Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/E4653316C87211E9ADADA185C4F9AE02.roa
File:                     E4653316C87211E9ADADA185C4F9AE02.roa (raw, json)
Hash identifier:          HF4nucogvlWev/6+Vaa0aM/i/xbw1FYeTT4JnV0mPb8=
Subject key identifier:   70:BC:E5:05:8E:B5:C5:9F:D1:CA:C7:48:71:85:BF:C5:77:2F:57:70
Certificate issuer:       /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Certificate serial:       0E37
Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/E4653316C87211E9ADADA185C4F9AE02.roa
Signing time:             Wed 20 May 2026 18:21:21 +0000
ROA not before:           Wed 20 May 2026 18:21:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     17733
IP address blocks:        202.161.32.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
                          rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3639 (0xe37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
        Validity
            Not Before: May 20 18:21:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a0dfba1-aad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:7b:ad:c6:31:be:61:e6:55:89:80:54:a0:
                    9e:54:ba:48:00:13:c1:55:b8:04:1a:05:ef:fb:81:
                    28:0e:fd:23:f5:dc:fe:56:ff:29:f3:87:36:d2:31:
                    be:d6:dd:56:43:9e:8c:12:6d:3e:8f:53:96:ce:23:
                    7d:50:69:dc:75:15:9b:9f:93:0a:ab:c4:6f:56:4b:
                    a8:1b:52:79:ae:e7:92:61:73:1a:e8:89:74:a1:1f:
                    c4:e0:23:24:02:43:56:74:7e:d8:da:b1:b6:02:63:
                    b8:cd:2f:c9:e2:a5:2c:9b:f5:c7:f1:d0:3e:d5:49:
                    49:82:46:60:40:4d:ab:25:d3:b4:04:64:1b:b4:39:
                    8e:2a:db:27:f7:16:30:8d:fd:55:fe:91:8f:62:dc:
                    7c:98:b8:8f:8a:8e:d7:1e:61:80:82:92:47:07:6d:
                    74:28:27:cf:13:f4:99:57:22:2c:87:ec:a7:c7:e2:
                    28:74:78:34:9e:20:79:f1:a7:0b:f9:17:03:0c:d7:
                    7e:28:1a:4e:ef:73:5e:e1:03:2e:d6:64:88:59:ba:
                    28:ea:9a:f5:d9:2c:8d:39:7c:05:24:a0:86:6b:3e:
                    e5:63:d3:b5:e4:59:d0:8a:af:2e:0d:46:f0:73:23:
                    5a:96:95:8d:d6:37:aa:71:91:61:ff:be:d7:b9:15:
                    fa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BC:E5:05:8E:B5:C5:9F:D1:CA:C7:48:71:85:BF:C5:77:2F:57:70
            X509v3 Authority Key Identifier:
                keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/E4653316C87211E9ADADA185C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.161.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:c9:3b:53:02:dc:fd:59:c0:a5:f2:02:6c:60:20:7a:6b:3c:
         c9:94:d0:34:ff:9b:ff:a4:ae:90:f8:e9:c1:f2:a3:06:0d:14:
         39:97:38:78:82:db:22:3c:87:14:5e:58:5c:f4:92:c1:e3:e1:
         73:0b:2c:c2:01:1a:17:ca:38:05:15:1a:a9:10:e1:ba:66:05:
         0b:8e:99:ba:7d:43:ff:b0:9c:9a:c0:2e:2b:66:62:b1:9b:19:
         ee:17:c9:35:49:b0:5e:f2:dc:c2:15:41:91:9b:0c:c0:fd:9e:
         ad:df:0d:99:3a:53:88:cb:f0:ad:df:a7:7c:f6:ba:8b:f2:48:
         b4:8c:2b:94:3f:47:59:cc:fa:e0:0b:cb:0b:e6:ba:13:fa:bd:
         53:19:91:40:3f:0d:2d:49:1d:2b:62:69:e8:28:1d:97:34:4b:
         23:84:e2:f2:ed:00:6e:5f:17:08:76:e5:67:98:08:74:5e:75:
         71:93:10:c1:2f:be:33:28:9a:5b:97:c4:40:17:1f:b4:c8:7a:
         c6:0d:45:7c:6b:d1:8e:d5:9b:1a:19:48:ae:b2:6c:a3:0d:bf:
         9b:82:52:9e:8c:c1:c5:41:df:d4:c6:00:8e:a1:c9:c4:c2:5c:
         3c:94:e6:d1:31:d1:5d:b5:87:f9:2b:1e:44:e7:90:08:a9:ea:
         27:12:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:37:15 2026 by rpki-client