Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/749B738AF28F11F095D4F2986B6F56BC.roa
File:                     749B738AF28F11F095D4F2986B6F56BC.roa (raw, json)
Hash identifier:          KEcoT61kbpKYaqHWHrY20ixUYzmALZ1uWpR1U4eKh3Y=
Subject key identifier:   85:40:D8:69:3F:E8:C9:4F:37:1A:C4:63:31:4A:A6:75:48:FB:F1:83
Certificate issuer:       /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial:       0DB9
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/749B738AF28F11F095D4F2986B6F56BC.roa
Signing time:             Sun 01 Mar 2026 16:28:04 +0000
ROA not before:           Fri 16 Jan 2026 03:57:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     17502
IP address blocks:        144.48.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
                          rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3513 (0xdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
        Validity
            Not Before: Jan 16 03:57:20 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a46914-6f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:06:e8:94:fb:03:59:b9:62:cc:3d:92:0c:
                    d2:f4:76:20:82:e3:c1:2e:f7:cd:ca:8d:ce:3e:93:
                    eb:93:43:26:88:72:a0:21:b8:b7:d6:60:1b:77:04:
                    53:62:7b:80:1d:a4:e3:87:71:19:19:74:1a:ef:03:
                    8d:4f:8a:c7:c9:6b:5c:28:b6:91:ac:98:ee:0f:22:
                    35:cd:59:be:cc:cd:ef:b3:8b:62:66:28:08:4b:7b:
                    61:8b:5f:b7:3a:bb:fb:94:54:f1:1c:df:ef:cb:29:
                    56:ec:ab:ef:00:28:f9:5a:a5:75:10:f4:7e:37:0e:
                    32:73:c0:99:35:50:0d:a9:e1:7d:1a:5f:7a:28:3f:
                    39:4a:4c:96:67:fc:83:2a:1e:a0:02:3e:8d:d5:34:
                    d5:d8:6b:8c:11:1c:59:41:2f:ce:01:b2:ad:e4:8a:
                    91:66:f6:f5:83:3e:52:4b:64:8b:af:21:2e:15:48:
                    9e:72:2a:a5:c8:6a:17:8d:d3:d4:13:dc:4f:73:0f:
                    f0:39:e4:61:ef:ad:fd:58:19:a6:2d:97:ea:f9:7a:
                    37:3a:b7:cf:8e:7b:22:96:f8:fc:18:1e:4d:30:c3:
                    81:64:61:36:c7:70:51:da:23:a8:8f:dc:57:3d:9e:
                    c9:76:b5:83:7a:a5:d9:ac:82:f3:20:8a:43:87:ec:
                    96:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:40:D8:69:3F:E8:C9:4F:37:1A:C4:63:31:4A:A6:75:48:FB:F1:83
            X509v3 Authority Key Identifier:
                keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/749B738AF28F11F095D4F2986B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:32:ae:62:96:f8:1c:e9:ee:18:2f:1c:2f:b9:08:7d:ea:
         a8:ca:49:36:7f:b3:d5:8f:e8:90:0b:52:e9:a6:1f:12:8e:63:
         50:15:6a:e2:5d:4f:a6:68:4e:76:2a:dd:ee:e3:70:8b:ad:aa:
         00:9f:0b:b7:69:81:d8:2e:ce:9d:62:d6:41:ca:3b:57:0a:f7:
         88:11:38:a3:27:d5:5d:0a:43:7b:a7:00:1a:9c:94:84:3d:84:
         1f:96:f2:2f:98:a1:d3:f4:9f:8d:25:10:03:74:ab:b9:71:70:
         74:ed:f1:a5:f1:76:cd:ef:75:a7:25:bb:b6:11:fe:bf:1b:0f:
         5a:a0:89:79:69:0e:bc:57:bd:e3:e9:ef:a0:cc:60:24:c0:59:
         ee:7d:cb:93:7f:29:ad:9d:51:d2:e0:c0:12:16:17:10:64:ff:
         3b:24:f5:5d:c6:58:7a:a8:56:a0:39:31:b7:9e:40:9c:58:91:
         7a:5d:d2:52:4c:67:02:f1:21:18:dd:63:10:83:e1:23:0b:49:
         42:91:9f:22:11:b9:67:68:85:a1:0f:f5:eb:d1:43:a0:0c:62:
         35:e1:64:13:45:28:9b:53:0b:57:b8:cd:22:8e:98:3b:de:77:
         d2:b7:12:47:d3:c0:95:90:6b:b7:55:a1:5d:69:5c:c2:c5:dc:
         e1:41:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:59:54 2026 by rpki-client