Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/74C3FC2413B911F1B7CEB625083D8C67.roa
File:                     74C3FC2413B911F1B7CEB625083D8C67.roa (raw, json)
Hash identifier:          P4H5FeCoBASYrayJLn/hEkJQo4s7Z0+nN2dTkoyBEgM=
Subject key identifier:   60:C6:79:D7:73:5F:03:E2:BD:7B:B3:2E:5D:3B:CA:EA:AA:34:4A:E7
Certificate issuer:       /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608
Certificate serial:       37
Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/74C3FC2413B911F1B7CEB625083D8C67.roa
Signing time:             Sun 01 Mar 2026 06:01:25 +0000
ROA not before:           Fri 27 Feb 2026 08:51:08 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133694
IP address blocks:        144.79.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608
        Validity
            Not Before: Feb 27 08:51:08 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3d635-c17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:32:bb:98:b5:b4:6d:cf:45:45:61:07:8b:
                    8b:db:0b:f7:a8:22:22:60:e4:43:a0:86:a7:ac:ca:
                    05:b7:d3:dd:a2:f1:79:2a:49:de:1c:4c:b0:5a:3f:
                    a5:d7:89:02:f5:6e:9d:77:10:7b:b9:2d:f8:bc:b2:
                    c4:08:62:0f:62:76:39:f9:57:26:68:f4:63:e9:8c:
                    84:0c:25:1f:70:4e:3f:c5:4b:cc:86:d3:40:b6:35:
                    ea:2f:0f:53:51:a4:33:bc:9c:95:32:c6:41:08:5d:
                    1f:33:ee:dc:4f:fd:5d:8f:c9:f8:8b:eb:69:8b:71:
                    6e:b0:1f:a3:70:28:31:30:98:f9:b2:63:7c:a4:9a:
                    63:a0:b2:21:10:03:bd:08:d1:5b:80:8b:80:76:70:
                    1f:30:3a:d7:b4:25:8c:d6:0b:e3:7b:dc:e9:12:19:
                    b2:9a:ae:88:65:23:d9:a3:26:85:09:a6:b4:ed:7a:
                    38:9a:98:fa:54:b4:25:b2:a1:bb:2d:28:0d:09:6a:
                    00:08:63:b5:15:97:f2:0d:19:54:1b:93:d1:f6:4c:
                    d9:2a:40:f4:26:68:8b:11:65:ac:77:ec:75:8a:03:
                    8c:e3:b8:60:36:58:d9:78:69:b3:4c:85:d4:84:2f:
                    b2:f2:de:83:0a:85:ff:0a:1f:38:7e:ae:05:fb:9f:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C6:79:D7:73:5F:03:E2:BD:7B:B3:2E:5D:3B:CA:EA:AA:34:4A:E7
            X509v3 Authority Key Identifier:
                keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/74C3FC2413B911F1B7CEB625083D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b4:97:74:05:23:f7:4a:f2:25:b4:67:07:d2:d9:20:c7:40:
         85:b6:cf:13:72:65:fd:93:40:a5:c2:1a:6d:ba:98:fb:ef:39:
         5a:5f:d9:d4:02:10:91:a0:a4:27:df:97:26:c2:6a:e1:e1:f1:
         f5:61:68:9d:bc:7f:80:72:6d:e5:ff:fa:fd:cd:5c:0f:e6:45:
         c7:cf:92:61:06:8e:18:f3:cb:a4:0a:df:8d:3a:4c:a9:97:ad:
         c5:35:e1:95:64:27:68:25:0d:a4:fc:b7:cb:59:16:40:b4:d1:
         6e:92:6f:56:00:75:aa:bb:60:76:e3:37:d2:03:86:1a:81:19:
         ee:97:af:8b:6f:89:67:72:72:f5:ef:fa:f3:40:8c:5e:6a:ca:
         93:18:d9:f4:ff:46:32:8e:a6:aa:87:51:04:f1:e5:50:c2:fc:
         91:89:6a:42:49:c8:44:af:62:11:c8:8f:49:a4:b8:dc:f5:5d:
         16:d3:08:3f:d6:6c:29:f0:db:03:37:6f:60:93:3b:2c:a0:1e:
         05:5f:82:fb:d6:b9:5d:fb:f4:c9:89:e0:cf:51:76:f7:81:fc:
         83:b7:64:8f:bc:c8:5e:54:33:40:e4:1d:78:c7:23:a9:8c:fe:
         cb:0b:3d:ca:60:84:1e:ce:73:7a:6d:bd:42:b3:df:34:84:83:
         61:76:bc:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:54 2026 by rpki-client