Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EDA1B0D8A1CE11EDA692F359C4F9AE02.roa
File:                     EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (raw, json)
Hash identifier:          1kSu8z1hzSifiJE3S6lbLqYfJxwXIC8W9/8I944dCzE=
Subject key identifier:   6E:81:15:E8:D2:EE:55:92:EA:AE:A5:B2:1D:DE:AE:62:4D:70:21:47
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       2862
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EDA1B0D8A1CE11EDA692F359C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:57 +0000
ROA not before:           Tue 08 Apr 2025 15:53:36 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     14499
IP address blocks:        122.55.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10338 (0x2862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:36 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a487c1-7304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:e2:49:a5:d2:c6:57:ae:5e:4f:1e:54:b6:
                    3c:86:db:eb:80:05:6b:91:16:8a:1c:01:3b:dd:65:
                    b5:18:12:5c:29:3d:79:77:21:30:70:a9:31:df:68:
                    14:df:1d:00:df:dd:13:bd:ce:74:2c:87:03:dc:36:
                    c1:08:2d:05:3e:19:c1:11:43:65:aa:a9:fa:1b:de:
                    69:5c:8d:ee:17:11:06:56:5d:c3:89:37:5a:c5:f3:
                    ea:c4:cb:d8:19:83:87:ce:5c:41:0d:ed:5f:29:37:
                    8c:03:bc:15:c4:44:f9:3b:bc:49:a3:2d:08:82:7d:
                    2b:5b:07:10:72:05:80:69:97:db:9a:eb:59:17:2c:
                    2e:58:5b:e1:83:02:9c:d8:d3:9f:66:a6:19:b3:8e:
                    75:3c:d0:70:59:95:82:52:88:57:bf:a8:ee:9c:71:
                    fe:98:3b:90:7c:2d:d5:36:c0:13:d3:18:69:95:0e:
                    a6:85:77:24:72:40:62:a5:92:03:13:ad:7e:ea:48:
                    a7:2a:e6:75:61:3e:e7:40:b5:12:63:e1:d7:c5:61:
                    3f:b6:05:43:1e:7a:fd:a1:9b:e6:9e:b2:27:f0:c5:
                    b4:f3:71:ff:0f:c5:47:6f:d3:3b:2b:2a:a6:ab:a5:
                    49:39:2c:7e:55:86:87:7d:49:2a:52:99:40:3f:b8:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:15:E8:D2:EE:55:92:EA:AE:A5:B2:1D:DE:AE:62:4D:70:21:47
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EDA1B0D8A1CE11EDA692F359C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.55.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d7:f6:32:7f:8f:45:75:d2:3a:3e:7a:d0:96:50:0a:45:88:
         9d:3f:9e:0c:7e:3d:c8:12:b7:d7:67:0f:c7:84:2a:1a:f3:e1:
         6a:05:1b:3e:e4:ee:04:ab:04:f6:1c:4e:79:e3:8b:04:07:a6:
         66:79:e1:25:65:bc:89:d3:db:05:c5:92:23:e8:c7:b4:b4:47:
         e7:2b:1b:70:e4:ec:ce:98:65:dd:5f:98:a1:c6:94:50:2f:5b:
         db:27:6d:2a:50:0a:cd:79:d8:f8:1d:25:13:53:e6:08:40:ed:
         c3:ad:b4:8d:ac:5f:fd:60:95:df:db:42:49:cf:0d:8d:55:59:
         1f:71:61:ee:bb:bd:c2:d9:a2:18:58:d4:77:ae:65:71:dc:4f:
         15:c9:b6:89:48:88:c6:5b:e0:3f:ef:97:cf:01:15:54:9e:de:
         8b:03:67:28:68:a3:70:fe:08:89:f4:32:e3:b0:f9:b9:46:1d:
         48:c5:d3:3c:2a:91:71:ac:70:4b:a8:f9:78:08:88:54:35:97:
         af:51:0b:e5:eb:32:c6:fb:14:ac:cf:fe:3f:26:1e:c2:00:bf:
         59:c2:a3:0b:6f:45:21:19:03:bc:b1:33:c6:f3:6e:2e:e4:a1:
         f1:3c:04:79:47:a4:80:c3:3d:54:5a:c0:44:f0:ef:ca:3b:44:
         6c:c3:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:23:08 2026 by rpki-client