Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
File:                     0396C48E5E7011EDAD328E21C4F9AE02.roa (raw, json)
Hash identifier:          Mh4/XZCOz/5jnoz/Wr+DHfTFDHin1sETOc8gGkljRkA=
Subject key identifier:   24:64:8D:9C:59:0C:B4:28:85:39:CD:4C:FF:61:97:0E:F4:D0:4C:B3
Certificate issuer:       /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial:       13E6
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:33:53 +0000
ROA not before:           Sat 08 Mar 2025 17:06:20 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     55002
IP address blocks:        202.124.46.0/24 maxlen: 24
                          203.80.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5094 (0x13e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
        Validity
            Not Before: Mar  8 17:06:20 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47880-a29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:bc:03:b1:e1:77:bf:a1:d0:9d:c4:c7:fe:
                    5d:ef:1e:50:ce:bd:d3:1a:ec:ac:c2:d7:8c:60:92:
                    4b:e1:60:e1:0c:e4:c3:db:59:3c:af:ac:03:b0:3e:
                    3c:6f:cb:ad:60:f5:e2:be:78:20:a8:61:5f:8d:f9:
                    c3:e8:2b:e1:0a:1a:ef:65:8e:65:91:0b:42:53:28:
                    8a:ae:32:28:4c:fe:62:24:55:39:11:4a:15:d7:2b:
                    a9:3c:e9:1d:c6:7d:98:93:6d:0e:3a:c2:1e:8a:d0:
                    b6:68:8d:dd:4d:25:d7:75:cc:b7:eb:83:a1:10:c9:
                    89:97:79:db:15:8c:98:31:9e:26:dd:a1:d2:dd:a0:
                    c3:37:c3:a7:54:8f:29:aa:bf:65:db:dc:80:0c:ad:
                    d4:68:a1:b2:f9:54:32:3a:09:44:dd:d2:54:34:9f:
                    0c:83:06:55:85:91:35:40:f9:68:5d:99:2f:80:8b:
                    6b:5b:a4:3b:4f:f9:49:57:56:16:84:81:df:e6:49:
                    b8:2d:eb:98:2d:65:44:77:9e:60:9b:ba:5e:fe:35:
                    72:be:bc:a4:86:e5:75:31:c7:0a:29:b5:5e:d1:af:
                    76:ac:67:12:77:a4:26:0d:d5:37:6d:f1:85:2a:e5:
                    3f:6e:47:71:f9:5f:c9:11:68:d7:06:56:6d:91:1d:
                    88:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:64:8D:9C:59:0C:B4:28:85:39:CD:4C:FF:61:97:0E:F4:D0:4C:B3
            X509v3 Authority Key Identifier:
                keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.46.0/24
                  203.80.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:94:f9:ea:77:44:38:66:be:f1:81:4f:2a:3a:76:01:ef:
         cb:8d:b4:60:55:6f:fe:1b:62:7b:9b:99:11:9d:23:a6:b8:e2:
         65:9e:b3:e2:ce:04:53:b5:08:e6:95:d6:e0:4a:61:67:e9:c6:
         04:23:f6:a2:1d:b0:8a:c9:dd:35:4f:21:12:7c:4a:ed:9a:9e:
         4e:03:e8:94:cc:15:5e:9d:f6:dc:15:3a:1b:db:dd:db:e9:eb:
         fd:21:bf:9c:33:cf:a8:31:21:5b:45:8b:ce:c8:f3:29:94:c8:
         a1:82:d4:67:65:21:dc:22:44:44:b7:f3:f7:3d:48:59:40:bf:
         ec:4e:78:7e:45:2f:ad:54:94:5c:d8:07:64:d5:c1:e7:d6:41:
         80:73:87:95:04:46:ed:42:91:14:79:9c:fc:69:2e:3b:f2:a6:
         d2:33:9b:2e:5d:2a:88:70:b7:e3:56:eb:58:64:74:18:aa:ca:
         7e:c8:be:de:ae:2d:04:e3:55:11:bc:55:56:1a:fd:27:64:b9:
         2b:84:2c:08:5d:4e:4f:de:d0:ff:cd:01:91:89:84:91:fe:2d:
         6c:59:8e:93:d8:2b:ae:8c:01:25:77:e8:7e:4a:0b:29:e7:06:
         0c:09:27:32:8d:7d:3a:38:2f:ec:5f:75:28:75:3c:a0:47:b8:
         ed:50:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:25 2026 by rpki-client