Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/BF341AF869A911EE8CB76452C4F9AE02.roa
File:                     BF341AF869A911EE8CB76452C4F9AE02.roa (raw, json)
Hash identifier:          zruAs6tE4g/7xXgkpCpI/pMe53ngPwPFAHbDL/Vu+YY=
Subject key identifier:   3D:F1:F7:E3:69:E6:C1:43:3A:62:36:D2:C6:60:C4:D8:F9:E5:64:2A
Certificate issuer:       /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
Certificate serial:       01EE
Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/BF341AF869A911EE8CB76452C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:38:41 +0000
ROA not before:           Thu 05 Jun 2025 03:52:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55523
IP address blocks:        27.96.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl
                          rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
        Validity
            Not Before: Jun  5 03:52:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3def1-5214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:41:cd:2b:22:08:4c:7d:8e:e0:6d:20:6e:
                    50:56:2b:ad:95:3c:2f:0e:b5:d1:e1:63:c5:37:ac:
                    2f:ea:fd:5d:25:fb:31:ef:56:31:28:42:a0:4f:77:
                    64:6c:c3:b5:ad:d8:0c:ce:85:25:7d:de:ca:af:24:
                    ef:d0:7b:8c:8c:0d:bf:50:f7:7b:e2:e8:ba:eb:d6:
                    7c:1e:b5:75:ba:ff:7d:bd:4e:d2:0d:41:e5:3e:fc:
                    dc:0d:9f:8a:8c:3d:8d:c3:53:f7:2a:2c:f4:a7:f8:
                    31:bf:c5:34:8c:ca:f8:b1:7d:f0:b5:43:fe:b6:76:
                    d3:e9:f7:4f:64:a1:85:57:2e:dc:eb:2b:c1:05:16:
                    27:e7:82:87:fa:b5:15:64:6f:f0:69:04:2a:b9:b2:
                    da:86:64:c5:4e:f3:f0:d0:f6:38:91:d6:d9:0e:85:
                    34:c0:ee:38:67:73:bd:98:9f:c5:f4:3f:63:f0:e1:
                    3f:d1:a7:b5:b0:81:8d:8f:b0:5b:7e:fc:59:b3:1b:
                    b8:4d:f5:95:29:47:1c:5d:90:b8:e0:10:33:56:7d:
                    e1:8f:80:36:4a:57:f4:9a:ee:54:7a:e1:9c:26:f4:
                    a5:ac:ef:b7:1c:ca:dd:46:ec:fb:25:0d:41:bf:eb:
                    59:98:50:46:f4:af:a9:c7:88:82:73:f6:a6:90:94:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F1:F7:E3:69:E6:C1:43:3A:62:36:D2:C6:60:C4:D8:F9:E5:64:2A
            X509v3 Authority Key Identifier:
                keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/BF341AF869A911EE8CB76452C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.96.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:94:59:fb:77:af:e8:30:d6:9b:1f:a3:32:16:be:ac:cc:74:
         3b:55:12:74:f7:0c:23:91:e3:73:bf:f4:db:87:4a:31:e1:22:
         c7:13:ee:d0:8a:e1:2e:ca:7e:ea:9a:81:93:2e:4a:ce:bc:62:
         3d:93:95:f0:a1:cd:d0:b2:9f:ac:a9:8b:1e:db:a2:75:0e:93:
         df:ae:c3:96:ea:a7:6c:59:b9:c9:fa:a3:cd:19:65:56:38:b7:
         96:2a:39:97:e6:2a:fd:6e:21:fe:6d:7f:43:12:be:86:1d:33:
         e3:0f:e0:82:d4:5f:dd:ef:b9:73:35:ab:03:c1:95:52:0e:05:
         61:b6:8e:89:5b:af:e0:e4:e2:f9:c7:71:3d:43:ad:c6:1d:c2:
         80:f4:ae:ec:be:ef:e5:77:3f:8b:5f:2a:24:b4:39:55:57:9a:
         6c:e2:14:62:cb:4c:80:4e:a0:b3:c6:6b:d2:1c:8d:49:c1:bc:
         03:cb:51:df:ec:de:d5:32:69:69:85:1e:e3:c8:f0:b5:71:e8:
         99:5a:8c:6f:22:43:54:04:f9:0e:38:da:9e:57:d8:00:00:d0:
         da:52:52:0d:6e:7b:15:68:3f:96:4f:f9:29:c1:07:78:94:b0:
         41:8e:aa:35:b5:09:1b:b6:5b:00:5d:75:17:1c:49:88:cc:e1:
         a8:74:08:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:40 2026 by rpki-client