Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/46186F4EC6E711EDA2FCBA34C4F9AE02.roa
File:                     46186F4EC6E711EDA2FCBA34C4F9AE02.roa (raw, json)
Hash identifier:          SmQp9Kpd5c0fwESfEfVtNVpevN1b+bzjhXmPpwujYgs=
Subject key identifier:   B5:10:B3:9F:BE:BC:DD:AB:4C:49:F6:F9:85:C6:20:A0:79:53:A2:DB
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C0D
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/46186F4EC6E711EDA2FCBA34C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:17 +0000
ROA not before:           Fri 04 Jul 2025 14:50:21 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     10049
IP address blocks:        124.66.178.0/24 maxlen: 24
                          211.45.60.0/24 maxlen: 24
                          211.45.61.0/24 maxlen: 24
                          211.45.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15373 (0x3c0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul  4 14:50:21 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4aef9-2da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:fd:eb:2a:0a:35:12:80:14:a6:af:a9:0d:
                    fc:88:79:e9:13:5e:b7:33:8a:7f:ef:1a:65:6f:f8:
                    2a:32:5a:90:5c:4f:35:36:cc:e3:b1:0b:9f:7a:f9:
                    8e:06:36:9a:22:bb:02:5a:5a:82:45:7e:a4:81:93:
                    f4:1f:76:15:94:cb:80:8f:2e:ca:4a:22:60:e3:47:
                    91:88:dd:a2:21:9e:51:fd:cc:c1:dd:37:d2:77:cc:
                    db:fe:01:0a:71:d1:99:36:2d:3e:6b:ce:14:c3:b7:
                    7a:d7:fc:c3:5a:9f:e3:0f:f9:48:16:37:f1:30:16:
                    54:d6:ec:5b:19:e7:9e:eb:37:63:c1:05:51:a4:8e:
                    15:b7:2c:f7:a7:38:e2:ce:03:65:07:0a:32:3c:cc:
                    30:e3:7b:81:92:67:dc:90:2f:38:33:7f:14:67:02:
                    a7:5a:59:98:a8:69:0a:75:7c:be:1c:55:b2:ba:c3:
                    b5:ca:2a:39:8f:56:94:da:c5:a8:2f:f6:15:42:8b:
                    6c:9f:ac:8c:66:b6:8a:f9:4e:93:51:6a:3c:5c:ff:
                    02:a7:44:b3:9a:b0:94:55:fc:b6:18:1d:f4:0b:78:
                    b3:4d:5b:e2:65:79:54:3b:36:b4:d6:6a:2b:6d:ba:
                    79:2e:cb:6d:03:90:00:d3:16:b4:72:08:1a:1a:de:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:10:B3:9F:BE:BC:DD:AB:4C:49:F6:F9:85:C6:20:A0:79:53:A2:DB
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/46186F4EC6E711EDA2FCBA34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.66.178.0/24
                  211.45.60.0-211.45.62.255

    Signature Algorithm: sha256WithRSAEncryption
         57:5a:d6:6a:3d:48:5d:50:c5:c4:b2:43:ca:a8:dd:a9:4f:4e:
         73:b5:b6:01:87:ee:2e:1c:a4:b7:7a:55:38:8a:ad:09:e7:c4:
         0c:fb:8e:19:fa:01:2a:2b:06:1c:33:a9:ca:4c:b6:ea:c9:ad:
         7a:05:e7:4c:8c:59:7d:3f:0d:0e:7f:27:5b:e8:bc:bd:af:75:
         15:61:45:35:19:31:50:0a:1a:e3:6c:04:9c:7c:ec:bd:6c:54:
         ac:67:40:80:88:8e:df:dc:58:b5:9d:c0:65:4a:a9:41:23:db:
         39:18:68:53:58:3b:c4:42:b5:f5:cf:35:4c:7c:dd:60:0c:19:
         8d:9e:8e:f8:a4:7f:83:6d:fd:cd:86:ff:e1:a4:9a:b4:09:cc:
         66:48:28:41:cd:a5:34:51:c0:4a:9a:60:a6:ad:9d:00:af:0b:
         60:c2:b4:68:57:01:3b:bf:c6:ea:cb:9a:28:ec:60:18:e5:a3:
         3a:61:0c:33:54:2f:55:09:0a:36:24:8f:e8:d2:f6:d7:a6:d2:
         9e:5e:6e:df:27:12:0e:fb:c8:70:a6:2a:dc:5c:a6:70:c3:57:
         99:44:1f:2b:93:56:03:46:bd:52:8c:74:12:ca:68:04:ca:75:
         76:a0:c0:54:3c:a8:09:45:ab:f9:22:eb:2a:22:26:cc:c5:d6:
         af:f4:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:48 2026 by rpki-client