Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/B647F704090C11EFB666C967C4F9AE02.roa
File:                     B647F704090C11EFB666C967C4F9AE02.roa (raw, json)
Hash identifier:          nMJlJs5RVl9hK1ao5B9tFWVbxrXwgcmPLTkIzplwg3c=
Subject key identifier:   C5:4E:B9:BC:91:CF:2D:64:31:13:5B:37:E6:44:4C:26:1A:AD:E6:97
Certificate issuer:       /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Certificate serial:       0D24
Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/B647F704090C11EFB666C967C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:34:45 +0000
ROA not before:           Thu 20 Nov 2025 18:08:13 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134525
IP address blocks:        202.1.171.0/24 maxlen: 24
                          202.1.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
                          rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
        Validity
            Not Before: Nov 20 18:08:13 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45c95-ddd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e8:a1:02:4d:a6:15:e2:dc:cd:e7:7d:59:2e:
                    19:e8:90:a3:51:ce:87:5c:af:14:29:28:2f:a0:6d:
                    3b:eb:ac:69:70:95:6b:ad:ea:13:f7:67:81:66:70:
                    9e:54:2a:89:5b:8a:9d:20:7a:cb:89:e0:bb:b4:3c:
                    d3:84:d9:c5:36:86:40:0a:53:0e:6e:a5:cb:61:fe:
                    59:74:1e:92:51:d0:11:fc:f7:b0:24:a0:b4:a7:95:
                    c3:bc:68:73:2a:84:bf:fd:2c:61:b7:d7:54:b3:76:
                    14:65:b1:8e:ad:3d:15:72:1c:98:20:9c:2b:dd:5e:
                    a4:da:86:04:ef:d5:95:33:66:98:a8:44:36:d6:00:
                    50:a8:d0:b3:9b:1b:a8:6c:53:c6:0f:70:67:df:91:
                    95:cb:c2:fe:46:c0:4e:dd:15:bb:af:2e:c5:3a:56:
                    98:28:b7:12:49:f6:1b:9d:f0:dc:b9:32:dc:fa:ef:
                    07:34:fe:b6:d2:9f:94:b3:7a:79:2a:70:6a:79:66:
                    86:97:40:ce:89:36:3f:ba:12:50:6f:1e:e9:1c:29:
                    f1:22:3f:59:87:e2:8a:24:1e:b3:c0:97:2f:0c:54:
                    12:ad:94:98:37:64:8c:1d:8e:e0:58:60:17:cb:cc:
                    d7:bd:a3:87:94:33:e2:aa:07:37:c3:9b:81:8c:72:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4E:B9:BC:91:CF:2D:64:31:13:5B:37:E6:44:4C:26:1A:AD:E6:97
            X509v3 Authority Key Identifier:
                keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/B647F704090C11EFB666C967C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.171.0/24
                  202.1.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:3f:d6:c9:ca:d3:45:9b:04:61:73:c9:f7:ee:84:da:a2:bc:
         0f:0f:c4:30:b6:68:84:11:e6:75:79:f0:5e:00:82:c5:d0:92:
         13:e1:b3:2f:c0:31:d2:b8:e6:e3:0a:11:66:0b:28:95:b1:5f:
         6b:c8:48:c8:2b:68:fc:1f:41:77:38:4b:9b:93:bd:f6:e3:b9:
         70:0c:08:02:e0:3e:6a:1b:ca:6e:16:da:7b:e6:13:b8:a5:9d:
         35:b6:f5:ce:51:bb:98:32:5b:0e:c4:1e:86:4b:33:62:88:4b:
         96:e5:b6:66:1f:26:03:51:24:15:41:40:51:9c:7e:8c:f2:f6:
         f2:5e:81:1f:37:ba:b4:35:0b:49:29:4c:92:66:5b:b0:f8:9b:
         d8:ea:43:fe:2d:35:34:81:f8:a3:2e:b0:81:60:77:69:88:3f:
         d0:82:34:71:1d:bf:27:f8:d0:16:57:a4:4d:de:9f:14:15:7e:
         26:70:c3:cf:98:d8:98:50:a9:33:ae:e0:2f:cd:7a:ce:1a:90:
         94:5c:b1:59:c1:32:49:42:49:c0:45:a7:25:d5:bd:33:28:bf:
         39:67:c3:bf:cf:0e:0e:44:01:09:62:b4:54:73:13:f3:1b:0c:
         80:7f:12:d1:0f:fc:b0:9f:0d:65:73:52:43:a1:bc:e7:bb:08:
         ec:a9:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:20 2026 by rpki-client