Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/F37A409031F611F1AB7DD4D994833773.roa
File:                     F37A409031F611F1AB7DD4D994833773.roa (raw, json)
Hash identifier:          2l5TcfFesA4KvyBe2bzpYKxCe9H4gkdIV1Bn6Wja9ls=
Subject key identifier:   9A:43:E3:F5:50:C7:DE:AE:31:F2:29:BC:EB:6F:B5:4E:5B:B3:F1:D9
Certificate issuer:       /CN=A91A9E58/serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
Certificate serial:       49
Authority key identifier: B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/F37A409031F611F1AB7DD4D994833773.roa
Signing time:             Mon 06 Apr 2026 20:26:55 +0000
ROA not before:           Mon 06 Apr 2026 20:26:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138192
IP address blocks:        144.79.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E58, serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
        Validity
            Not Before: Apr  6 20:26:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69d4170e-ced5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:eb:8a:8f:e5:b3:f2:ae:71:83:34:91:57:
                    77:4e:bb:37:7c:76:32:85:36:d9:98:d1:a1:03:04:
                    54:3c:ba:ff:5c:2d:fd:8e:fd:cd:8e:a9:01:2f:e1:
                    bf:84:d0:f7:c0:3b:37:65:ad:1b:54:16:e8:eb:7d:
                    bb:67:73:3b:c5:49:41:a2:79:41:fb:6e:fd:98:be:
                    70:da:50:c7:9f:09:f3:d0:9f:ba:8f:e0:47:8e:e5:
                    44:0f:b3:b1:bb:39:82:82:47:ea:7d:b0:18:53:24:
                    55:94:52:4d:83:14:73:09:21:e9:50:32:b7:00:ae:
                    81:c7:7d:82:f1:be:f2:c6:25:37:85:69:df:61:16:
                    73:40:fe:ad:22:68:e8:3f:fa:3e:36:29:a5:86:6c:
                    bd:3a:10:c8:bc:b1:ae:e9:c6:88:2b:28:58:75:2a:
                    d0:d7:24:c9:12:ae:5f:6c:07:13:94:5e:d2:ef:09:
                    61:bf:9a:13:c3:6d:a3:2d:41:bd:b9:31:7f:bb:d7:
                    b5:30:9c:7e:f0:00:0e:52:d4:50:58:23:db:11:03:
                    8b:c2:cc:f2:8e:4c:55:b6:b9:a4:4c:73:b8:48:bf:
                    a6:28:12:60:67:f2:21:69:28:39:b9:1a:98:21:ab:
                    b3:2b:84:8c:98:ec:16:b2:3e:91:63:b0:2a:8e:20:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:43:E3:F5:50:C7:DE:AE:31:F2:29:BC:EB:6F:B5:4E:5B:B3:F1:D9
            X509v3 Authority Key Identifier:
                keyid:B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/F37A409031F611F1AB7DD4D994833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:c9:67:ee:9a:45:40:db:3e:64:65:74:05:01:52:0c:d4:
         bc:d2:2b:74:17:c1:51:72:bb:fd:ed:c4:69:53:05:4b:bc:79:
         86:1d:2c:89:f0:ab:d4:91:8b:06:db:7e:21:6f:65:13:3e:15:
         71:67:26:d4:95:ee:01:62:74:03:31:76:c7:83:b7:ae:f2:ff:
         e8:ce:90:d8:ac:73:f0:b4:8c:aa:14:14:e3:ad:18:0d:ff:46:
         3e:ce:aa:5e:47:26:9c:0c:47:b8:e2:1f:fc:7a:e2:6b:01:74:
         14:1c:ec:79:8c:66:aa:73:bf:fe:f9:69:b3:b6:4f:0f:ed:53:
         56:e2:fb:51:33:0a:47:d4:ca:2f:3a:29:c3:36:fa:89:34:30:
         87:a8:e5:42:60:59:35:e9:38:90:17:04:68:a8:f1:5e:6b:4c:
         26:d3:d4:15:1e:31:f1:6e:ed:67:2e:c2:a5:ce:f3:93:fa:73:
         39:bf:be:34:f5:ae:a5:40:00:13:4f:07:2f:50:91:f3:5d:18:
         f6:67:b8:13:b0:ac:62:f1:e9:8b:15:7f:c7:e8:86:a6:72:62:
         cc:3d:56:7a:26:0b:77:c3:a8:b6:15:fd:c7:64:53:33:fa:e0:
         98:6a:71:25:d5:74:2d:86:75:1f:bb:07:db:73:c9:56:df:37:
         f5:0f:29:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:30 2026 by rpki-client