:94:
                    b8:8c:da:bf:68:f5:1f:68:34:1a:bb:c6:de:98:90:
                    3e:cd:f1:41:25:cc:0d:17:6d:ea:08:2f:85:ba:43:
                    a7:7c:17:98:b1:ef:ce:5d:68:ec:8f:4b:9c:28:28:
                    89:1f:82:dc:89:c3:64:53:85:35:9e:70:6a:87:dd:
                    d8:a5:01:52:41:3a:4e:6b:5f:60:96:ea:34:82:fb:
                    48:62:e4:77:6f:99:b5:37:4a:f0:c1:33:7a:98:4b:
                    9b:da:c9:49:fe:b8:93:7c:51:9d:f7:17:d8:dd:28:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6A:0B:66:CA:9A:7C:15:94:FC:32:EC:CA:1C:24:D8:90:B3:3F:18
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E0030A5899A611F0ABDEA227C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:ab:68:94:c0:7b:b2:4d:4c:5f:59:09:c5:89:15:71:6e:24:
         29:9e:df:2e:70:42:4d:ff:37:46:bf:ea:f2:6a:c8:90:73:45:
         a9:c8:9e:6a:ac:be:da:e6:8a:d7:63:4a:92:94:19:fb:17:3c:
         52:fc:32:af:87:8d:81:a6:68:94:0a:02:f9:79:ee:b7:ec:ec:
         30:fa:ef:06:08:0f:97:9e:af:b6:72:91:2a:fd:a9:85:85:cf:
         be:fd:cc:89:5b:f9:5f:ee:b3:83:84:ae:f7:19:34:08:1d:e6:
         07:35:1d:a0:c5:ba:51:09:c3:c3:f8:03:4b:e0:09:bc:7a:d1:
         f2:ed:69:ef:2d:40:be:10:66:34:03:07:bb:bd:53:5a:0a:ff:
         a2:e6:6b:d3:26:ee:05:b0:a2:d2:36:aa:10:09:0b:ce:8e:cd:
         ec:d0:42:fe:a5:14:e9:2d:4e:60:b0:57:da:c2:84:fc:38:06:
         04:e7:fb:c4:f0:cf:49:e0:48:8c:75:af:43:de:5e:e4:56:bd:
         45:3f:d5:b5:91:46:9d:c7:1a:2e:46:dc:78:4d:23:9d:d1:87:
         56:80:f7:a4:2e:25:fe:46:fa:9d:88:86:fa:94:a7:5d:5d:84:
         9f:79:62:a6:7a:b8:6a:4a:10:ce:0f:25:a4:16:e1:b6:17:18:
         25:11:cb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:51:47 2026 by rpki-client