Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F077B26084A511EAB3356318C4F9AE02.roa
File:                     F077B26084A511EAB3356318C4F9AE02.roa (raw, json)
Hash identifier:          0lTj3Z62B+UOl2Tcd4jgynWb/48jRnJp7dNaZ5I+WjY=
Subject key identifier:   EB:DF:30:3E:F6:C7:A0:44:AC:81:90:A2:A8:FE:11:87:20:7A:CC:3D
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BB1
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F077B26084A511EAB3356318C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:22:51 +0000
ROA not before:           Fri 02 Jan 2026 16:12:53 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132866
IP address blocks:        49.229.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11185 (0x2bb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:12:53 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4920b-95e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:24:0c:38:a3:53:81:37:c3:dc:cf:ea:8a:25:
                    d8:61:df:c4:9e:93:ec:a9:80:6c:25:29:6a:9b:60:
                    b3:14:ea:58:7e:8e:5d:fa:22:36:6b:84:49:76:88:
                    df:36:cd:37:57:79:05:d4:30:c5:b3:0d:78:2a:40:
                    5c:95:79:74:cd:27:72:12:67:9c:4f:1b:78:f7:b4:
                    2e:6b:fe:51:da:13:b4:dc:a5:ae:8a:1a:2a:9f:24:
                    b8:91:65:24:ea:84:02:44:d3:43:ac:12:5e:9e:a0:
                    0e:96:7f:e8:b9:f4:66:23:71:7e:46:40:f9:92:05:
                    dc:3a:77:7f:0c:58:be:df:1e:66:61:b4:9b:9a:e7:
                    6a:9c:55:29:30:db:45:78:eb:74:b3:21:53:e2:06:
                    1f:ec:8d:a7:44:6d:73:17:df:0c:ce:ad:3d:72:dd:
                    78:eb:1a:1e:a4:07:7b:a7:ef:d3:35:18:08:52:8b:
                    e3:a2:bf:90:e5:fe:13:d6:01:2f:53:a8:84:1a:d8:
                    7f:b3:04:77:27:4a:cd:07:c3:9e:60:26:fc:c9:53:
                    42:54:b6:59:d7:6c:ad:fd:a5:04:c8:5c:16:41:64:
                    f7:43:41:94:a8:f0:70:70:aa:ce:6e:e5:b6:4a:6b:
                    71:14:9a:92:99:77:dc:b8:ee:18:66:c3:99:b8:97:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DF:30:3E:F6:C7:A0:44:AC:81:90:A2:A8:FE:11:87:20:7A:CC:3D
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F077B26084A511EAB3356318C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.229.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:dd:74:a9:15:7d:1e:d2:51:03:5b:e4:f6:73:84:d3:c4:67:
         d0:f2:60:05:9f:7b:3d:c0:e5:0c:fc:13:d4:d7:7b:e9:41:24:
         4b:ad:af:c5:ba:26:6b:18:7d:1d:62:ab:4c:bb:f0:ee:84:c8:
         b8:b8:c0:77:0d:9b:52:b8:04:be:1e:4d:49:3f:da:60:67:06:
         5e:73:d6:35:04:3e:a2:05:8d:8f:28:83:e2:61:9a:e6:51:21:
         3f:02:08:5a:e2:ec:03:f7:22:71:e7:74:d3:22:b3:52:92:7c:
         b6:ca:ba:a3:b8:f7:c2:0f:37:8e:83:d9:21:5e:34:b8:92:44:
         2c:62:cd:de:d9:dd:51:a9:82:79:c9:68:ab:0b:fd:fd:43:90:
         df:ff:b9:ad:6c:69:88:c8:74:e7:4a:64:51:44:52:12:94:f8:
         68:26:12:92:7a:bc:39:4f:6e:c4:38:e8:f7:1a:da:f8:b9:63:
         86:c6:bf:2f:6a:01:42:d7:e3:36:7e:b5:36:de:96:2b:a8:1f:
         db:a2:f4:e2:5c:14:ef:a3:d6:2a:25:b2:d8:31:68:fe:62:ee:
         e3:ed:ae:db:94:6d:16:f5:4d:e4:3a:72:3a:92:09:f7:95:d7:
         a9:24:83:b4:e5:35:b0:1a:50:70:d2:8c:42:60:fc:f4:0d:b7:
         22:12:a4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:14:06 2026 by rpki-client