Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/83739562D66111F0B67B852D0CB43E13.roa
File:                     83739562D66111F0B67B852D0CB43E13.roa (raw, json)
Hash identifier:          zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=
Subject key identifier:   FB:36:F1:C7:C1:AD:9E:3F:DD:7D:BB:CC:4A:DD:A7:26:D3:42:87:E1
Certificate issuer:       /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial:       2C
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/83739562D66111F0B67B852D0CB43E13.roa
Signing time:             Sun 01 Mar 2026 05:53:31 +0000
ROA not before:           Thu 11 Dec 2025 07:17:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154418
IP address blocks:        144.79.106.0/23 maxlen: 23
                          144.79.106.0/24 maxlen: 24
                          144.79.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
        Validity
            Not Before: Dec 11 07:17:55 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d45b-0e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:5f:9c:c1:3a:c4:6f:01:7e:f4:da:dd:7e:
                    f0:7f:20:97:ab:5b:47:5f:0e:bd:8c:bc:cd:c0:4a:
                    b6:77:80:d0:01:1f:4e:f3:aa:2b:a9:b6:5f:94:f8:
                    0a:a1:69:48:f7:36:92:38:af:e4:44:f4:e5:dc:28:
                    8d:9e:87:c1:4c:67:4a:f8:b9:c0:05:6a:41:02:6e:
                    34:a0:f9:92:57:0b:79:e5:4a:68:2a:cc:9a:76:bd:
                    35:f3:87:62:8a:88:3a:51:d5:bf:13:81:1e:83:ac:
                    1c:55:ec:1c:67:41:17:ac:6e:77:57:99:7a:b8:50:
                    f6:78:5c:a4:4e:5b:2f:4c:ce:f5:a4:3e:bd:31:b5:
                    95:67:93:55:e9:0f:ae:f5:ec:99:a3:bf:c5:31:14:
                    6a:09:ff:35:bd:4a:18:34:ea:b3:aa:9d:61:a3:7b:
                    79:c6:49:9d:b2:fa:27:bc:e5:3a:52:d2:91:92:16:
                    5a:b1:33:8f:e2:c1:6f:87:2b:97:ed:bf:98:40:cc:
                    d2:30:b9:b7:dc:0d:7c:97:30:e9:b2:8f:99:bf:24:
                    98:c8:3b:ee:46:55:7d:98:4d:3b:bc:c9:50:58:d2:
                    02:59:9d:55:b1:24:6d:55:a4:df:db:2a:47:6c:ad:
                    34:83:83:97:4d:ba:65:de:20:33:6d:f9:db:4a:9e:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:36:F1:C7:C1:AD:9E:3F:DD:7D:BB:CC:4A:DD:A7:26:D3:42:87:E1
            X509v3 Authority Key Identifier:
                keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/83739562D66111F0B67B852D0CB43E13.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:88:f2:bb:15:99:c3:49:6c:df:d6:96:33:59:31:1e:55:
         1f:3c:26:a6:b5:ba:64:3a:c7:7f:69:6b:f6:d0:5f:fa:ba:b3:
         1f:16:af:64:b0:f4:0a:81:3f:3f:22:e3:6c:04:5d:e7:4e:81:
         1c:c2:73:15:79:e1:37:dc:2b:6b:b0:81:3e:ee:2f:7a:52:26:
         38:1e:5c:b3:67:61:13:9b:61:7e:18:51:b6:08:ab:40:28:99:
         be:d3:2f:b9:56:50:dd:88:fd:6e:26:ee:83:65:c2:0c:d6:12:
         17:c4:c1:6e:1f:66:ec:62:11:a8:87:a9:46:ef:56:1f:56:4e:
         79:d4:c3:95:16:fd:c9:c7:7c:ce:67:83:36:3d:e9:21:53:0d:
         e7:c6:29:80:a3:53:28:12:54:53:40:03:04:06:ff:cd:2e:17:
         c3:93:55:18:fc:03:b2:1c:a8:3d:4c:75:a1:07:e6:19:7c:42:
         e1:f1:36:6f:e7:25:05:77:c4:55:d7:13:eb:c9:2d:20:10:e6:
         3d:e4:5f:71:b8:7f:de:a2:f8:08:e7:32:74:18:f7:bf:9a:68:
         0b:6d:aa:6f:a1:95:52:99:38:44:66:40:66:6c:86:a7:8a:ab:
         a9:95:5b:52:7f:34:c6:82:6f:78:fe:85:45:ed:b3:df:54:37:
         ff:f3:0e:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:14 2026 by rpki-client