Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/5D81654A561E11E7A4FFF329C4F9AE02.roa
File:                     5D81654A561E11E7A4FFF329C4F9AE02.roa (raw, json)
Hash identifier:          QQcQcj/8H3ULQhlPhT3i5+E0PJvkpwvZGLnuOlY+020=
Subject key identifier:   9F:8F:2B:D7:5A:41:92:4E:7F:83:CD:3C:C4:A4:D1:D7:20:FE:5C:5B
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       35AC
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/5D81654A561E11E7A4FFF329C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:40:42 +0000
ROA not before:           Wed 04 Feb 2026 15:10:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     23755
IP address blocks:        202.7.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13740 (0x35ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: Feb  4 15:10:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46c0a-db1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b5:92:19:c5:08:a0:c3:85:1c:8a:7c:03:bb:
                    42:b8:35:4e:0a:f7:7a:9c:fe:d3:96:21:c9:a2:06:
                    8b:d4:94:c5:ac:99:02:b5:40:86:47:e5:f8:b1:e9:
                    cc:19:fc:91:70:f0:bb:08:9b:83:33:c5:9f:83:e5:
                    fa:2d:3c:30:5a:32:5a:77:09:34:d4:24:83:b7:37:
                    72:97:80:2f:7a:33:e9:0b:45:cd:51:2f:f5:02:b2:
                    2b:44:c2:72:59:c7:ed:d6:75:6f:30:c7:67:fb:ac:
                    03:82:dc:76:88:cd:1b:32:3f:10:04:2b:eb:b4:7a:
                    79:40:28:6a:ff:87:a2:51:94:33:bd:c4:63:ed:28:
                    5b:58:59:a4:c9:7a:21:37:e2:16:73:ac:ef:85:9e:
                    80:ca:f4:27:e6:c2:40:c1:c3:48:db:f7:b1:45:46:
                    ca:b3:f1:c3:11:0d:eb:08:41:d1:88:54:9e:e7:e5:
                    40:69:eb:cc:43:33:79:ee:29:b8:cb:54:8b:3b:f2:
                    aa:f1:60:0d:4c:bd:5f:78:75:46:58:19:c9:77:3a:
                    e0:12:af:be:0d:63:2c:13:6b:0f:09:8d:ba:50:8c:
                    74:6a:0d:ca:ac:0c:bb:06:b4:b4:28:7f:15:22:30:
                    c1:e7:74:8f:f8:bd:dd:f1:2f:5e:eb:b1:28:a1:02:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8F:2B:D7:5A:41:92:4E:7F:83:CD:3C:C4:A4:D1:D7:20:FE:5C:5B
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/5D81654A561E11E7A4FFF329C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:df:6d:03:5c:cc:d4:fa:30:d0:ff:b8:be:85:82:ed:d4:c3:
         75:ad:e7:24:f6:a9:4c:aa:19:f5:28:91:6c:f6:40:75:66:92:
         de:33:6b:5b:85:f4:26:f7:e1:bb:04:36:95:1b:0d:be:8e:de:
         81:da:35:af:10:57:25:30:10:08:90:1d:be:69:41:99:de:3c:
         a0:95:24:db:7d:7d:9c:07:70:17:e4:c1:78:85:fd:36:f8:c7:
         a3:f5:43:a5:b4:d4:35:3a:54:15:b3:2f:08:1b:c2:19:c2:f9:
         99:d5:aa:7e:7f:33:cd:27:32:cf:7a:0e:fa:be:8d:7b:33:53:
         2a:53:32:fb:81:23:10:a9:1e:1e:db:32:a1:48:1f:b6:30:cb:
         99:2c:db:6c:ae:de:e1:f1:b0:e4:02:e3:87:28:37:8e:29:e2:
         5f:25:5d:bf:62:c3:2f:3a:57:1a:ca:e0:ce:ea:55:a7:71:99:
         1e:89:cd:0d:cb:f5:06:4e:be:b9:ef:c5:f6:93:12:7a:f9:58:
         c8:34:f2:53:eb:0b:a3:8b:b8:50:a7:00:5c:61:ae:8b:0a:e1:
         24:51:28:09:2a:2b:93:df:cb:e7:be:0d:7b:52:5e:e7:07:17:
         ca:74:c9:94:91:6b:30:cd:21:eb:9c:6b:27:4a:81:4d:b6:a4:
         12:c3:58:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:20 2026 by rpki-client