Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/EE4BF2EAFB5911F0B335DD54496F56BC.roa
File:                     EE4BF2EAFB5911F0B335DD54496F56BC.roa (raw, json)
Hash identifier:          eZzcu3WkSrdQ3SbkATMZ/OTsw4EduF9CCFIQg7N6Nlk=
Subject key identifier:   99:70:00:B7:29:4D:2E:8F:B9:19:A3:28:CF:B0:77:D7:2C:EB:88:46
Certificate issuer:       /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial:       22
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/EE4BF2EAFB5911F0B335DD54496F56BC.roa
Signing time:             Sun 01 Mar 2026 05:47:11 +0000
ROA not before:           Tue 27 Jan 2026 08:26:52 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        192.232.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
        Validity
            Not Before: Jan 27 08:26:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d2df-7b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:52:9b:c8:6b:e2:3e:70:97:bf:e1:dc:53:
                    b8:74:5b:ac:e5:c0:d1:20:45:eb:df:59:87:9a:10:
                    c4:55:4b:74:95:49:9d:46:bd:b9:19:22:4e:cb:34:
                    5d:54:ec:7a:dd:1c:1d:2b:6e:59:78:8f:72:93:a7:
                    2a:a5:ab:90:bf:f6:b3:96:36:2e:25:5f:01:f6:ee:
                    23:a0:86:cb:83:da:41:fb:7d:73:0a:ad:d7:f1:34:
                    a3:18:c4:65:fa:61:ad:38:aa:43:80:8f:60:e6:30:
                    e5:a8:38:24:f8:40:36:fb:be:9c:46:1f:83:7c:f2:
                    09:fd:30:e1:92:27:e1:56:46:ad:d2:21:d5:2e:aa:
                    0f:ce:b4:0f:a7:28:82:9a:62:c8:25:26:3e:eb:0f:
                    d0:86:d5:b8:79:d9:58:c2:ee:b6:f4:74:07:fc:b0:
                    aa:43:87:29:bc:ad:87:ac:5c:0a:2c:58:90:e2:0e:
                    40:ec:04:3a:36:8d:a1:df:23:c5:30:e6:4e:f8:f3:
                    4f:13:5f:c6:82:67:ca:53:82:5d:7f:34:4b:39:80:
                    2d:5f:d4:ed:c2:10:4d:97:2e:6c:7a:2f:94:f8:0f:
                    49:37:a7:5e:64:7f:fd:8f:c1:d6:0b:44:79:83:f7:
                    7c:3a:cd:25:a5:fe:d3:9d:57:67:73:62:8a:86:ee:
                    47:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:70:00:B7:29:4D:2E:8F:B9:19:A3:28:CF:B0:77:D7:2C:EB:88:46
            X509v3 Authority Key Identifier:
                keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/EE4BF2EAFB5911F0B335DD54496F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:13:a6:08:2b:25:0f:61:cd:d1:06:56:75:64:ca:c4:1a:33:
         54:46:65:f7:5b:da:9e:c0:3b:0a:3b:a0:3c:a1:61:12:e8:c7:
         00:df:3c:75:d0:f6:dc:de:2a:b8:a8:b6:2e:6c:bc:ad:8e:de:
         d8:aa:ae:64:fd:b8:a5:3c:b9:7f:72:38:ee:fc:f1:9f:44:0f:
         c5:53:ce:3d:fd:7c:a9:c0:02:4b:2e:2e:44:73:03:f9:2f:e1:
         9a:12:5e:13:43:3b:8c:d3:94:89:06:be:38:0a:7c:72:eb:ca:
         c7:44:23:60:ff:85:ef:96:7d:ef:49:61:31:99:6c:6f:9b:14:
         d5:58:3d:aa:e4:c2:f7:74:e4:a2:59:ba:59:73:81:4e:5a:de:
         fc:cb:fa:8f:d8:0f:60:26:1d:2f:f7:f9:08:86:e1:57:ff:1e:
         50:f0:1d:c5:68:98:ee:a5:c2:1d:20:ed:61:6e:c2:af:78:8d:
         44:aa:12:18:af:69:f7:93:e4:62:1e:7d:95:b0:74:4f:36:e2:
         2b:c0:ad:59:74:91:b3:6e:99:f3:12:54:2c:df:36:eb:32:07:
         99:65:9a:b3:a9:74:68:b0:9a:f7:24:ed:60:dd:21:0d:83:6b:
         6a:79:d7:d0:78:c5:9f:01:87:0c:1c:b5:8a:04:e1:66:e7:88:
         ae:52:37:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:29:23 2026 by rpki-client