Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/44AA60D87D6311F0BC413466C4F9AE02.roa
File:                     44AA60D87D6311F0BC413466C4F9AE02.roa (raw, json)
Hash identifier:          0u1ZLLqCampcdXnPq/pBAes2DhVX2vLtj9KlG8BoPAY=
Subject key identifier:   4C:64:48:F5:31:C8:AB:01:D2:C9:D5:F9:FF:1F:77:B8:D0:81:BF:21
Certificate issuer:       /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Certificate serial:       82
Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/44AA60D87D6311F0BC413466C4F9AE02.roa
Signing time:             Sat 11 Apr 2026 07:41:49 +0000
ROA not before:           Sat 11 Apr 2026 07:41:49 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     7716
IP address blocks:        203.29.98.0/24 maxlen: 24
                          203.34.88.0/24 maxlen: 24
                          2400:de60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
                          rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
        Validity
            Not Before: Apr 11 07:41:49 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d9fb3d-8beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:bc:31:d2:91:af:fd:1c:e3:d4:43:13:7f:
                    35:bf:fb:68:95:61:c2:02:b8:db:f7:9f:79:f3:ab:
                    7b:bc:a8:b3:a7:63:e5:7e:b6:f6:90:c6:42:72:93:
                    82:25:e2:cb:a5:8f:98:01:65:d1:7d:3c:aa:19:32:
                    02:1d:68:0b:63:8d:cd:a9:de:80:32:03:54:63:ed:
                    51:28:66:2e:f1:ae:64:da:c2:a8:02:85:73:34:3d:
                    a5:db:cb:d4:af:1b:14:ec:15:b5:c6:e4:67:22:5b:
                    3f:3d:72:3e:61:84:e7:0b:d6:33:02:97:f3:d9:cc:
                    a0:dd:96:00:9f:7c:0d:85:5c:50:5e:52:7e:49:83:
                    c0:a5:be:f7:48:5b:1a:ca:0a:48:67:e4:de:07:74:
                    a1:11:0c:dc:5b:f6:44:b1:5d:f5:f3:f0:15:27:39:
                    91:66:45:95:e5:02:9f:36:e9:8a:85:f8:3e:c8:d9:
                    17:bb:fc:4f:ae:93:0b:52:27:44:8e:87:ea:40:f9:
                    fe:62:ce:ae:2c:0c:af:36:c4:f0:8f:2b:16:46:cf:
                    10:45:9a:3c:b5:b1:cc:8f:ef:b5:a4:d4:20:98:40:
                    f7:4a:f3:5e:15:24:aa:8d:4c:40:32:7f:59:3c:f2:
                    43:ba:be:e8:79:b7:f9:f0:a1:5f:f1:a3:41:38:ca:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:48:F5:31:C8:AB:01:D2:C9:D5:F9:FF:1F:77:B8:D0:81:BF:21
            X509v3 Authority Key Identifier:
                keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/44AA60D87D6311F0BC413466C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.29.98.0/24
                  203.34.88.0/24
                IPv6:
                  2400:de60::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:f3:67:e9:66:3f:e5:af:6d:83:68:e7:62:00:3f:61:22:b4:
         55:b1:de:f9:62:30:05:c6:dd:e2:f3:4d:15:37:bd:cb:3d:98:
         72:96:47:a3:ad:3f:1f:ae:f5:c7:86:c8:53:68:b1:77:37:7f:
         36:d8:18:ad:5c:7a:54:ae:1c:f6:8e:c4:7f:ad:66:ba:34:6f:
         3b:ba:b7:8e:1d:72:45:55:ca:f9:ad:1c:3f:16:02:df:43:0c:
         8d:48:ee:ca:e9:fe:7d:da:76:dc:40:d6:4b:aa:3f:a6:15:6e:
         0b:42:a9:db:2c:e3:cc:d6:5b:52:67:66:95:c4:3f:09:b2:88:
         a5:20:ca:81:10:df:e5:14:11:e9:09:7a:62:05:aa:30:c4:76:
         2e:a9:87:6e:5d:7e:f1:9e:2f:ef:a2:c6:c0:0f:5a:e2:fd:f5:
         fb:ab:e7:d4:b1:7f:5c:14:46:37:4c:96:2d:89:a9:1f:68:8c:
         ce:be:69:cf:c7:70:e3:8f:28:9a:81:fb:46:37:de:5d:7d:1c:
         71:b8:ac:0d:2d:ce:88:12:49:d8:db:f3:77:b4:17:ed:c7:15:
         4d:cf:b6:9f:ac:3b:b8:89:bd:33:9d:9e:96:47:2d:d4:2f:a8:
         20:ec:9b:86:08:39:15:ba:7d:d4:e6:71:19:6c:a5:c0:61:31:
         8c:3f:2c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:48:20 2026 by rpki-client