Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa
File:                     3E122AE0876011ED84335D46C4F9AE02.roa (raw, json)
Hash identifier:          lMy4Wa3bZNfZogKIHMCZaFATHLOtC1FrGFIRZTmFan8=
Subject key identifier:   91:D8:47:E4:1F:F0:30:41:BB:E6:E5:69:DE:FC:7F:5D:63:54:D4:E3
Certificate issuer:       /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Certificate serial:       0257
Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:06:28 +0000
ROA not before:           Fri 09 Jan 2026 01:21:25 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        203.24.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
                          rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 01:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
        Validity
            Not Before: Jan  9 01:21:25 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a40fa4-5903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:20:71:31:eb:07:6f:0f:1f:df:d0:71:b0:9f:
                    62:f7:59:be:48:35:b4:64:24:e4:d2:84:85:33:4b:
                    3e:8b:37:c5:66:f3:c5:95:ba:19:a5:15:54:4f:44:
                    4b:f9:90:7e:9f:b1:7c:ce:2a:f5:a8:86:4d:8d:ab:
                    b4:8d:d6:89:32:b1:c2:ed:7c:06:e4:3f:f3:55:ee:
                    44:f6:73:20:11:9a:3a:3a:9a:5c:5a:f4:ed:72:85:
                    fa:13:fe:8e:43:4d:14:af:35:c0:f8:f7:57:20:55:
                    13:70:73:51:88:6e:26:60:f7:88:26:d8:38:a9:45:
                    dd:19:c5:67:a3:6e:12:da:e2:07:b6:ec:d7:78:a3:
                    a2:e9:5c:c7:51:b3:6b:10:be:ac:7b:4a:c3:7c:a5:
                    39:61:65:53:75:c1:8e:35:8d:8f:23:a0:65:ce:d1:
                    5d:79:d5:c7:6e:92:b0:ad:65:87:4f:af:07:cb:70:
                    d3:3e:61:c0:5e:c7:b6:48:96:74:63:b6:99:8a:cd:
                    83:75:e2:0b:3b:05:2e:57:60:b7:08:9b:7d:7d:87:
                    9a:f5:d2:83:d6:ef:c5:a4:0e:f1:5d:1b:4f:07:88:
                    92:9d:9b:e5:53:c2:54:38:1b:dd:0c:be:b9:7d:7e:
                    29:db:90:ff:20:c6:9f:de:e4:07:57:13:43:09:a3:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D8:47:E4:1F:F0:30:41:BB:E6:E5:69:DE:FC:7F:5D:63:54:D4:E3
            X509v3 Authority Key Identifier:
                keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:51:34:ed:43:25:8e:b6:01:41:f8:17:8d:ac:39:b1:41:22:
         de:50:3a:32:da:b3:54:a5:2b:47:b5:09:42:2f:16:db:04:57:
         2c:5a:0a:dd:46:2c:2c:9a:68:94:6a:64:0b:9f:2d:a6:e8:ef:
         8f:93:f3:6b:6b:0b:6d:de:81:6e:c9:71:7b:b0:f7:16:09:96:
         32:6b:fc:23:f6:f2:20:8f:ab:96:01:7c:d7:1a:ec:93:cc:e4:
         d2:04:f2:7e:13:04:cb:af:95:8a:95:86:42:74:fb:68:74:cd:
         a5:8a:1e:5d:31:87:3a:3e:0f:b2:29:ef:b2:8f:d4:0c:77:f4:
         33:93:b6:60:4a:85:6d:23:7e:e6:2f:fb:33:f1:98:14:fa:a3:
         8b:0b:62:02:48:4a:14:f8:8f:c2:60:ad:3e:ec:71:2f:71:7f:
         a1:c6:27:13:88:9d:9e:4a:40:f4:19:eb:d1:a0:66:d2:41:09:
         d8:30:cc:b0:a4:1c:04:7d:2a:98:94:70:80:3c:9e:15:49:88:
         c8:fe:a2:05:36:f7:82:53:ef:56:84:b1:94:ef:ce:06:1c:93:
         35:ba:85:0d:e6:84:6f:f3:d6:43:ec:bb:d0:bd:75:ee:45:8a:
         4b:66:c5:96:5f:4d:4a:45:45:d7:12:30:69:34:d9:f5:cd:39:
         8d:1a:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:21:59 2026 by rpki-client