Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa
File:                     D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (raw, json)
Hash identifier:          eZJA66PJdMy/+qYF1nUq/tXydh+IHu4vCtbvKU5tlLY=
Subject key identifier:   D5:D4:5C:18:F6:3B:95:DC:38:34:17:5E:13:AB:AE:B5:DC:01:F5:58
Certificate issuer:       /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial:       043B
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa
Signing time:             Fri 19 Jun 2026 01:29:26 +0000
ROA not before:           Fri 19 Jun 2026 01:29:26 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     7545
IP address blocks:        202.12.90.0/24 maxlen: 24
                          203.14.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 01:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
        Validity
            Not Before: Jun 19 01:29:26 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a349b76-73f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:e6:8e:aa:09:ed:55:12:26:e4:32:3b:a3:
                    b0:f9:2c:8b:89:72:35:22:aa:a2:80:c4:28:1a:bb:
                    67:21:01:f5:0c:fd:98:51:e4:49:fd:bb:e6:29:28:
                    4a:7d:c1:58:aa:12:4d:d3:3a:1c:85:a3:c4:16:17:
                    74:f5:69:96:2e:bf:8a:ac:12:c8:d4:2b:56:a7:66:
                    e3:d8:00:fe:ac:94:c7:5b:f4:95:eb:fa:22:7f:e9:
                    fe:a1:61:95:51:df:5e:7c:f0:fc:ca:74:10:00:5c:
                    ca:74:c7:0b:78:c4:ea:e3:77:68:20:19:f8:96:cc:
                    61:9e:2d:23:15:25:b4:b7:88:da:93:e4:cd:cc:2e:
                    50:b6:f4:f3:aa:32:64:e8:79:13:3e:1b:99:8b:93:
                    16:54:22:26:40:48:b7:34:66:c7:a8:1c:dc:15:3d:
                    cd:7d:b8:0c:e6:69:6e:c0:56:ad:b5:21:06:87:b6:
                    24:5f:a6:68:7c:b8:bd:55:33:2f:ad:60:2c:12:fb:
                    69:52:22:a4:14:0e:c1:c1:5b:ca:82:d5:24:51:e8:
                    39:e7:d6:42:11:08:04:64:94:05:b0:a3:70:cd:07:
                    af:b3:75:c6:06:87:f1:0f:b2:a7:41:f0:a4:f9:18:
                    45:27:9a:6c:1e:26:f5:7d:d6:2e:80:86:8f:26:74:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D4:5C:18:F6:3B:95:DC:38:34:17:5E:13:AB:AE:B5:DC:01:F5:58
            X509v3 Authority Key Identifier:
                keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.90.0/24
                  203.14.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:6b:79:b5:64:38:56:c6:fe:59:1e:7d:a2:e2:c4:3a:9b:1d:
         80:87:ea:90:c1:77:25:55:29:06:5b:b5:da:83:6c:ae:3b:fb:
         93:be:ca:99:c3:71:0a:df:f8:9f:0b:c9:09:05:83:34:77:1e:
         bd:cd:70:8a:6a:a8:5a:7f:54:8c:40:02:f3:0a:63:86:87:d6:
         d1:eb:38:46:52:85:b1:3b:ce:91:2a:05:3a:3f:95:29:4f:47:
         37:4b:57:15:1e:68:aa:a1:8c:03:ea:9e:b9:69:f5:25:5e:3e:
         12:bc:eb:25:51:68:74:77:ec:02:55:da:d8:16:79:3e:ad:81:
         d7:d8:87:96:a3:24:c5:bc:5c:5d:50:b3:53:c7:22:77:b1:c4:
         a5:53:8e:1c:3a:6e:85:a7:f5:25:0e:e9:44:3f:c1:48:e5:f3:
         87:b4:17:5a:a7:d1:4e:a5:ec:75:2c:1b:db:17:54:8f:82:38:
         29:ab:fc:59:0b:27:86:e1:3b:35:30:ce:4f:f7:28:dd:4f:da:
         79:3f:be:fb:4d:86:df:18:29:64:f9:a1:80:46:3e:c8:5b:00:
         ea:c1:8b:01:ee:53:a4:b7:cc:d0:25:9a:23:f7:32:be:e9:66:
         f3:00:ce:fc:7e:b5:fd:84:f1:b6:68:97:f0:ba:d4:2e:a4:21:
         dd:35:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:19 2026 by rpki-client