Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/CDA9BB546E0C11ED8BF41547C4F9AE02.roa
File:                     CDA9BB546E0C11ED8BF41547C4F9AE02.roa (raw, json)
Hash identifier:          iidP4Us9GgMi0GERSJV3IXDzaUrLqtbT5ZMr2dmP2mc=
Subject key identifier:   DE:62:E2:77:6B:FF:E1:38:2F:A3:DC:29:A4:F0:0C:2B:04:EB:DC:72
Certificate issuer:       /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
Certificate serial:       026D
Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/CDA9BB546E0C11ED8BF41547C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:09:20 +0000
ROA not before:           Sat 19 Apr 2025 02:28:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55491
IP address blocks:        146.196.0.0/19 maxlen: 19
                          146.196.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl
                          rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 01:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
        Validity
            Not Before: Apr 19 02:28:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a58c00-5165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d4:1e:ce:0c:c6:96:22:36:a5:00:21:63:53:
                    c3:de:08:fb:78:2b:fd:0e:bc:ed:0e:41:9a:d7:8a:
                    4f:c4:c8:df:26:5e:18:f6:73:3f:4e:b2:f4:f1:d7:
                    fe:7f:e1:98:08:88:c5:88:0a:67:f3:23:e1:e1:b4:
                    8d:f8:68:cd:15:25:35:dd:62:03:48:ab:12:50:f2:
                    31:f0:12:23:12:5e:13:a5:bd:4e:e7:9d:d2:eb:f7:
                    a7:57:e2:2b:f9:bb:c3:4f:12:c3:7d:ad:ec:b2:75:
                    19:bc:7d:6e:22:86:8b:47:b5:dc:79:aa:93:34:d4:
                    c1:6b:96:c1:5b:5f:40:c0:ed:9d:ec:aa:00:38:c0:
                    67:ef:d3:99:85:b4:cc:14:e0:4a:c6:a4:b4:3e:1c:
                    dc:1b:79:a8:24:cd:f9:23:fb:01:79:42:e8:09:ae:
                    23:2d:54:d2:78:7a:38:27:67:45:66:1b:71:ab:ff:
                    9e:84:48:76:0b:be:25:9d:9a:21:99:35:1a:4b:b1:
                    14:c8:87:c8:ab:6a:ad:7a:e7:b3:27:43:80:b1:9e:
                    19:0b:16:43:09:02:f3:e1:a6:24:07:68:38:45:13:
                    e0:df:74:c0:cb:b2:a9:1e:a4:b9:f8:dd:45:55:34:
                    af:ec:be:cf:96:cd:6e:b0:b4:5c:a7:42:1d:6b:a3:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:62:E2:77:6B:FF:E1:38:2F:A3:DC:29:A4:F0:0C:2B:04:EB:DC:72
            X509v3 Authority Key Identifier:
                keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/CDA9BB546E0C11ED8BF41547C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.196.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:b4:33:3d:b5:51:4e:07:e9:a6:d5:cf:cd:8d:1a:c0:70:bd:
         2e:c0:55:8a:63:d4:97:3e:ab:58:7b:54:1c:49:ad:9a:8d:5c:
         69:00:b7:26:b3:2f:c4:2c:f5:e9:31:6b:f8:08:05:c1:50:63:
         49:0b:a5:94:33:4f:c1:04:d9:9b:43:f0:e5:49:8a:18:b2:ec:
         99:84:96:f2:c9:ed:34:57:94:2c:05:d7:85:e1:95:48:42:88:
         7c:1d:63:a5:2d:7c:19:14:84:40:32:a1:f0:b3:80:5e:1d:81:
         36:df:90:04:c9:bd:48:06:86:73:54:51:3b:ba:e7:ed:5b:21:
         bb:17:c4:02:58:18:18:7c:e7:f0:a5:36:48:73:4f:e9:35:b2:
         e4:ec:d7:da:6c:02:17:2f:b4:8f:41:5b:ee:05:2e:b0:cd:41:
         41:7c:2b:2e:9f:b4:f1:07:aa:d1:4d:e5:bd:e9:42:5b:e1:c0:
         44:8e:53:a9:6d:53:38:88:7d:20:6c:0d:2c:6e:da:5f:1e:ac:
         19:07:98:24:8c:5a:40:3f:09:b3:96:0b:24:48:60:7b:1f:a5:
         4a:d4:9a:1b:75:59:01:9c:13:15:1a:1f:54:78:ac:73:39:45:
         63:44:57:67:b0:7a:23:65:c5:72:a6:ac:b4:2f:0d:64:36:88:
         0d:73:ae:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:01 2026 by rpki-client