Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/7EB9D336E88D11F09C95F79A506F56BC.roa
File:                     7EB9D336E88D11F09C95F79A506F56BC.roa (raw, json)
Hash identifier:          Ezl0n+OgzlnEpdFqgpF6c3qxbrKC+MfFQzWPPXiHzdM=
Subject key identifier:   D8:26:42:4A:C6:B6:28:0D:61:16:8E:5C:61:AA:2E:43:7D:C7:84:1E
Certificate issuer:       /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6
Certificate serial:       8C
Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/7EB9D336E88D11F09C95F79A506F56BC.roa
Signing time:             Sun 01 Mar 2026 17:52:53 +0000
ROA not before:           Fri 27 Feb 2026 07:25:32 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     154096
IP address blocks:        163.61.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl
                          rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6
        Validity
            Not Before: Feb 27 07:25:32 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a47cf5-7dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:18:d8:7c:b9:07:c6:71:ee:8f:3a:7a:31:
                    7c:a2:41:87:da:4c:6c:39:e3:bf:ab:9f:3a:aa:3d:
                    6f:c5:8d:2f:c7:0e:e5:14:4f:19:bd:77:3e:36:f4:
                    62:b9:52:9c:c4:57:ed:88:53:7d:e4:37:f8:07:ee:
                    99:03:0a:5a:d9:af:23:16:b1:4b:39:5c:cb:9e:e4:
                    30:82:0c:0e:5a:5e:bc:79:97:fc:4f:09:f1:4b:62:
                    a7:f1:fb:24:20:49:4b:2f:97:a8:0c:50:77:2f:db:
                    68:41:e2:13:48:e2:dc:03:26:ae:aa:58:4f:90:91:
                    05:30:c7:07:54:0b:a3:fa:e0:86:65:b7:c6:e6:92:
                    ca:01:d0:a6:6d:f1:05:22:7e:ee:17:49:41:92:8e:
                    f4:f7:6f:1c:fd:71:8f:ee:60:a1:10:bc:67:d7:b3:
                    f0:57:ae:c7:0e:e1:b7:c0:20:d5:e3:e5:bd:55:0d:
                    a4:ff:5c:e2:d6:05:e5:bb:ae:30:51:99:ea:50:43:
                    1c:00:5a:7a:59:f3:6a:26:37:fc:c2:53:73:e3:e5:
                    b0:7c:63:40:4b:8b:65:ff:96:67:6e:9d:d5:e4:e3:
                    9a:8b:67:77:c6:1c:65:3d:ac:23:2e:49:23:cb:ad:
                    e2:b8:1d:d2:52:49:3a:23:ce:9d:34:02:c7:37:20:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:26:42:4A:C6:B6:28:0D:61:16:8E:5C:61:AA:2E:43:7D:C7:84:1E
            X509v3 Authority Key Identifier:
                keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/7EB9D336E88D11F09C95F79A506F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e2:23:77:ff:1a:db:a8:13:e9:09:c4:25:17:82:46:4d:e7:
         50:42:40:24:29:ed:37:c4:da:35:75:93:aa:77:ba:69:15:bf:
         10:1d:c3:8a:bb:49:89:02:5b:d1:9a:1b:46:0b:16:67:c9:1a:
         e0:18:ac:ac:75:0a:41:4b:cd:3a:50:09:0d:a6:d2:e8:15:ff:
         76:75:a6:13:d2:72:ad:92:93:da:58:b6:28:e8:af:73:ea:fc:
         2f:be:0f:ab:db:c6:94:88:63:db:86:44:e6:fd:75:85:15:3e:
         84:9a:97:54:4b:1c:a9:51:06:ad:82:ff:57:f7:9b:33:ad:4d:
         bb:40:f6:1a:72:63:91:d0:30:d9:54:5a:c6:2c:eb:d2:56:73:
         61:a4:35:59:91:13:6a:6a:6a:29:f6:a4:71:a8:c4:25:af:6e:
         52:73:62:bd:78:fa:af:8e:18:35:b5:e2:0a:3a:ae:5b:83:1c:
         19:2f:a6:a3:d1:4a:fe:4c:18:7c:a5:ef:a3:2d:fb:df:4b:c8:
         a0:3c:5a:71:a4:bf:0f:6e:4b:46:e1:36:a7:05:bf:09:f8:35:
         cb:e6:96:3b:95:08:f2:9f:8a:78:41:58:b9:f9:56:f7:42:db:
         29:36:e8:e1:88:bb:8c:4b:af:ed:fa:55:4f:1a:87:76:67:db:
         ff:11:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:57:11 2026 by rpki-client