Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E775F6644CE11F09A370919C4F9AE02.roa
File:                     5E775F6644CE11F09A370919C4F9AE02.roa (raw, json)
Hash identifier:          9g3cUC8raNgRS8+czbOQCTRjwdCYvhkDod1MZszC7E8=
Subject key identifier:   1C:56:30:48:AA:64:E4:8B:56:2B:80:9B:65:4D:14:5D:1D:18:88:1E
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C15
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E775F6644CE11F09A370919C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:24 +0000
ROA not before:           Fri 04 Jul 2025 14:50:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     17579
IP address blocks:        203.230.1.0/24 maxlen: 24
                          210.119.23.0/24 maxlen: 24
                          210.119.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15381 (0x3c15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul  4 14:50:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4aeff-511c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:87:e5:76:f5:b6:b4:7c:70:cf:ad:53:b7:
                    f7:57:33:9d:08:27:84:e2:b7:c7:2c:08:79:45:0d:
                    55:7e:d4:0e:47:f4:d5:d2:e3:f7:0a:93:77:d0:ad:
                    de:7d:fc:ed:5a:2f:9d:aa:25:94:09:96:a4:b3:e3:
                    b8:17:cc:18:c2:f6:8b:b0:09:d8:64:5a:16:05:56:
                    75:b3:48:4d:18:89:de:80:80:7a:f4:7d:33:14:32:
                    2f:f4:3f:c5:4f:a2:e6:59:fc:d6:0a:f7:c4:fa:06:
                    d5:9b:5f:c3:1b:71:7a:b7:a1:62:d1:5f:ff:b2:c6:
                    20:44:d7:48:aa:1c:21:5e:f7:30:4b:e5:1a:e8:d7:
                    33:a8:58:3a:fe:68:69:bd:64:4b:06:c3:c3:95:2b:
                    65:eb:5b:44:e2:4a:66:ba:65:44:df:94:7c:dd:c3:
                    12:c2:81:28:4b:eb:77:92:c7:c2:5d:41:c9:07:98:
                    b9:47:f9:e4:09:09:60:e1:a2:3f:af:6d:80:a3:2f:
                    a3:c8:32:ba:74:e6:3a:e2:9e:50:03:fe:19:f8:39:
                    12:89:05:9a:45:3a:a0:b3:50:ce:dc:77:aa:9a:9f:
                    f0:5c:38:08:98:dd:b7:22:dd:e4:3b:f4:c7:fa:c5:
                    17:d4:f1:e5:5e:62:53:cc:64:cd:1c:ab:d1:70:3d:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:56:30:48:AA:64:E4:8B:56:2B:80:9B:65:4D:14:5D:1D:18:88:1E
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E775F6644CE11F09A370919C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.230.1.0/24
                  210.119.23.0/24
                  210.119.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:23:61:dc:aa:7d:8a:cc:99:ae:39:a9:8b:32:9f:c0:57:7e:
         7c:53:58:bb:96:43:8a:e4:78:69:85:16:ad:a4:0f:2d:bc:37:
         19:03:2b:b2:48:b2:89:66:0a:77:a1:d9:ba:86:36:72:17:3a:
         8c:b6:22:d7:69:a9:ce:2f:1d:40:df:09:24:2f:5f:c6:4f:2f:
         1c:30:45:08:2a:41:5e:8b:fd:28:3f:ac:1c:71:11:53:d8:a8:
         31:15:63:ad:24:dc:9c:27:bb:57:98:54:6b:6e:74:4c:ad:fa:
         0c:94:98:3f:57:a1:49:54:bb:ea:f6:96:97:01:32:77:2c:44:
         28:f2:fa:80:45:4b:8e:61:75:37:9b:98:79:03:2d:a0:9d:6a:
         7a:0a:c6:b3:79:c6:7e:80:86:12:3b:5c:b6:32:09:d6:f1:d3:
         71:35:df:d6:08:db:65:e4:d0:9f:82:df:f0:96:12:fa:5d:eb:
         ee:60:c6:a6:32:dd:7d:35:5d:37:43:30:1e:7a:75:0d:cd:69:
         27:91:0e:21:69:70:9b:2d:fa:d8:65:3b:1f:ec:c3:b9:66:11:
         17:6c:d4:a3:b6:36:89:83:4f:2a:6e:0b:ec:cf:67:31:6f:41:
         d5:39:b8:cc:94:9e:b1:83:0c:39:62:b1:af:bb:3b:47:a8:ab:
         06:01:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:25 2026 by rpki-client