Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/AB532852B38911ED825BDC70C4F9AE02.roa
File:                     AB532852B38911ED825BDC70C4F9AE02.roa (raw, json)
Hash identifier:          RCoE8bQ2xQx3+6AG70lWii6WPBaMur94b8A3cmNzGaY=
Subject key identifier:   83:4A:9F:D0:7A:5B:FE:BE:C7:09:FA:A8:B7:5F:F8:76:A8:6B:3C:71
Certificate issuer:       /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial:       0623
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/AB532852B38911ED825BDC70C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:38:22 +0000
ROA not before:           Thu 18 Sep 2025 23:35:10 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     7387
IP address blocks:        202.79.176.0/21 maxlen: 24
                          2401:7800::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
                          rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
        Validity
            Not Before: Sep 18 23:35:10 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4333e-8b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:24:af:38:d3:6c:b3:fd:e3:57:9a:1c:73:
                    25:6f:41:0a:ee:30:b4:69:ad:ed:e5:8f:b2:de:5b:
                    97:0a:f3:36:c3:d9:af:6f:11:70:c6:f6:de:ef:98:
                    41:cb:41:af:b1:f7:51:f1:0c:5f:b4:e7:73:8f:e8:
                    24:8e:04:75:4e:5d:ab:39:19:f9:05:40:a6:85:8e:
                    68:05:0c:0b:7e:3b:90:0e:31:bc:0b:cf:d6:b9:f4:
                    b4:a8:f2:da:f2:1c:4f:8d:db:5b:0e:08:54:b8:e4:
                    1b:bb:1d:ac:74:00:d8:52:a3:18:c2:39:de:27:bb:
                    02:c2:de:87:de:98:1a:57:95:18:c7:20:3f:b3:84:
                    b2:d8:15:c2:1e:d5:8a:82:dc:89:89:84:27:3b:1e:
                    40:5b:11:a9:7e:e1:9f:f6:30:52:b0:1a:d4:8c:3e:
                    76:42:ce:44:2f:9c:8e:6e:6e:28:37:dd:98:76:eb:
                    12:16:c1:c4:ee:75:9d:66:32:ff:31:a4:2d:d6:7c:
                    db:aa:8f:01:86:66:9b:89:e2:48:26:a2:41:83:c8:
                    78:54:df:10:b8:f1:07:8d:ee:7f:51:93:26:9e:aa:
                    3c:47:af:b9:80:aa:b4:de:ff:84:11:04:ba:da:e0:
                    84:88:a3:6a:72:23:31:64:a3:a9:fd:91:e7:01:9a:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4A:9F:D0:7A:5B:FE:BE:C7:09:FA:A8:B7:5F:F8:76:A8:6B:3C:71
            X509v3 Authority Key Identifier:
                keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/AB532852B38911ED825BDC70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.79.176.0/21
                IPv6:
                  2401:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:dc:da:f0:f2:52:71:d9:50:33:a9:ea:9b:c8:52:39:c7:bd:
         db:9e:f8:b2:a3:47:2a:39:8f:df:37:8b:15:9d:96:f4:fb:0f:
         e1:c9:95:4b:5e:bf:0e:5f:a1:e3:fb:cc:e9:c9:77:70:4d:fe:
         f3:26:90:e8:a2:46:b2:ad:7f:34:68:de:e1:f0:49:96:09:8f:
         73:f1:2e:76:2a:3c:dc:e3:6e:c7:f2:28:fc:8f:fc:0c:d6:7b:
         f7:04:03:7b:1c:22:67:3a:49:9b:f4:e8:a7:1d:85:0f:78:bc:
         7d:3e:3d:34:0c:45:2d:cb:cb:cd:6e:08:41:0d:eb:9f:21:c5:
         83:bc:b2:a7:e6:78:59:73:e5:bd:f3:5c:74:0e:2c:c8:cc:66:
         ab:64:ce:56:a9:86:0c:0b:63:95:d0:43:1c:8f:38:f2:56:30:
         9f:10:d7:17:ad:5f:56:bf:ef:15:96:98:6b:61:19:22:42:d2:
         0a:2c:dd:9c:b1:c8:fc:f1:6d:98:2b:42:3b:9c:a4:92:b7:74:
         ef:14:ca:90:69:81:05:20:e0:3a:7c:1b:f1:16:f6:04:75:e6:
         8f:c1:2f:9d:d4:13:ef:29:1f:98:ca:53:78:9c:49:1e:54:5e:
         2b:48:e0:99:d6:c9:12:f3:7e:a6:81:bb:82:e7:d8:e5:26:cf:
         0e:e6:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:06 2026 by rpki-client