Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/24AC829C476311F0970DF567C4F9AE02.roa
File:                     24AC829C476311F0970DF567C4F9AE02.roa (raw, json)
Hash identifier:          mTmW2tlcxITv3MdjbT02W69HQ7YNon9s/TUkLbZT4dY=
Subject key identifier:   81:0E:BA:64:CC:61:8F:64:52:54:3C:B9:0D:6C:9B:77:F2:3F:57:04
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       38BD
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/24AC829C476311F0970DF567C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:23:11 +0000
ROA not before:           Mon 18 Aug 2025 14:50:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        180.255.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14525 (0x38bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Aug 18 14:50:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4840f-e615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:20:c4:21:75:5b:18:c6:70:b8:d3:3e:7b:
                    9f:74:2c:c3:a2:d3:0a:0d:dd:66:14:ea:85:b7:1e:
                    51:7f:6d:26:51:48:a6:76:a0:50:74:ca:d6:20:0e:
                    13:ef:39:b4:56:c1:35:74:02:fa:2e:b8:1e:0d:b3:
                    2b:1d:76:90:0a:82:57:96:6d:fa:3b:a3:a0:34:f5:
                    2c:f0:ca:3b:1c:24:49:4a:67:43:75:9c:50:d2:95:
                    81:d9:20:4d:cc:b4:3b:9a:4a:39:f2:ad:a9:ba:3b:
                    21:57:18:4c:e1:4d:40:aa:cc:43:88:9c:45:7a:a8:
                    f2:93:da:d6:22:2d:2e:0b:ed:8b:7e:fe:cd:13:0b:
                    ea:80:9e:6d:77:15:87:ff:f5:1a:f1:a3:53:5c:ba:
                    cd:12:a1:17:c5:f3:b0:fd:08:dd:bc:cb:a5:c4:48:
                    9a:7d:54:19:1e:77:34:4f:a2:0f:c5:ce:46:35:35:
                    bc:03:fc:51:4a:ce:17:f8:e2:c8:45:1b:ec:f5:90:
                    cf:8e:98:06:1a:f3:b1:29:0b:ee:d2:4b:0f:fe:bf:
                    60:fc:b1:e1:a3:3b:91:f6:5f:a6:7a:8a:04:24:ed:
                    48:f3:f5:5e:c8:80:9d:6f:e5:19:fb:16:6d:5b:58:
                    25:0a:fe:c5:7c:77:b7:3f:e5:5c:3a:20:a9:2b:54:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0E:BA:64:CC:61:8F:64:52:54:3C:B9:0D:6C:9B:77:F2:3F:57:04
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/24AC829C476311F0970DF567C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.255.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:1c:2d:e8:07:a1:02:51:ec:ab:54:d0:6a:dc:da:b1:5f:
         8b:21:52:1b:91:ac:14:68:af:a8:dd:3b:69:82:5d:6b:4f:93:
         b7:9c:49:71:1e:e5:0b:4e:c1:97:4a:47:ea:9b:13:09:b9:bd:
         46:68:41:f4:4f:f7:9b:8d:22:74:31:d6:2c:83:99:4d:a8:46:
         0a:28:1c:b1:21:ea:99:a9:40:3a:e2:4d:b9:d6:1e:15:04:cd:
         47:34:09:e8:4b:2f:d3:02:6c:be:12:c5:f8:ce:ab:51:1f:87:
         48:ea:53:bd:6e:06:fe:ed:ad:e9:03:ff:1b:5b:b8:61:ce:83:
         53:99:3a:92:73:2f:12:ed:47:19:44:3f:52:8b:44:14:cb:f3:
         7a:c8:e9:60:1b:74:0a:71:2c:48:97:76:d9:e7:41:c4:ea:12:
         84:58:a0:5e:41:73:6a:c6:40:63:0c:94:3a:46:5a:92:5b:eb:
         fb:48:6e:34:15:aa:a8:e0:18:37:25:6e:bf:07:67:9f:df:79:
         a2:88:59:95:28:ab:a7:13:24:a7:f0:95:53:5f:6d:5b:26:80:
         6b:0c:51:e2:d2:b5:61:3f:b6:95:58:63:c4:c4:e4:4b:be:e7:
         8c:f8:3b:3e:d5:0a:08:c6:cc:06:b4:cb:7b:34:d1:95:f5:3e:
         38:83:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:17 2026 by rpki-client