Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8DB9A416E0CB11F0A375DEE7526F56BC.roa
File:                     8DB9A416E0CB11F0A375DEE7526F56BC.roa (raw, json)
Hash identifier:          ne3gjAFgWpnK3baUw5eRIB2QvANo4E0vDNTyI0lkCsw=
Subject key identifier:   EA:71:0D:AC:18:BA:13:89:B3:2F:9A:DB:A2:87:59:B1:DE:62:C5:2C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2CEB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8DB9A416E0CB11F0A375DEE7526F56BC.roa
Signing time:             Sun 01 Mar 2026 22:50:39 +0000
ROA not before:           Wed 24 Dec 2025 13:22:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132627
IP address blocks:        144.79.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11499 (0x2ceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Dec 24 13:22:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c2bf-4152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0d:77:f6:ec:07:6f:2a:57:73:0c:5f:de:35:
                    5d:88:b1:9a:23:fb:44:a8:76:d0:6b:77:c8:4b:e1:
                    32:ac:be:6f:2e:1c:54:b9:ed:b8:3d:a6:a5:03:3a:
                    cb:cb:4e:93:4e:4c:10:6a:92:ba:9e:d6:9c:de:4d:
                    8f:db:2b:60:49:17:14:a2:70:d7:fe:64:38:58:b2:
                    80:ca:0d:05:8b:74:6b:0c:a2:a1:81:2f:e0:40:84:
                    b5:f1:a9:38:ed:8d:8b:2c:23:4e:cf:fd:d0:b2:73:
                    fa:89:f3:82:36:7e:a8:6b:72:f5:50:0f:f9:28:0e:
                    90:ca:aa:db:d8:5b:6d:d7:80:1b:80:f8:09:94:37:
                    47:d9:c8:e7:79:ff:d4:c9:27:f2:1b:45:36:90:7c:
                    70:1d:9a:22:f6:d5:d8:4d:75:01:17:30:6a:fe:cc:
                    6b:68:18:0a:b2:6b:90:34:52:8e:6c:77:cf:88:3b:
                    49:9a:66:e4:f8:2a:ae:84:50:22:aa:84:e9:a3:b6:
                    e9:7a:30:23:6d:82:6a:e8:47:02:00:18:05:c6:ef:
                    e0:f2:3a:a0:99:1e:b8:5c:cf:a9:08:92:51:ca:0b:
                    c3:b9:e1:b8:e4:c1:73:c7:65:8b:90:9f:8a:51:06:
                    73:91:90:8d:a2:4f:b7:cc:13:a9:26:0d:72:08:21:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:71:0D:AC:18:BA:13:89:B3:2F:9A:DB:A2:87:59:B1:DE:62:C5:2C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8DB9A416E0CB11F0A375DEE7526F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:fd:1f:83:75:de:13:69:e2:3b:37:3a:59:92:b2:39:93:
         e2:6c:f3:fa:53:51:7a:f1:f8:3b:9d:1f:92:9a:71:6e:a2:b7:
         12:6a:0e:71:bb:33:8d:eb:78:ad:92:7a:73:2d:73:12:8b:2a:
         cb:cf:13:a2:b9:d6:db:3b:dd:db:37:61:ed:2c:3a:09:ff:26:
         bd:2c:09:b9:9c:53:b9:4a:29:42:6e:f9:7f:62:d9:20:c9:81:
         bb:a4:98:c3:21:bf:1b:51:0f:05:59:9d:37:44:84:1a:70:c1:
         a8:26:bd:98:60:11:34:30:78:04:95:a9:b6:9c:8e:ba:97:2a:
         b0:db:95:c5:f4:f9:5c:59:c2:f1:80:79:00:f0:ef:d2:81:08:
         17:b7:87:1c:d1:76:f2:02:85:3c:48:b0:07:70:ef:1f:2f:42:
         0e:4c:10:71:c8:41:47:1b:47:81:8d:5d:27:1a:52:9d:46:92:
         34:ff:30:40:0f:2e:a1:92:1b:b7:89:e1:0f:5e:70:1a:a0:4d:
         0a:99:7b:aa:f1:27:fa:65:7a:d7:7b:e5:0c:38:be:ef:9d:28:
         25:79:77:28:64:63:36:fe:e4:16:12:d4:09:9a:f2:93:92:4f:
         d3:8e:c0:c8:d1:76:2d:10:bd:b9:e9:39:0a:6b:9c:67:8f:7a:
         39:6d:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:00:27 2026 by rpki-client