Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa
File:                     62C9C1CEE03111EEBECE581EC4F9AE02.roa (raw, json)
Hash identifier:          S3EQx5yzT1EViiEO5X7LEoaWX/wa+Lut/QebUP/xU5w=
Subject key identifier:   06:02:54:B9:F4:ED:9E:98:16:BC:91:F7:7A:8C:45:9F:0A:FD:1B:84
Certificate issuer:       /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial:       198C
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:15:00 +0000
ROA not before:           Fri 04 Apr 2025 16:45:36 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     147314
IP address blocks:        203.96.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
                          rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6540 (0x198c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
        Validity
            Not Before: Apr  4 16:45:36 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a51cd4-134a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:af:99:2d:ba:63:b6:c3:88:5a:cb:67:6a:
                    39:19:f8:07:6b:1d:ef:1f:ec:46:9b:91:33:e0:cd:
                    07:89:19:a4:62:9f:08:89:a7:6d:55:7a:8a:3d:6d:
                    a2:43:49:f6:a6:3d:30:00:6a:d2:8f:62:9d:3d:60:
                    94:7f:ce:fa:cc:78:7b:b8:bf:7c:72:e8:ad:89:9f:
                    c7:9e:6b:52:a5:7b:51:da:b1:ac:8c:51:4b:2a:3c:
                    55:16:a4:12:a7:8c:f9:c8:1e:0d:ce:37:5e:3d:84:
                    3c:a0:bb:05:d7:a8:61:96:d6:88:b1:84:68:72:c8:
                    10:02:5d:51:94:8f:fc:8d:58:c2:f8:21:db:7b:64:
                    10:42:23:c6:a1:ba:4b:6f:80:14:05:dd:c1:f2:17:
                    87:c2:e2:41:6d:32:5f:e3:92:36:da:82:39:b0:15:
                    61:98:75:10:ea:1d:7d:2d:8f:45:c2:eb:2c:c2:b7:
                    e3:b9:3c:e3:32:48:24:fc:92:1c:23:99:35:be:5b:
                    ba:bc:c8:94:75:8d:7d:62:a9:78:c1:28:70:89:0b:
                    63:15:b0:0b:6e:cb:90:f2:94:91:78:d8:9b:33:89:
                    d0:ec:7f:b7:f0:f5:73:55:07:5c:6f:3a:26:ef:4a:
                    0a:88:fc:89:fe:93:b7:5a:e0:ad:11:5e:83:cf:5a:
                    b8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:02:54:B9:F4:ED:9E:98:16:BC:91:F7:7A:8C:45:9F:0A:FD:1B:84
            X509v3 Authority Key Identifier:
                keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.96.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:1b:b1:f7:0d:cf:65:e7:03:39:4f:a4:dd:e3:6e:52:f7:2b:
         fa:c6:4b:c7:50:f8:60:d3:d7:e1:b4:1a:80:c8:9e:4f:19:f1:
         0c:35:ca:da:9c:37:fc:a2:c4:5f:b3:7e:87:d9:72:95:9f:00:
         d4:13:a8:3f:32:82:50:a5:c1:41:ea:ff:26:a6:c0:98:c1:1d:
         81:1a:6a:38:3e:f4:5c:f0:33:33:7d:29:68:76:3a:ab:63:eb:
         b1:a0:b8:88:cf:ae:c5:9b:4f:85:20:78:27:de:69:c8:e8:57:
         c9:64:59:89:eb:e5:7f:77:cb:d5:4b:60:74:d8:67:17:ca:b8:
         18:b3:9c:15:63:31:6f:93:fb:85:ed:16:b9:d8:35:9a:0e:83:
         a6:06:e3:26:41:59:be:65:95:ca:29:49:88:02:fd:ff:24:bf:
         d1:cc:b0:fa:a3:8d:34:14:27:cc:ae:60:3a:de:84:52:bd:69:
         99:50:d3:c6:f9:5a:35:53:6b:43:c2:60:ca:27:cb:07:7b:d2:
         09:12:52:7d:2f:85:cc:65:23:0b:50:0f:4e:ac:a8:49:d2:5c:
         c4:4b:89:c4:9c:0f:2c:64:31:b2:f0:70:45:75:d8:fc:d0:5b:
         55:7b:fc:1d:fb:5d:80:71:f6:0c:9e:f6:b6:ad:9b:bf:d5:fc:
         bc:6e:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:31:40 2026 by rpki-client