Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7D232E6033A611EB8B013530C4F9AE02.roa
File:                     7D232E6033A611EB8B013530C4F9AE02.roa (raw, json)
Hash identifier:          O5AVbvnVZjqQA6OOm+g39au0F7k+weJipxUFHaOitSM=
Subject key identifier:   F4:C2:02:3F:87:C8:AF:AB:13:AA:BF:F3:58:56:6E:4E:C9:C7:28:41
Certificate issuer:       /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial:       07E0
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7D232E6033A611EB8B013530C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:03:51 +0000
ROA not before:           Wed 02 Jul 2025 22:02:45 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     2497
IP address blocks:        149.234.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2016 (0x7e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
        Validity
            Not Before: Jul  2 22:02:45 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47177-7998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:58:9c:ba:3d:4a:4d:48:ca:9e:54:b9:dd:
                    8c:dc:58:7f:14:17:bf:41:2a:a8:d7:46:7c:44:db:
                    2e:a2:f0:91:ac:9f:e9:0a:1a:f3:7c:ca:e5:be:bc:
                    68:94:c1:c5:9b:eb:a4:fd:a9:44:ae:75:bf:36:87:
                    42:be:21:d7:2f:c5:73:fc:e3:42:1e:4c:55:5e:e8:
                    79:bc:50:47:6c:e8:02:3d:0f:74:e8:8c:7d:18:30:
                    7d:50:c9:8b:db:38:4e:82:49:e6:8d:ff:4b:3b:b6:
                    65:e4:d0:ec:a2:ec:00:ac:f5:36:b5:fe:ed:c0:83:
                    ef:af:37:1d:4c:df:c6:09:82:79:9f:18:d6:b1:f0:
                    bc:7b:44:ff:32:30:29:07:1d:19:0f:48:ce:e0:49:
                    07:e6:2c:0b:a2:cc:01:71:87:95:19:fb:72:4a:50:
                    fa:ab:36:22:9c:12:da:be:96:e5:68:81:7e:b5:c7:
                    5b:93:aa:8e:b7:93:b0:bd:91:84:0c:dd:62:6b:aa:
                    95:fa:e4:8d:d1:1f:94:49:4a:e5:0e:13:d8:c9:75:
                    1c:bb:6b:8f:18:2f:a5:88:98:b7:af:7e:f5:68:52:
                    e7:44:86:23:f8:80:82:76:3b:2b:d2:ed:13:05:2e:
                    3a:0c:f6:a7:88:69:39:6d:94:cf:2f:35:2c:62:bc:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C2:02:3F:87:C8:AF:AB:13:AA:BF:F3:58:56:6E:4E:C9:C7:28:41
            X509v3 Authority Key Identifier:
                keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7D232E6033A611EB8B013530C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:e6:c9:62:25:60:c7:4e:57:76:41:d9:a0:4e:8c:f9:42:05:
         5c:69:1c:4d:af:4e:d6:97:35:59:9c:a5:57:e0:af:ed:61:80:
         2a:ec:de:16:8f:79:be:c9:f6:eb:ce:ff:ce:7f:fa:d5:ed:c2:
         1b:ce:f6:e9:f0:e3:76:05:0b:b2:11:33:2b:90:bb:b7:b0:59:
         93:8b:1e:44:f8:b6:6c:61:88:3b:b3:09:d8:4f:69:f7:a6:4d:
         09:4e:b0:fd:85:61:49:d1:1a:3f:93:f5:64:1d:e9:56:d9:07:
         88:dd:74:10:cb:9c:85:97:dc:11:32:bc:e9:8f:bd:91:3c:92:
         19:9c:15:30:19:a0:b6:e6:f7:11:0b:e2:1e:5f:45:56:6b:8a:
         f8:a2:da:1b:1d:cd:8d:f2:f0:21:10:0f:e2:b4:0e:49:20:f6:
         e7:d5:0e:ec:bd:8a:3a:97:52:fa:18:12:10:80:7f:88:aa:19:
         7c:ba:ce:03:66:b3:04:28:f6:f2:95:3a:75:70:48:ce:4a:1b:
         cc:02:7d:28:f6:67:53:c0:19:27:b6:0c:71:58:0e:6a:c4:9f:
         ca:b2:29:13:62:0e:18:86:7b:65:c2:5a:dc:98:02:ab:2e:42:
         8f:0b:a6:88:63:90:f8:75:c8:30:cd:8f:0e:d1:fa:bc:90:06:
         5b:34:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:49 2026 by rpki-client