Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/4C5380C8E0B211F084C35B824B6F56BC.roa
File:                     4C5380C8E0B211F084C35B824B6F56BC.roa (raw, json)
Hash identifier:          pRfzzI4Q+zKtzPUYOpktcBm/NjFuJMA3iaEa40U24QI=
Subject key identifier:   B4:3A:2E:20:AF:5A:BD:B8:E7:F8:BA:6A:1E:64:39:AF:F9:E9:F5:9C
Certificate issuer:       /CN=A918120B/serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
Certificate serial:       2F
Authority key identifier: 23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/4C5380C8E0B211F084C35B824B6F56BC.roa
Signing time:             Mon 02 Mar 2026 05:19:23 +0000
ROA not before:           Wed 24 Dec 2025 10:21:24 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154457
IP address blocks:        144.79.182.0/23 maxlen: 23
                          144.79.182.0/24 maxlen: 24
                          144.79.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl
                          rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 11:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918120B, serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
        Validity
            Not Before: Dec 24 10:21:24 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a51dda-b8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:99:47:c6:6c:ba:d7:d7:22:65:d4:ef:72:
                    84:1c:e8:b6:42:5e:87:dd:85:89:7e:2e:d7:7e:1e:
                    19:38:3c:f5:d3:11:84:e9:6e:28:7b:92:00:ba:15:
                    f1:9f:46:2f:d3:1f:be:f9:60:52:1a:28:76:bd:80:
                    96:fe:e9:42:e1:29:d6:28:54:a4:6d:33:df:be:ff:
                    c0:c4:68:00:9d:66:c3:8d:7b:3f:38:34:b7:33:e6:
                    29:28:63:8e:12:51:59:9c:ff:95:71:15:2f:31:11:
                    4b:7c:81:15:4b:28:6b:25:eb:ca:80:01:15:5d:98:
                    b3:3b:fa:a4:b0:50:82:1a:3e:f7:c2:e4:45:af:85:
                    36:2f:11:46:7a:9c:c9:f2:c4:87:e4:c4:d0:22:67:
                    01:37:68:d7:df:ad:be:81:d8:5c:c4:05:12:51:4e:
                    2b:08:18:08:6f:bb:3f:62:2e:89:95:39:03:cd:63:
                    27:19:bb:36:25:93:d4:31:20:91:6b:ae:00:f3:a1:
                    bc:d2:48:0f:7b:a1:a6:88:d2:0a:8d:6a:d0:69:94:
                    6a:2c:b0:37:3b:76:42:97:e5:54:39:55:72:59:a6:
                    ef:47:3a:51:69:0e:0f:41:51:40:eb:53:a9:f6:af:
                    eb:e9:47:0b:a3:88:53:6c:4f:d9:3a:53:0c:da:7c:
                    d8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3A:2E:20:AF:5A:BD:B8:E7:F8:BA:6A:1E:64:39:AF:F9:E9:F5:9C
            X509v3 Authority Key Identifier:
                keyid:23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/4C5380C8E0B211F084C35B824B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:0e:7e:0f:6e:c0:0c:94:ef:5a:a1:a9:0b:69:38:35:72:
         0a:9f:ce:3c:51:db:57:b2:b0:d0:2a:f6:96:7c:32:dc:4d:fd:
         a2:e1:13:a1:8d:0a:d8:ac:fa:4d:ba:0a:84:04:0a:37:8a:ea:
         3a:20:98:bf:db:8a:24:73:5d:23:a0:c6:7d:78:cc:74:21:96:
         a9:79:f1:c9:e4:9d:ea:a2:e4:8b:59:ff:5a:d8:84:f0:ff:88:
         f3:47:88:49:27:d3:a2:fe:b4:88:03:57:50:04:66:5c:5b:2f:
         32:fa:ec:13:75:4e:be:95:73:e8:27:46:ce:6e:96:61:70:d6:
         42:8d:d7:d3:4a:ee:01:47:e4:fb:a3:84:7a:8a:a1:2c:01:dc:
         ba:f3:3f:40:7d:ec:cd:0f:e8:cd:a0:d0:54:78:ed:72:72:98:
         17:a5:37:cd:ab:34:ed:d8:00:50:28:d9:ab:46:1d:e4:25:51:
         64:8c:2e:bb:d7:89:75:4f:d7:49:0b:bb:76:64:c6:5a:f3:bf:
         cc:32:91:af:7a:ac:b6:cf:c8:3f:7c:18:3b:dd:7d:7a:40:9e:
         66:b7:4c:3a:25:4b:af:ae:e5:c7:3e:8b:39:37:e7:e0:a0:de:
         f8:7d:01:ef:48:42:74:1f:8d:4d:74:89:6d:28:71:64:64:fd:
         9f:7b:2d:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:22:28 2026 by rpki-client