Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/252B08AA394411F18E3B3D83C3833773.roa
File:                     252B08AA394411F18E3B3D83C3833773.roa (raw, json)
Hash identifier:          OnSxIzXoVolQDucHFePW8Iyl7AQJrkNWpcnFIbtiYl0=
Subject key identifier:   39:6D:31:26:F8:C7:E9:CE:CC:90:00:14:30:14:79:9B:85:08:F2:2F
Certificate issuer:       /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial:       10D1
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/252B08AA394411F18E3B3D83C3833773.roa
Signing time:             Thu 16 Apr 2026 03:27:07 +0000
ROA not before:           Thu 16 Apr 2026 03:27:07 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     150436
IP address blocks:        118.26.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
                          rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4305 (0x10d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
        Validity
            Not Before: Apr 16 03:27:07 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e0570b-26a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:c3:97:77:78:03:67:b4:21:b6:da:2f:e3:
                    7b:91:4e:9e:61:2e:5f:67:33:9f:aa:bd:54:a9:3f:
                    ff:e7:7f:6c:d6:9a:9b:94:4d:61:be:39:e3:ff:83:
                    db:3f:47:6d:c7:27:6b:01:2a:f0:6b:5d:36:42:6e:
                    c2:9e:47:3c:b1:ee:e6:97:d6:59:81:ff:6e:cf:04:
                    8e:7b:5a:66:42:2b:c1:40:08:df:c0:13:4f:2b:6b:
                    85:79:6a:bd:dc:ec:f5:27:15:b1:8f:ad:04:d3:af:
                    22:e2:70:36:af:ef:0a:a0:08:4a:4b:aa:3c:74:ea:
                    d4:05:4f:59:c6:65:53:75:64:99:ec:9f:14:0f:2d:
                    36:27:a3:2d:1e:2e:ee:ed:76:a3:cd:fa:ab:df:db:
                    c6:c9:74:9e:e5:ec:f8:88:be:29:ae:ec:40:cc:d4:
                    c4:63:73:85:4a:3e:a0:81:01:20:4a:27:b4:94:e6:
                    60:a2:55:d0:c5:46:6c:d5:9e:c4:23:91:ab:2d:0f:
                    49:94:99:f1:40:df:02:85:3f:f9:58:fb:9e:a7:64:
                    13:d7:e4:8a:f4:74:79:bb:f7:42:35:a7:99:05:ac:
                    74:47:c3:d8:e0:64:c8:f9:8a:9c:84:36:fd:7d:17:
                    0d:fa:80:82:c9:de:64:17:fc:75:08:43:a8:b8:b2:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6D:31:26:F8:C7:E9:CE:CC:90:00:14:30:14:79:9B:85:08:F2:2F
            X509v3 Authority Key Identifier:
                keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/252B08AA394411F18E3B3D83C3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.26.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:03:00:71:1e:b2:4f:84:f0:84:c9:1d:40:1c:ed:5b:2f:5c:
         37:e1:ad:f1:04:9b:ba:30:93:10:7d:a9:5f:e1:77:d5:a0:9b:
         27:a2:6e:ee:a6:f7:bf:88:8b:e4:e3:2f:af:65:ae:2b:3b:17:
         69:6c:62:54:a6:7a:60:e6:38:ee:31:c6:8f:62:ea:ef:ba:1e:
         c1:11:36:cc:58:b9:d0:e0:58:99:26:91:59:a7:a2:1b:32:08:
         c6:e4:35:0b:7d:c2:69:c8:ca:ef:70:a0:cf:3d:13:ee:98:89:
         db:85:e2:91:c4:50:27:8b:68:5e:d1:f9:1d:e2:fe:da:63:d8:
         75:7d:55:e9:44:09:8b:10:83:5a:48:f6:6f:52:cf:07:7f:db:
         51:6d:b0:c6:f0:ad:3d:d6:8b:3b:c5:a1:96:87:ce:44:05:71:
         3a:f0:36:f1:87:ad:fe:e7:1c:9d:27:a0:6a:b0:c3:b5:d6:2f:
         75:70:67:7e:c6:1a:9e:98:3b:ee:0c:bc:aa:73:19:b1:18:2e:
         33:a8:f3:ef:7c:21:61:e6:06:f5:e7:cd:50:ec:78:c2:40:e3:
         79:83:9b:7e:ef:90:c9:0b:6a:af:23:3a:f2:4e:31:7b:81:08:
         d1:db:55:4c:5b:44:50:2b:9e:d6:b5:97:29:4f:71:9b:d7:a1:
         ca:a1:df:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:17 2026 by rpki-client