Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/79E6617E073111EA993EC663C4F9AE02.roa
File:                     79E6617E073111EA993EC663C4F9AE02.roa (raw, json)
Hash identifier:          6Vw+2a2sANnbra8NTrgQsRyzVW1ZYyYhDJataWqKbb4=
Subject key identifier:   C0:D3:B9:D0:41:1B:97:77:9A:8D:76:00:40:1A:50:DC:42:6F:E6:52
Certificate issuer:       /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial:       1074
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/79E6617E073111EA993EC663C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:31:44 +0000
ROA not before:           Fri 28 Feb 2025 19:29:56 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     397224
IP address blocks:        120.29.252.0/24 maxlen: 24
                          120.29.253.0/24 maxlen: 24
                          120.29.254.0/24 maxlen: 24
                          203.17.72.0/24 maxlen: 24
                          2001:dcd:1::/48 maxlen: 48
                          2001:dcd:2::/48 maxlen: 48
                          2001:dcd:3::/48 maxlen: 48
                          2001:dcd:4::/48 maxlen: 48
                          2001:dcd:5::/48 maxlen: 48
                          2001:dcd:6::/48 maxlen: 48
                          2001:dcd:7::/48 maxlen: 48
                          2001:dcd:dd05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
                          rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4212 (0x1074)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
        Validity
            Not Before: Feb 28 19:29:56 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a48610-fef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:22:c2:68:25:9a:98:c3:c5:6d:a9:eb:47:
                    cb:4a:77:63:da:e3:b7:5a:c9:87:09:66:73:e4:4d:
                    6d:99:c6:c1:25:b1:fb:c5:f9:9d:e1:31:9e:f8:09:
                    d5:76:0f:74:88:98:a9:14:a0:3b:93:72:93:ab:67:
                    d5:29:82:64:67:aa:54:75:2b:7f:61:57:c3:26:28:
                    ec:46:d0:dd:6b:09:32:7b:70:b3:9f:a4:05:6e:44:
                    de:de:2a:2b:b2:a2:39:fb:e8:22:84:2b:ff:c1:1e:
                    cb:15:f7:9b:fa:6f:ca:d6:6c:63:eb:8d:67:3e:82:
                    9b:17:af:42:12:b3:2e:7c:8a:af:8b:ec:80:49:53:
                    a0:24:4c:26:73:88:1e:43:15:27:fd:28:07:e5:fb:
                    60:45:a3:35:56:e7:07:81:af:7d:01:56:b5:1d:b4:
                    1b:c2:ef:a9:33:02:5a:e8:fb:d5:19:29:bb:36:09:
                    72:8f:6e:d1:e9:a1:22:b1:a2:54:2a:e1:1e:da:6d:
                    bb:21:24:23:74:f9:0a:87:70:e7:46:33:77:bb:ba:
                    e5:69:66:28:ea:32:25:da:08:91:c2:af:71:17:4f:
                    6d:f0:b8:0a:f6:77:f3:b9:86:c5:dc:c8:28:e1:b9:
                    d2:b0:bb:47:46:01:f1:61:c4:4b:99:b8:a1:80:c4:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D3:B9:D0:41:1B:97:77:9A:8D:76:00:40:1A:50:DC:42:6F:E6:52
            X509v3 Authority Key Identifier:
                keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/79E6617E073111EA993EC663C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.29.252.0-120.29.254.255
                  203.17.72.0/24
                IPv6:
                  2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
                  2001:dcd:dd05::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:f7:7f:f6:3a:7f:be:51:7f:fa:a7:4a:f7:4a:49:2d:21:48:
         c6:f0:46:f9:6a:7b:53:db:b8:29:ce:56:26:a6:80:b5:51:54:
         dd:c9:d0:bd:63:6d:5f:f9:5d:ea:44:55:61:96:66:5f:c8:5b:
         42:df:53:b3:4b:f1:c3:2e:68:9e:81:9d:f4:30:ac:a0:48:25:
         d9:90:63:b5:e3:0b:ae:41:7f:9a:57:f2:1d:46:6d:7f:87:d0:
         6b:1d:57:e3:e9:cc:ee:fd:92:99:4a:f5:0d:44:a9:0f:2f:79:
         23:62:4b:43:43:fa:a1:03:2c:21:36:87:ee:66:f7:0d:8e:c4:
         1f:01:bb:03:fa:e0:5e:87:e2:c2:9f:70:4f:da:2b:3f:94:ca:
         88:95:39:9f:12:5f:e4:d6:4a:a5:01:b1:f6:67:80:77:81:9d:
         fc:e5:e5:86:81:37:14:3d:0c:d0:db:06:07:a0:11:87:5f:bf:
         df:41:5a:63:64:3d:58:52:25:08:07:57:3b:ff:b3:1f:25:49:
         01:41:c8:f5:6b:c2:06:2f:61:4c:73:2c:41:2a:dc:54:d0:1f:
         c8:1a:1e:2a:b4:3e:a2:42:dc:5f:a1:c9:af:83:95:00:15:66:
         c4:c1:24:39:4e:70:d7:14:c7:65:dd:d0:d9:ce:85:8b:5c:74:
         b9:37:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:13 2026 by rpki-client