Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/244639A2161511F18D39720B2E3D8C67.roa
File:                     244639A2161511F18D39720B2E3D8C67.roa (raw, json)
Hash identifier:          rttjlaTzvpYInW65D+Ojx8dleBEjbuDJNYpF45EIUYM=
Subject key identifier:   E0:B9:39:62:89:A4:EB:49:7A:0A:38:77:4B:DE:45:F3:9E:69:EE:EA
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2D1F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/244639A2161511F18D39720B2E3D8C67.roa
Signing time:             Mon 02 Mar 2026 08:52:28 +0000
ROA not before:           Mon 02 Mar 2026 08:52:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154476
IP address blocks:        144.79.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11551 (0x2d1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Mar  2 08:52:28 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a54fcc-a244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:92:9f:63:3c:7e:39:19:de:dc:14:80:4b:
                    34:4b:53:d5:b2:b0:41:4c:0f:37:c5:f1:54:bd:1f:
                    eb:5b:23:2e:0a:74:52:93:6f:47:d6:d9:5b:ab:bb:
                    17:35:32:6e:d3:05:f9:bb:fb:7d:97:b7:d8:42:5e:
                    f5:c2:56:24:80:87:a8:f3:fd:ca:b1:0b:97:00:a7:
                    a5:18:7a:23:a9:bc:53:5f:08:1e:14:4f:28:e9:6c:
                    6b:0c:ed:1a:12:42:e1:65:c7:f9:c6:b4:fd:b5:1b:
                    2e:00:51:7d:1f:19:15:56:3f:51:ea:18:c9:63:30:
                    b1:66:ec:e8:58:fc:84:d9:61:f8:cb:d5:15:12:72:
                    8d:c6:b2:90:b9:c8:04:22:66:bd:85:31:a5:22:56:
                    f8:19:e4:94:85:9b:1f:9e:ad:3b:a8:72:ff:48:b8:
                    05:7c:7a:f9:30:48:cf:25:51:a6:d6:ff:5e:f0:55:
                    e7:9b:77:ef:cc:2e:9e:74:ae:a8:db:62:10:f8:07:
                    b3:14:88:83:1e:9b:00:46:a3:39:44:be:ad:70:ca:
                    43:34:0a:5a:c7:d6:7b:1d:73:8d:84:41:ba:1d:10:
                    60:5f:75:92:db:e5:b4:6c:34:61:ce:ec:87:84:73:
                    dd:b3:a0:f8:03:6b:7b:fa:d2:4d:4c:5f:e6:14:16:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B9:39:62:89:A4:EB:49:7A:0A:38:77:4B:DE:45:F3:9E:69:EE:EA
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/244639A2161511F18D39720B2E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:50:e1:9a:31:6d:1a:0d:69:a8:42:1c:22:d5:29:1a:47:19:
         f8:41:3d:4e:e3:fc:9c:43:34:b7:69:2c:16:be:d4:1a:64:8a:
         02:81:bd:9f:68:06:3c:b9:d0:82:54:3e:43:94:c5:ba:c6:7a:
         ad:78:20:4e:e7:ee:de:a9:1a:bc:47:ba:2f:29:71:68:33:62:
         0b:bc:4d:58:69:94:37:0f:0d:e5:52:a5:ef:8c:65:77:99:a1:
         23:7b:80:29:f1:65:3d:bc:6c:63:4a:27:1c:d1:24:f8:fd:34:
         5c:a9:97:73:bc:27:3c:6b:55:9a:46:fc:5b:85:58:0c:ef:9c:
         8a:f4:f6:5e:62:1a:b7:11:c5:50:91:93:dd:17:78:cd:80:ef:
         2f:13:4d:01:7f:7c:c8:db:58:86:93:2c:51:82:a3:6b:22:4a:
         7b:71:f3:d6:28:56:3c:69:b2:e7:e3:8d:4f:9e:32:56:09:25:
         02:58:b9:68:79:89:5f:ad:83:e2:45:6c:5a:7c:17:bb:7f:27:
         e4:ca:5f:67:05:99:01:6b:82:68:10:84:ea:2d:c9:1e:a5:95:
         df:54:e1:7c:80:05:be:83:90:88:ad:cb:bd:d7:76:b9:d9:e4:
         be:be:77:18:0f:eb:b4:ea:dc:cc:94:ea:d4:dc:02:d9:53:f9:
         c3:98:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:05:38 2026 by rpki-client