Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
File:                     2C4F5466E47A11F08671F3E23F6F56BC.roa (raw, json)
Hash identifier:          WsN1f6wwbcJF5RdtqWey/DtwlYfMt1ay7aj7fD7eCJk=
Subject key identifier:   7F:70:BA:9B:8D:55:B1:5B:A5:78:C9:8E:CC:8B:FE:D9:4C:3C:0B:1D
Certificate issuer:       /CN=A9193C07/serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Certificate serial:       3A
Authority key identifier: ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
Signing time:             Mon 02 Mar 2026 14:24:31 +0000
ROA not before:           Mon 29 Dec 2025 05:49:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154462
IP address blocks:        144.79.220.0/23 maxlen: 23
                          144.79.220.0/24 maxlen: 24
                          144.79.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
                          rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193C07, serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
        Validity
            Not Before: Dec 29 05:49:43 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a59d9f-4cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:ce:3d:50:16:fe:b7:35:c6:56:12:d6:63:
                    8f:80:6e:da:87:2f:bd:b6:7d:5f:1c:10:fc:98:47:
                    0e:a5:13:1c:07:b5:bc:17:a4:e6:54:96:f6:62:e3:
                    87:3a:06:9a:41:a9:0e:a9:e6:ba:fe:fc:80:46:43:
                    ad:e5:f0:93:fd:18:42:53:f2:2f:01:41:2a:ff:61:
                    49:64:b9:9a:50:9a:53:05:64:50:07:c8:11:aa:db:
                    81:f3:6d:2c:04:d6:53:1c:54:f8:14:1a:0d:42:88:
                    6d:f9:44:00:4d:ff:fe:70:d6:f9:ee:79:0b:62:2b:
                    c8:31:79:2c:1b:4a:c8:b7:79:36:04:fb:89:32:8e:
                    f6:ad:56:ae:ce:f4:11:74:d3:70:5f:79:c0:e7:1a:
                    04:2f:c0:04:6c:44:d1:b2:dd:f1:87:0f:c1:7a:b4:
                    c8:7f:0c:64:7b:2d:5a:6c:7f:92:d6:17:95:51:4f:
                    4c:80:72:ec:88:40:8e:3e:72:95:5e:a6:ad:1d:52:
                    27:83:f3:75:6a:b1:5c:f2:95:3a:b2:62:88:3a:d7:
                    6a:b9:26:7f:e4:d7:de:66:c1:b8:3d:b7:dd:9a:c7:
                    a0:c5:b8:37:aa:6f:e2:50:a5:c4:91:a4:02:1e:98:
                    9b:e9:49:e7:64:77:5e:71:11:a7:eb:70:11:95:6e:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:70:BA:9B:8D:55:B1:5B:A5:78:C9:8E:CC:8B:FE:D9:4C:3C:0B:1D
            X509v3 Authority Key Identifier:
                keyid:ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:44:e5:b5:97:d8:97:c2:51:0a:f3:84:d7:ba:24:a4:e3:37:
         ff:e8:41:8d:87:cf:08:46:db:af:80:7e:59:9b:df:fb:df:49:
         26:2d:d3:29:10:cd:bd:9b:bd:5a:84:24:4a:4d:7e:c8:36:c3:
         3d:e1:09:75:1c:6f:bc:73:75:e8:ed:bc:2c:dd:e8:30:67:d1:
         83:02:e2:02:a1:8c:72:7f:df:00:47:19:50:df:b6:68:d3:83:
         4f:41:aa:66:ec:70:fc:b9:f8:ec:79:61:32:09:38:60:aa:44:
         ac:a3:99:2d:81:d7:bf:aa:c3:b6:61:a8:a1:97:c2:b4:10:ea:
         d5:00:25:8d:e2:d7:f6:4e:ab:1e:35:1c:f8:89:ac:e3:e4:b9:
         02:34:78:87:14:95:88:85:9e:88:7b:2d:47:8e:97:44:4a:3d:
         35:7d:18:87:09:4e:18:61:8e:4e:91:9c:2b:32:df:b4:e7:49:
         7d:a9:cc:3a:35:64:8c:df:68:2b:66:d5:04:31:fb:2f:14:d1:
         0c:49:10:c1:cb:7b:c7:d7:d7:37:8c:54:ce:37:7a:df:27:5c:
         5c:c2:6a:61:06:0b:2a:64:35:4e:d2:b6:c7:46:af:5b:3b:0c:
         17:81:5c:ea:6d:c0:cb:28:67:53:80:d0:44:16:bd:bc:57:c3:
         35:78:b5:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:07:35 2026 by rpki-client