Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/7CCBF066A2F811F09235B919C4F9AE02.roa
File:                     7CCBF066A2F811F09235B919C4F9AE02.roa (raw, json)
Hash identifier:          L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=
Subject key identifier:   2E:E2:CA:23:33:BE:68:9D:5A:52:17:2F:8B:4D:62:8A:27:78:6B:7F
Certificate issuer:       /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial:       5A
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/7CCBF066A2F811F09235B919C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:14:29 +0000
ROA not before:           Mon 06 Oct 2025 21:07:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4049
IP address blocks:        202.0.124.0/24 maxlen: 24
                          202.20.63.0/24 maxlen: 24
                          202.37.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
                          rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
        Validity
            Not Before: Oct  6 21:07:38 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3e755-7fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:cb:9c:aa:81:73:52:7f:65:11:91:de:8f:
                    06:fd:c9:e0:89:3d:a3:38:2e:02:c7:58:b5:1c:d5:
                    3e:8e:d3:60:f0:b9:ff:75:a0:b1:f9:fa:5e:59:55:
                    9a:d0:76:af:45:f8:26:34:e0:e0:2d:af:be:f0:4b:
                    c3:aa:eb:5f:c1:26:00:34:c9:fd:d1:60:17:2b:cc:
                    81:11:82:8d:14:65:54:43:02:c2:b5:a4:3f:a7:d6:
                    a0:15:d4:da:5c:c0:54:cd:15:ab:ab:62:4a:d8:2f:
                    aa:dd:05:5d:41:e2:60:3c:de:d3:8c:ce:79:06:e5:
                    5e:d0:a9:b5:b9:bb:c2:95:90:a0:7f:3d:0a:20:ff:
                    6b:a6:e2:43:0c:bd:50:2f:9a:81:cf:ba:00:d2:17:
                    ff:a1:2a:e5:b2:91:57:1b:d3:56:a6:28:49:70:eb:
                    8b:34:47:1f:de:e4:33:3a:db:9e:bc:54:87:0c:a6:
                    e8:41:06:0d:55:50:29:f0:f4:86:6b:06:ae:6f:e7:
                    f9:dd:43:a1:f5:3a:b1:f2:27:1d:88:1e:12:bc:a2:
                    7c:b1:aa:c6:b5:9a:5f:f9:d4:bd:01:ca:e4:6b:c4:
                    88:cc:9c:7f:18:65:c6:e5:a6:86:b6:6c:36:16:38:
                    25:f6:ea:cf:e5:94:b0:e9:7c:cf:d7:05:e6:e9:fc:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:CA:23:33:BE:68:9D:5A:52:17:2F:8B:4D:62:8A:27:78:6B:7F
            X509v3 Authority Key Identifier:
                keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/7CCBF066A2F811F09235B919C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.124.0/24
                  202.20.63.0/24
                  202.37.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:22:9a:2c:c3:e1:6f:df:7e:be:1a:b8:df:c8:eb:bc:45:28:
         92:31:84:bd:d2:91:81:ef:a9:73:39:89:8c:ff:73:9d:c5:0c:
         7b:9f:bf:08:09:0c:21:0a:80:4c:a5:20:6b:c2:99:d4:eb:55:
         59:e8:30:f9:e5:4a:2a:f3:42:0f:50:6e:24:6b:c9:b3:11:42:
         d0:14:27:be:82:c3:04:27:48:3b:c7:97:39:ea:44:57:1c:85:
         5a:89:62:e2:e1:0a:79:bc:20:0d:b7:c7:9d:cc:b9:e9:25:75:
         40:26:36:4c:fc:5a:53:0d:6b:24:48:94:9e:aa:61:ba:bf:32:
         09:19:7c:bb:99:9a:bd:31:e7:1e:96:1e:47:93:2d:32:a6:74:
         0e:ef:e6:3a:27:3c:eb:e4:72:07:e0:a1:34:5c:26:2a:4f:91:
         21:e5:f5:fc:b6:15:c7:73:38:1a:3c:d5:ef:c4:9e:85:b5:1a:
         7c:bb:02:f5:8b:97:b8:a6:83:92:c2:9d:bb:d7:cd:ab:ff:02:
         16:88:b8:f6:0c:61:3e:39:e0:eb:7f:b2:b7:6f:90:83:a5:82:
         34:e0:5b:65:5f:14:fe:12:81:e0:ad:f2:37:9d:97:c0:13:8a:
         7b:d2:34:98:47:00:62:f6:51:54:47:8a:a7:0c:10:07:e8:06:
         64:f4:d1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:55 2026 by rpki-client