Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E735782EBB8911F083DB6D28C4F9AE02.roa
File:                     E735782EBB8911F083DB6D28C4F9AE02.roa (raw, json)
Hash identifier:          EGPPvZRgoPkvLfSn1FO9IWICWOn4INg9mkEVkACiYBo=
Subject key identifier:   09:52:D4:25:20:D6:4A:85:29:BB:AF:42:EE:EB:33:F6:80:BB:73:D0
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       0336
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E735782EBB8911F083DB6D28C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:41:36 +0000
ROA not before:           Fri 07 Nov 2025 03:29:02 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136501
IP address blocks:        202.155.84.0/23 maxlen: 23
                          202.155.86.0/23 maxlen: 23
                          202.155.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Nov  7 03:29:02 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4885f-791a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:f2:a6:bb:1d:00:6c:5c:b2:d7:49:c5:20:
                    7f:4d:af:e7:46:fa:54:11:ce:9b:f6:d9:8f:78:0a:
                    fb:84:25:16:41:6d:cc:f5:29:d2:a5:e6:3f:16:97:
                    da:b2:4e:df:20:f6:a0:65:d4:f6:97:1b:dd:4d:a6:
                    32:78:9c:ef:d8:16:48:d7:a6:75:8c:27:26:38:57:
                    09:41:8c:2b:16:9e:62:ad:0a:c1:0c:e3:b5:e6:be:
                    0f:89:0a:24:2c:66:17:6e:38:27:0b:86:94:38:bc:
                    75:de:5c:7c:2f:fe:d5:f3:8c:f6:e5:6f:84:5f:b3:
                    27:9b:ed:e2:62:ee:41:21:5a:c1:83:51:55:12:d3:
                    d4:56:b5:c9:c9:a9:e5:56:6e:33:c5:84:7a:49:bf:
                    66:9b:7f:05:f9:83:e1:e9:f5:24:fc:40:4e:b1:bb:
                    d5:49:f4:d7:3e:f4:57:7d:b8:18:6b:1e:c9:36:5a:
                    65:73:01:e4:4b:fb:ee:bd:50:b0:06:3a:2d:f8:30:
                    c8:93:40:c6:b8:56:6d:2b:95:2e:b1:a9:a6:9c:e5:
                    fc:1e:5b:92:ee:19:a0:c8:46:2b:99:86:f9:0f:fd:
                    72:a3:aa:d8:2e:6c:20:eb:98:b7:2e:f8:43:f1:fd:
                    5b:91:79:53:80:a7:e4:14:1a:90:96:14:84:1f:3d:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:D4:25:20:D6:4A:85:29:BB:AF:42:EE:EB:33:F6:80:BB:73:D0
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E735782EBB8911F083DB6D28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.84.0/22
                  202.155.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:52:6e:1a:54:53:0e:04:25:a2:f6:24:a4:33:50:e5:bb:17:
         27:0e:1f:2c:c4:48:86:0a:13:d1:94:eb:27:ed:bd:75:86:31:
         9c:b4:86:3c:e5:e7:68:21:55:d8:5e:6d:aa:a8:6e:eb:c0:cf:
         60:63:23:07:84:a4:65:25:dd:b8:ca:e0:e2:1c:bd:a4:19:c9:
         78:bf:f8:a5:81:fc:80:ea:a0:f7:38:45:a4:2b:34:ac:e9:bb:
         69:d0:0e:03:b3:31:04:19:47:9d:fe:20:41:b6:b8:45:f4:46:
         0e:60:46:16:ac:40:b3:8e:fe:4d:68:f5:17:e5:fc:5e:f4:88:
         c1:b5:2c:e0:6e:77:87:0e:09:4d:c2:94:29:7c:f5:0b:b7:59:
         97:00:9f:ec:d1:79:41:ac:8d:1b:f2:e4:9c:42:c5:e5:c3:17:
         0d:11:7b:45:34:28:7c:b1:c5:48:fe:b7:7e:71:93:eb:ac:09:
         70:9d:1a:30:03:52:29:0e:4c:4e:01:f4:a5:d7:ec:34:35:ac:
         99:bb:3c:79:4a:32:b4:80:1e:99:1c:8d:c1:94:cc:c0:c3:93:
         50:e9:5c:b4:0d:91:a5:f1:90:2e:6a:30:c1:d7:c8:72:e3:b4:
         3f:dc:f2:20:08:97:02:8a:fb:16:f2:9d:38:cf:1c:8b:61:2a:
         9f:d7:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:43 2026 by rpki-client