Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EB6B9956690E11EF9396CC48C4F9AE02.roa
File:                     EB6B9956690E11EF9396CC48C4F9AE02.roa (raw, json)
Hash identifier:          Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=
Subject key identifier:   94:5E:28:A7:80:E7:DA:DD:05:08:9F:67:EB:0C:F2:0F:A6:BB:C1:0E
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       0447
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EB6B9956690E11EF9396CC48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:49:55 +0000
ROA not before:           Tue 02 Dec 2025 23:59:11 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     24190
IP address blocks:        119.63.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Dec  2 23:59:11 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48a52-4992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:e2:51:02:2f:7e:af:ed:d1:0f:e1:09:7b:
                    f8:88:fe:1e:4e:ab:bd:70:3b:17:2f:4c:1c:11:24:
                    89:4f:e8:f1:39:97:45:f7:f3:73:80:88:60:21:24:
                    4d:73:70:2e:a5:6d:11:b7:d6:38:82:5f:f1:61:9c:
                    0a:81:f9:2b:72:fd:61:a9:86:a8:64:09:4a:05:ee:
                    5f:57:0d:fb:9c:e3:2a:14:43:d1:ca:7d:9c:48:29:
                    14:19:f4:df:35:9d:bc:6e:28:05:58:09:96:e1:f7:
                    36:14:de:fe:62:66:ef:85:ac:d4:be:04:dd:22:86:
                    62:f6:04:c0:af:b5:17:66:3e:6b:07:12:a5:45:1e:
                    33:2c:4a:72:da:ae:99:c3:12:81:92:96:11:bc:4c:
                    ad:f5:e0:f3:7b:a4:ab:35:05:c8:38:aa:fb:41:01:
                    b5:13:38:49:79:8e:da:6d:d1:b7:68:53:74:25:9a:
                    14:68:6a:0b:90:82:cc:d7:2e:61:c7:df:fd:09:1d:
                    bd:26:89:4f:35:37:92:0e:6d:1a:2f:ad:f5:b8:c9:
                    ce:53:b2:f3:74:92:3d:ad:f1:37:22:9c:cd:31:a2:
                    fa:f0:14:b5:6d:9c:92:23:0e:bb:e5:b6:f2:ea:ab:
                    f2:d9:76:bd:8a:d6:10:f4:d2:0b:65:75:d9:4f:41:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5E:28:A7:80:E7:DA:DD:05:08:9F:67:EB:0C:F2:0F:A6:BB:C1:0E
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EB6B9956690E11EF9396CC48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.63.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:56:71:15:16:c4:cb:7b:5e:ca:e5:1f:6f:bb:3c:f2:35:87:
         13:89:7b:94:06:52:8f:32:65:f6:13:b7:50:0c:94:66:5b:21:
         fa:73:21:45:a3:6f:28:2b:e5:81:2d:f3:79:9d:0d:e6:da:28:
         55:02:4e:2d:29:e2:61:2b:ac:9e:6e:bd:a0:2b:b0:28:9e:00:
         79:4c:98:5a:87:53:78:1d:d7:59:d6:bc:6c:ee:cd:bc:b2:44:
         b5:a4:49:69:a9:82:af:1a:79:1c:ed:1e:ce:02:f1:70:ba:48:
         cc:23:06:9a:fe:7f:91:3d:6f:bc:ea:f2:7b:eb:73:c0:47:62:
         0c:8a:1b:ab:1f:ac:4b:79:b7:90:99:a8:a3:63:59:47:10:e2:
         10:81:de:05:31:db:50:7d:1b:98:c9:90:89:c1:93:dc:15:70:
         7e:74:a1:97:a2:7b:60:3a:1c:b1:25:6c:f4:73:e9:6f:62:a8:
         18:d1:58:32:95:fc:14:54:e0:bf:68:20:6e:ce:98:3c:04:73:
         74:b8:4d:11:87:aa:3e:c4:aa:88:ba:de:e2:28:75:71:21:f6:
         69:a0:14:e6:2c:fd:c5:9d:9e:18:cf:4c:fe:4d:23:79:60:b9:
         70:01:52:56:b2:64:af:fe:d7:56:62:46:e4:63:df:bc:3f:14:
         6f:cf:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:12 2026 by rpki-client