Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/81DF53EC15E711F19073865B1E3D8C67.roa
File:                     81DF53EC15E711F19073865B1E3D8C67.roa (raw, json)
Hash identifier:          +SRcsIgiU2NuCS0kORpgl7wKzP04VyN5f6Ac6d+EidI=
Subject key identifier:   69:FD:9F:C4:A5:21:59:AA:37:70:21:35:C8:63:EF:9E:1E:17:89:33
Certificate issuer:       /CN=A917972C/serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
Certificate serial:       02
Authority key identifier: 86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/81DF53EC15E711F19073865B1E3D8C67.roa
Signing time:             Mon 02 Mar 2026 03:25:48 +0000
ROA not before:           Mon 02 Mar 2026 03:25:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     4851
IP address blocks:        202.128.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl
                          rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917972C, serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
        Validity
            Not Before: Mar  2 03:25:48 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5033c-3b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4c:76:8f:81:a9:59:06:6e:de:2a:57:0a:cf:
                    c0:2b:e3:6b:31:84:18:d8:f7:9e:bf:11:c4:b7:fa:
                    f5:12:e3:d7:db:bd:31:e7:2b:a9:1e:18:41:82:43:
                    af:ab:c5:4c:92:9c:19:55:49:db:fc:9e:e3:51:6c:
                    ea:66:f8:37:68:b5:dd:b0:a3:f4:bd:91:77:4e:ca:
                    c2:ba:c8:62:9e:bb:c0:a7:2f:2e:00:70:bf:cb:5d:
                    a2:5a:75:04:f6:6e:cb:77:94:c8:a9:d1:8c:ae:9e:
                    71:a7:13:6f:0a:81:52:e2:b4:3a:2f:4a:e9:2d:cf:
                    f9:cc:59:6f:1c:48:75:cb:30:79:58:eb:b9:39:cd:
                    47:71:07:46:f1:fb:c8:0a:1f:2f:87:74:61:64:08:
                    00:13:76:10:53:c0:fb:42:89:7d:52:b7:c8:53:3f:
                    c7:a2:2d:36:6e:8a:b6:aa:f7:32:49:b0:34:d1:53:
                    d7:3c:41:ba:93:04:91:35:fe:08:f5:47:87:f5:9a:
                    7f:ef:e8:45:97:a7:bf:33:71:20:be:8a:2b:27:84:
                    31:c7:65:1a:07:84:7b:d7:75:3d:89:76:c3:a8:da:
                    8b:86:cc:b2:28:61:80:ba:f2:49:f3:c9:f1:5c:5f:
                    3a:0c:df:5f:99:11:4c:14:8e:3e:05:e0:e3:25:58:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FD:9F:C4:A5:21:59:AA:37:70:21:35:C8:63:EF:9E:1E:17:89:33
            X509v3 Authority Key Identifier:
                keyid:86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/81DF53EC15E711F19073865B1E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.128.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f6:69:1c:84:6f:a8:04:1d:96:2a:b0:0e:b1:10:26:1c:5f:
         ef:54:28:9e:51:8f:bb:bd:0e:32:bc:f6:64:9c:b5:6c:c7:a5:
         d0:5e:71:1b:0d:fc:13:25:61:0e:43:54:71:90:4e:3c:15:ac:
         bc:c2:f4:fa:a2:87:1e:26:72:9a:96:44:7d:63:d4:de:59:a2:
         ad:ee:50:a5:b7:18:3b:b4:b3:39:34:63:ee:59:44:77:5e:d4:
         fa:04:21:70:dd:60:c6:ac:6e:07:13:ef:d0:73:77:61:3b:eb:
         ec:a2:2d:6e:f0:82:7c:61:0c:fe:2f:1d:93:59:d4:d8:ff:e9:
         fe:d9:65:b7:a0:df:15:3e:5c:b0:a1:53:62:56:54:b3:96:6e:
         c5:94:fb:fd:86:0b:c8:8b:f1:45:2d:98:f0:65:8a:ec:d8:6c:
         7a:21:3d:e0:e4:64:92:17:ad:80:10:79:6e:d7:38:e5:da:6e:
         f7:56:9d:46:17:81:5a:22:6e:ab:b9:59:03:57:fb:55:a0:e0:
         5e:9e:d8:85:c5:30:23:3b:23:de:10:de:2d:c8:03:ca:49:4a:
         81:99:59:ac:ea:61:d2:f4:d1:42:0c:42:84:39:48:3c:49:16:
         fe:8b:9c:60:50:52:32:8f:a1:5e:e2:ac:96:48:42:22:58:bd:
         af:09:82:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:51:20 2026 by rpki-client