Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/51DB195AACA011E8BA30FF16C4F9AE02.roa
File:                     51DB195AACA011E8BA30FF16C4F9AE02.roa (raw, json)
Hash identifier:          Eb6UizvbKiSswSpr6ZBFwyh776VEliLHzpERT3ICSBc=
Subject key identifier:   7E:A5:E5:24:7A:4F:F8:27:A4:FA:FC:5B:EB:8C:D9:02:F0:56:33:00
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7E1D
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/51DB195AACA011E8BA30FF16C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:06:44 +0000
ROA not before:           Tue 02 Sep 2025 17:36:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24488
IP address blocks:        202.68.73.120/29 maxlen: 29
                          202.68.74.48/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32285 (0x7e1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Sep  2 17:36:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48034-52ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:34:fc:db:48:6e:9c:89:37:8b:5b:14:9d:
                    c2:e7:5a:98:8d:9c:02:70:67:cb:29:fb:fc:80:e2:
                    13:13:9b:99:42:81:73:8e:39:1e:ca:77:b8:d0:91:
                    43:81:c3:ec:a2:7d:4a:d5:51:85:44:31:52:64:7c:
                    c6:31:dc:3e:a1:ab:4b:a9:91:5a:61:5f:71:40:69:
                    b6:c5:04:13:09:f4:51:3c:3a:df:f0:eb:00:bd:45:
                    80:13:cf:7b:91:cb:af:15:4b:b3:8b:a7:6e:53:29:
                    7c:87:25:2c:2d:3a:55:34:78:f3:a6:52:f9:83:f6:
                    17:66:34:d6:fb:af:86:c5:82:26:0f:d1:3e:87:02:
                    5e:c9:6c:25:1f:f7:75:ca:bd:0b:67:40:4b:68:93:
                    6c:12:7c:68:7b:b4:74:a6:67:ac:fc:54:ce:30:f8:
                    e0:ce:62:50:6e:d9:1e:fe:05:bc:ca:e0:0d:7d:f5:
                    e9:77:fa:05:3d:cb:f1:1f:3f:59:4d:36:7a:e6:b4:
                    d5:6b:f8:82:02:83:57:c7:83:f9:ae:68:40:66:84:
                    95:e7:28:de:de:89:b8:eb:74:de:2b:aa:ab:ec:45:
                    11:68:1a:49:36:88:d8:97:de:63:63:56:24:82:de:
                    bf:69:63:eb:64:82:cf:95:e1:29:dd:43:03:83:a4:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A5:E5:24:7A:4F:F8:27:A4:FA:FC:5B:EB:8C:D9:02:F0:56:33:00
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/51DB195AACA011E8BA30FF16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.68.73.120/29
                  202.68.74.48/29

    Signature Algorithm: sha256WithRSAEncryption
         ba:84:0d:68:ce:7d:45:60:de:af:c9:8e:cd:4c:8b:ee:00:41:
         f2:f8:d0:70:7c:ed:b3:f2:8f:7c:a5:9f:3b:1b:de:bb:ff:19:
         2a:3d:43:33:ea:88:12:ab:e6:34:fa:73:6c:4a:6e:d9:f3:1d:
         9b:14:92:8b:bd:e8:9b:06:e2:3f:f7:27:27:ff:7c:8f:24:ca:
         49:a3:fd:57:6d:c4:ac:35:71:31:d2:0d:54:8f:d8:96:0f:8d:
         ec:16:2b:ba:dc:04:14:77:dd:f0:20:aa:d6:97:62:7b:ab:90:
         3f:c8:6b:8a:89:e6:8a:86:ee:9a:70:85:72:69:9e:57:61:9c:
         80:54:b1:a9:af:b5:fd:84:68:85:c6:c3:ee:6c:7d:ad:30:db:
         64:31:f9:93:b0:f2:4f:13:d2:6a:66:34:fe:01:15:ad:2a:38:
         b5:47:41:55:00:5f:9e:b8:9b:df:02:ed:ca:d1:41:1c:59:16:
         7c:17:43:8c:db:10:ee:6b:04:0c:a5:25:20:23:0e:8f:a5:19:
         86:92:d0:23:10:9e:49:d6:6c:71:b5:ab:8d:1f:61:54:35:7c:
         64:7c:b6:e9:e0:7c:9d:ec:e3:16:ab:a6:66:63:b0:e0:05:49:
         90:3e:2c:ce:79:bc:2e:34:15:f9:26:7f:e3:47:ca:4c:52:88:
         1b:6a:78:bb
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICfh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1
Nzg5MjExMDAwHhcNMjUwOTAyMTczNjIxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODAzNC01MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/E0/NtIbpyJN4tbFJ3C51qYjZwCcGfLKfv8gOITE5uZQoFzjjkeyne40JFD
gcPson1K1VGFRDFSZHzGMdw+oatLqZFaYV9xQGm2xQQTCfRRPDrf8OsAvUWAE897
kcuvFUuzi6duUyl8hyUsLTpVNHjzplL5g/YXZjTW+6+GxYImD9E+hwJeyWwlH/d1
yr0LZ0BLaJNsEnxoe7R0pmes/FTOMPjgzmJQbtke/gW8yuANffXpd/oFPcvxHz9Z
TTZ65rTVa/iCAoNXx4P5rmhAZoSV5yje3om463TeK6qr7EURaBpJNojYl95jY1Yk
gt6/aWPrZILPleEp3UMDg6RWYQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFH6l5SR6
T/gnpPr8W+uM2QLwVjMAMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD
OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzkwMEQvRkNEQ0QzQTBBQzlEMTFFODkyQ0RBRDBEQzRGOUFFMDIvNTFEQjE5NUFB
Q0EwMTFFOEJBMzBGRjE2QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOAwUDykRJeAMFA8pESjAwDQYJKoZIhvcNAQELBQADggEBALqEDWjOfUVg
3q/Jjs1Mi+4AQfL40HB87bPyj3ylnzsb3rv/GSo9QzPqiBKr5jT6c2xKbtnzHZsU
kou96JsG4j/3Jyf/fI8kykmj/VdtxKw1cTHSDVSP2JYPjewWK7rcBBR33fAgqtaX
YnurkD/Ia4qJ5oqG7ppwhXJpnldhnIBUsamvtf2EaIXGw+5sfa0w22Qx+ZOw8k8T
0mpmNP4BFa0qOLVHQVUAX564m98C7crRQRxZFnwXQ4zbEO5rBAylJSAjDo+lGYaS
0CMQnknWbHG1q40fYVQ1fGR8tungfJ3s4xarpmZjsOAFSZA+LM55vC40Ffkmf+NH
ykxSiBtqeLs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:40 2026 by rpki-client