Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/1F49DF36691311EF82B0FC62C4F9AE02.roa
File:                     1F49DF36691311EF82B0FC62C4F9AE02.roa (raw, json)
Hash identifier:          AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=
Subject key identifier:   E1:CE:64:13:91:DE:97:88:22:26:6F:8D:15:5F:1A:14:76:93:36:C2
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       0432
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/1F49DF36691311EF82B0FC62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:49:37 +0000
ROA not before:           Tue 02 Dec 2025 23:58:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132821
IP address blocks:        223.27.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1074 (0x432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Dec  2 23:58:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48a41-3f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:9d:9d:0d:0c:d4:09:ab:68:98:93:1e:1d:
                    8a:a1:b1:57:74:50:7b:4f:ef:aa:b9:f4:f9:a0:61:
                    6a:1d:32:f9:b8:6c:bf:00:8c:26:b3:62:a1:89:c7:
                    2f:81:69:d5:da:27:43:24:d6:8f:df:26:cf:4b:56:
                    c1:8f:f1:1a:98:ea:fd:46:99:7a:34:0b:e5:3a:8a:
                    44:3d:3a:f5:35:8a:9c:e4:e8:7e:da:d5:75:fa:68:
                    85:35:24:09:12:20:a0:fa:ac:79:26:df:49:5d:05:
                    6b:20:22:d3:09:f6:8d:1b:64:88:86:f0:6a:93:1d:
                    eb:b0:d8:d1:af:e4:2b:85:47:77:23:e3:52:33:23:
                    28:cc:ed:4e:0b:6e:09:b6:3e:d8:f7:47:fa:7a:3f:
                    6a:b3:a3:bc:d2:ef:38:a0:9f:00:27:70:60:ed:ba:
                    17:d7:d8:4d:f7:5d:f4:a3:ba:8c:11:c6:c4:8a:38:
                    4c:b8:d0:77:48:56:59:74:46:59:69:64:c9:4d:a2:
                    56:ba:a8:37:03:20:4f:c8:b1:65:50:2d:60:3c:84:
                    8f:bd:78:c6:7b:96:1f:51:01:4f:68:53:41:d2:f3:
                    b4:8f:50:d8:af:6e:84:92:c8:9e:a8:28:20:13:41:
                    04:ab:69:ef:29:e2:6b:a3:bb:e6:73:20:4c:0a:50:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CE:64:13:91:DE:97:88:22:26:6F:8D:15:5F:1A:14:76:93:36:C2
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/1F49DF36691311EF82B0FC62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:08:18:c6:42:1d:e0:b3:84:85:f3:1f:38:9e:88:7e:88:fa:
         c6:7c:df:02:b9:5a:22:77:94:1f:8f:58:bd:08:21:c4:39:18:
         29:24:9a:7f:1c:35:b1:fc:f8:e3:30:7d:9c:ce:2c:14:7b:36:
         2e:63:92:0e:93:ec:bc:b9:28:c3:12:ff:42:8e:ba:7b:3f:29:
         72:2a:5a:e9:97:f3:e1:c3:07:a0:d2:80:95:08:87:dc:50:11:
         61:15:74:42:cf:1c:c2:9c:57:b0:68:78:18:5d:32:ce:00:c7:
         e5:57:c2:99:e8:d5:ea:39:2f:98:b4:f3:2d:87:29:b9:f7:41:
         f6:8e:4c:01:9a:c0:44:17:55:ed:3a:9a:a4:c2:7a:f4:29:c6:
         09:10:82:f7:4d:71:0f:a1:bf:30:f8:ee:82:a0:d9:58:21:f0:
         ae:8a:e7:b3:05:a0:d6:40:a2:ef:60:46:ba:32:a8:c5:a5:ce:
         16:1b:74:d5:c1:d1:29:9e:76:e3:c5:cf:47:cf:39:80:ed:7e:
         3b:ee:01:a3:c7:b4:34:8d:06:50:03:d9:8b:45:10:e0:85:05:
         34:dc:a3:c3:3e:3a:ac:2e:18:ee:fd:69:d0:bf:4f:43:3b:5f:
         a6:56:7c:ed:e2:9f:fe:0b:b5:fb:6a:03:b9:ff:0c:ec:01:92:
         7f:cb:9a:48
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjUxMjAyMjM1ODUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGE0MS0zZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJKdnQ0M1AmraJiTHh2KobFXdFB7T++qufT5oGFqHTL5uGy/AIwms2Khiccv
gWnV2idDJNaP3ybPS1bBj/EamOr9Rpl6NAvlOopEPTr1NYqc5Oh+2tV1+miFNSQJ
EiCg+qx5Jt9JXQVrICLTCfaNG2SIhvBqkx3rsNjRr+QrhUd3I+NSMyMozO1OC24J
tj7Y90f6ej9qs6O80u84oJ8AJ3Bg7boX19hN9130o7qMEcbEijhMuNB3SFZZdEZZ
aWTJTaJWuqg3AyBPyLFlUC1gPISPvXjGe5YfUQFPaFNB0vO0j1DYr26EksieqCgg
E0EEq2nvKeJro7vmcyBMClCl5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOHOZBOR
3peIIiZvjRVfGhR2kzbCMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMUY0OURGMzY2
OTEzMTFFRjgyQjBGQzYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA3xvjMA0GCSqGSIb3DQEBCwUAA4IBAQBACBjGQh3gs4SF8x84noh+
iPrGfN8CuVoid5Qfj1i9CCHEORgpJJp/HDWx/PjjMH2cziwUezYuY5IOk+y8uSjD
Ev9Cjrp7PylyKlrpl/Phwweg0oCVCIfcUBFhFXRCzxzCnFewaHgYXTLOAMflV8KZ
6NXqOS+YtPMthym590H2jkwBmsBEF1XtOpqkwnr0KcYJEIL3TXEPob8w+O6CoNlY
IfCuiuezBaDWQKLvYEa6MqjFpc4WG3TVwdEpnnbjxc9HzzmA7X477gGjx7Q0jQZQ
A9mLRRDghQU03KPDPjqsLhju/WnQv09DO1+mVnzt4p/+C7X7agO5/wzsAZJ/y5pI
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:10 2026 by rpki-client