Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/4CC7C93C00F711F194E0B0C53C6F56BC.roa
File:                     4CC7C93C00F711F194E0B0C53C6F56BC.roa (raw, json)
Hash identifier:          7vAVjvl3vUeCtEH/2NqH9j2x3y9M77GMQ2JCNqdOMHA=
Subject key identifier:   22:1A:BD:E0:84:79:F2:A8:43:9D:2F:E8:F9:10:10:83:40:1F:69:70
Certificate issuer:       /CN=A913E42C/serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537
Certificate serial:       23
Authority key identifier: 0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/4CC7C93C00F711F194E0B0C53C6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:48:00 +0000
ROA not before:           Tue 03 Feb 2026 11:55:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     63969
IP address blocks:        151.158.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl
                          rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E42C, serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537
        Validity
            Not Before: Feb  3 11:55:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d310-654e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:fb:da:55:e5:72:9f:a7:8d:9d:c4:24:d2:
                    80:d6:e9:7e:69:6f:f7:69:f0:4f:08:4f:f1:35:b1:
                    b2:59:97:5b:54:37:a9:49:98:26:c0:06:ba:df:99:
                    cb:bb:41:ea:09:8f:6e:f6:d7:1b:48:3f:55:f6:c8:
                    02:9f:4f:a9:d0:e4:b1:12:a4:af:77:a6:09:0e:5e:
                    09:59:1b:f1:cf:51:70:70:38:fe:42:35:c3:88:bb:
                    34:ac:68:61:e3:4e:a2:25:a0:8e:08:1f:c5:84:03:
                    74:cb:99:e7:cb:21:de:6a:23:a2:b0:f1:e7:9f:28:
                    0b:af:95:f0:d9:ca:10:a9:a8:c0:b1:31:af:b0:4f:
                    51:51:62:e6:d9:cd:35:1d:63:28:5f:df:92:3f:e0:
                    5a:c8:7e:59:42:d8:f9:0f:3b:7b:b2:b7:93:39:3c:
                    38:c8:90:b2:e0:3a:c5:bc:df:fc:51:55:ce:c6:3d:
                    42:9d:a0:2a:44:13:06:e6:a0:03:34:cc:22:bd:ff:
                    b5:0f:14:38:58:6c:fe:21:7e:0b:c8:04:a1:5a:5a:
                    2d:88:7b:13:5b:e0:bf:68:1c:48:a7:43:90:27:f0:
                    74:a1:25:fc:30:84:d3:b4:de:53:6c:25:6e:0c:53:
                    e9:61:91:69:d2:64:0e:08:cc:5f:3c:25:c1:a8:5d:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1A:BD:E0:84:79:F2:A8:43:9D:2F:E8:F9:10:10:83:40:1F:69:70
            X509v3 Authority Key Identifier:
                keyid:0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/4CC7C93C00F711F194E0B0C53C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f5:09:d3:9c:01:38:3f:b1:74:5b:a0:60:92:5a:09:a8:12:
         65:f4:f0:cd:6b:1c:0c:58:22:d9:de:72:a5:4e:11:91:d7:d1:
         6f:38:47:7b:bb:eb:ab:84:5c:9b:02:93:ce:94:81:38:3c:70:
         ea:8f:6b:a5:36:a1:ad:c9:a8:4a:ac:6a:f1:83:60:b6:9e:fd:
         96:cf:f9:10:03:53:c7:42:ab:cd:32:e7:72:81:fe:72:4d:f8:
         5a:b1:89:6c:e7:88:31:ff:02:4e:bb:df:4d:84:e4:d1:f7:f5:
         3d:33:14:db:df:bf:64:f8:ab:14:af:97:0e:be:35:05:5b:4e:
         6c:a3:f5:1a:9a:4a:ad:e1:07:c0:54:44:7c:bb:26:94:6f:0e:
         0d:57:64:c7:38:47:02:57:b6:9c:a7:03:96:57:cb:42:6b:a3:
         de:8c:5b:01:ac:f5:82:10:93:d1:09:fd:b2:6f:5c:d8:95:93:
         47:1c:21:97:78:67:8a:37:1c:a8:ad:17:44:21:51:b6:45:b3:
         55:1d:23:f7:7e:a0:38:2e:50:0e:1a:fc:9d:b1:76:46:ff:f1:
         4f:35:c5:f5:65:e8:fa:8b:c1:d7:40:35:5e:b9:a9:a8:2f:22:
         d9:cb:5e:f3:cf:07:97:c7:cc:18:d3:8b:a4:bf:19:a7:7e:3f:
         9d:76:ae:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:32:25 2026 by rpki-client