Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A309A0BA366311EEB376DC3AC4F9AE02.roa
File:                     A309A0BA366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          h7BGEXdT8/fJrbtPEuzFrIHw8A3Ou1Gq593O22LjGdE=
Subject key identifier:   9D:27:6F:0B:AD:3A:9A:D6:8D:D2:B2:10:AA:32:9C:4F:D3:66:1E:2F
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       0277
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A309A0BA366311EEB376DC3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:30:24 +0000
ROA not before:           Mon 23 Jun 2025 03:22:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     24097
IP address blocks:        96.30.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 23 03:22:22 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a485c0-5f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:90:36:10:24:62:98:5b:3b:08:be:31:b9:
                    b2:d3:89:ba:4e:62:89:fc:e8:cb:96:c9:13:7a:fe:
                    11:7a:74:7e:61:d5:34:dd:de:95:b2:78:f2:1d:29:
                    83:86:13:fd:17:2e:4a:6e:95:20:1d:b2:be:e4:c6:
                    4f:b5:00:55:50:50:58:d1:db:c4:e5:a2:22:0e:11:
                    c0:e9:54:38:72:66:69:3e:cb:16:f4:a7:f1:9b:f2:
                    05:49:ca:56:c1:b1:59:c7:90:83:61:b9:cf:44:6b:
                    40:37:ca:c8:28:01:70:65:87:64:ce:d7:60:1e:0d:
                    9f:77:1b:95:c1:18:b6:e2:68:4d:98:35:b5:82:e3:
                    0d:5e:18:2d:b8:50:11:01:84:0f:d3:63:73:e5:4a:
                    f9:b0:e5:cf:2d:b2:6a:2a:30:9c:50:8a:3f:65:74:
                    e8:a9:9c:0f:3b:7d:25:9a:e1:14:58:25:05:58:5b:
                    44:f3:f5:90:8b:24:0c:bc:40:28:12:e8:4d:ad:02:
                    15:83:47:cd:81:06:24:3d:96:12:ac:66:9f:47:0f:
                    81:f1:43:d2:81:5f:a7:ec:c4:bb:2e:fb:3c:8c:8b:
                    a1:1f:08:fa:94:e6:82:be:33:ad:7d:9e:cc:d5:c4:
                    78:56:03:c4:6d:b0:60:89:9a:99:a0:e2:29:d1:b5:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:27:6F:0B:AD:3A:9A:D6:8D:D2:B2:10:AA:32:9C:4F:D3:66:1E:2F
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A309A0BA366311EEB376DC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.30.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:79:b9:c8:42:12:5c:8b:0f:bc:ba:a3:dc:9f:f3:c1:0b:91:
         15:21:fd:86:13:38:fc:0d:e8:dc:ed:6a:c3:c4:9d:0d:f9:5f:
         d6:2f:dc:75:60:58:65:43:65:e7:4a:d2:aa:fc:68:a9:17:a9:
         8b:9b:8d:18:1e:ec:dd:bb:78:96:da:49:24:fc:74:7a:b2:47:
         3f:e8:0c:ce:68:94:71:7f:52:9a:17:9c:b5:6f:14:03:d9:92:
         3b:7c:26:a3:ea:4c:62:a4:ed:5a:5c:3d:03:ab:7c:76:57:7f:
         b0:d6:5c:ef:b6:00:8a:87:12:10:c6:e6:be:7b:ba:c2:cd:ec:
         17:99:87:a5:0f:5e:f3:8c:16:31:e5:ff:f6:eb:1a:cd:85:57:
         63:a5:09:10:32:24:53:d0:3f:06:14:23:c6:ac:b1:8e:bc:7c:
         51:c2:95:4b:e3:e1:3c:45:33:d8:a6:fb:16:d2:98:39:1f:56:
         0b:49:5b:ed:2c:0c:b3:a4:76:71:77:00:2b:dd:72:3e:cf:38:
         8e:98:e7:6f:67:b5:d0:7e:94:b4:c9:b2:93:99:08:02:bc:b8:
         42:76:6c:5e:06:e4:e6:e3:38:b0:78:3e:0f:bc:57:10:df:fe:
         72:97:e7:ed:81:77:3d:6c:cb:2a:1d:24:13:5f:78:bc:77:01:
         9e:9a:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:41 2026 by rpki-client