Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/6641AB54DEE111F0BF0237E8526F56BC.roa
File:                     6641AB54DEE111F0BF0237E8526F56BC.roa (raw, json)
Hash identifier:          3c720aJ/J3RclkYPzI9bzs0SKJeg4GvB6leOfaOooVs=
Subject key identifier:   7A:6F:45:49:D8:90:BE:B7:B2:61:57:90:30:7F:F4:8B:CD:92:C8:13
Certificate issuer:       /CN=A9162B98/serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
Certificate serial:       2A
Authority key identifier: D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/6641AB54DEE111F0BF0237E8526F56BC.roa
Signing time:             Sun 01 Mar 2026 05:52:20 +0000
ROA not before:           Mon 22 Dec 2025 02:53:31 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154441
IP address blocks:        144.79.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl
                          rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162B98, serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
        Validity
            Not Before: Dec 22 02:53:31 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d414-8a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:a4:35:e5:56:ce:29:ba:a3:38:cc:8e:d9:
                    8d:b5:5c:e9:6a:8a:40:0b:32:c4:db:42:51:8f:8e:
                    5e:97:37:d8:59:7e:01:57:6d:a0:0b:13:b4:48:65:
                    f7:c8:05:b2:4d:f0:26:d9:8b:88:a3:c0:72:d1:6a:
                    07:76:e5:2f:cc:62:7d:c5:5c:2a:a7:d5:26:6c:3b:
                    a4:a9:c4:10:cf:1d:56:36:68:7e:76:5f:b1:17:ba:
                    00:d1:63:af:f1:09:98:a3:d3:3b:c5:08:fd:34:73:
                    cf:65:9e:83:3a:01:a9:ae:19:85:e9:f0:c6:b3:0e:
                    80:eb:9d:1e:89:ee:67:c0:b6:f5:85:16:37:af:5c:
                    13:c5:1c:c1:12:14:29:c9:28:df:9c:23:21:3e:01:
                    b3:58:4e:20:8d:19:51:22:fb:46:4b:1e:23:3e:9f:
                    97:43:70:67:ae:3d:b6:06:db:a4:77:e0:79:a0:ff:
                    2d:43:e1:3c:15:62:9a:5e:0f:dc:63:8c:ae:d9:bc:
                    9b:29:67:2e:8d:45:1a:47:ad:a6:46:1a:3f:01:71:
                    64:b4:f0:c9:97:a8:3f:b7:fc:c8:e2:d2:5b:91:93:
                    c4:a4:4d:7a:b4:02:36:67:59:14:73:f0:5f:a8:5a:
                    c3:75:eb:fb:29:5f:bc:c2:4a:40:57:9b:fe:3e:be:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6F:45:49:D8:90:BE:B7:B2:61:57:90:30:7F:F4:8B:CD:92:C8:13
            X509v3 Authority Key Identifier:
                keyid:D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/6641AB54DEE111F0BF0237E8526F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:2a:4b:ae:1d:bc:1b:38:f9:e3:46:1f:e6:b4:af:44:3e:
         d1:36:a5:00:52:0f:e8:c7:a0:fb:2c:bd:20:74:a9:4e:c8:9c:
         74:11:3f:07:9d:05:6d:61:bd:1c:54:d4:d6:64:27:8a:3b:ca:
         55:9f:db:1e:c5:41:f1:19:30:10:7f:70:29:39:9f:86:af:86:
         e2:5f:68:dd:cd:21:52:6b:54:26:66:be:a1:58:58:23:8a:b7:
         8b:c2:27:94:61:89:33:26:4c:73:ea:0d:88:a1:8f:5d:35:f1:
         bc:00:9d:74:da:38:ee:6b:37:fb:a5:3f:cc:27:0d:a3:a2:91:
         ba:59:6f:70:ea:13:5a:5a:f6:12:4a:41:42:25:d1:66:ad:29:
         f0:57:d2:d6:93:5e:1f:33:bd:54:b9:e8:00:36:64:49:1c:6c:
         cb:b6:0a:ed:ed:de:33:03:a0:55:13:c6:95:fe:ab:e1:b0:91:
         78:64:2d:24:e0:36:7d:25:fb:9d:ca:78:ea:88:8d:66:fe:a4:
         85:3c:f3:75:20:e6:7f:ba:46:12:0d:e3:38:9a:2c:fd:a4:d7:
         b7:d0:17:3c:aa:bf:c2:e1:4d:1e:66:0b:5a:d0:78:c9:d1:99:
         ef:43:13:27:76:f6:66:5a:a9:f9:76:d1:4e:33:dd:2c:2a:9c:
         b2:25:db:7e
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MkI5ODExMC8GA1UEBRMoRDc1RjRENTQ3NjRBRUY0RTUzMDQ4N0RFQjVFQUQ5MjMy
MkYyRTAwQjAeFw0yNTEyMjIwMjUzMzFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNDE0LThhMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7oaQ15VbOKbqjOMyO2Y21XOlqikALMsTbQlGPjl6XN9hZfgFXbaALE7RIZffI
BbJN8CbZi4ijwHLRagd25S/MYn3FXCqn1SZsO6SpxBDPHVY2aH52X7EXugDRY6/x
CZij0zvFCP00c89lnoM6AamuGYXp8MazDoDrnR6J7mfAtvWFFjevXBPFHMESFCnJ
KN+cIyE+AbNYTiCNGVEi+0ZLHiM+n5dDcGeuPbYG26R34Hmg/y1D4TwVYppeD9xj
jK7ZvJspZy6NRRpHraZGGj8BcWS08MmXqD+3/Mji0luRk8SkTXq0AjZnWRRz8F+o
WsN16/spX7zCSkBXm/4+vu+/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUem9FSdiQ
vreyYVeQMH/0i82SyBMwHwYDVR0jBBgwFoAU119NVHZK705TBIfeterZIyLy4Asw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyQjk4LzFBNzk4NEQwREM5
MzExRjA5OTVEODREOTNGNkY1NkJDLzExOU5WSFpLNzA1VEJJZmV0ZXJaSXlMeTRB
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMTE5TlZIWks3MDVUQklmZXRlclpJeUx5NEFzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkI5OC8xQTc5ODREMERDOTMxMUYwOTk1RDg0RDkzRjZGNTZCQy82NjQxQUI1NERF
RTExMUYwQkYwMjM3RTg1MjZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACQT4EwDQYJKoZIhvcNAQELBQADggEBAG+ZKkuuHbwbOPnjRh/mtK9E
PtE2pQBSD+jHoPssvSB0qU7InHQRPwedBW1hvRxU1NZkJ4o7ylWf2x7FQfEZMBB/
cCk5n4avhuJfaN3NIVJrVCZmvqFYWCOKt4vCJ5RhiTMmTHPqDYihj1018bwAnXTa
OO5rN/ulP8wnDaOikbpZb3DqE1pa9hJKQUIl0WatKfBX0taTXh8zvVS56AA2ZEkc
bMu2Cu3t3jMDoFUTxpX+q+GwkXhkLSTgNn0l+53KeOqIjWb+pIU883Ug5n+6RhIN
4ziaLP2k17fQFzyqv8LhTR5mC1rQeMnRme9DEyd29mZaqfl20U4z3SwqnLIl234=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:33 2026 by rpki-client