Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
File:                     332F710683A611F0948BAE55C4F9AE02.roa (raw, json)
Hash identifier:          4i56R5UBMFfjVokEBOMJ2cgZUEJehilonHEw+1OJFbg=
Subject key identifier:   1B:62:82:AE:A1:7C:E7:A8:10:74:3F:38:54:AC:89:DF:26:F6:C1:CB
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C6F
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 00:19:44 +0000
ROA not before:           Thu 02 Apr 2026 00:19:44 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        61.251.182.0/24 maxlen: 24
                          101.53.64.0/24 maxlen: 24
                          101.53.73.0/24 maxlen: 24
                          175.176.130.0/24 maxlen: 24
                          175.176.133.0/24 maxlen: 24
                          203.173.98.0/24 maxlen: 24
                          203.173.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 14:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15471 (0x3c6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Apr  2 00:19:44 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69cdb620-ef95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:33:59:41:e8:4c:97:d5:0f:07:3f:9a:25:
                    ec:1f:4e:0d:bf:a1:d4:de:b5:d2:18:b2:14:62:f8:
                    1e:ff:a1:33:79:fe:d7:37:c5:4f:02:76:bb:fc:06:
                    dd:cd:cc:7b:df:03:97:ce:72:27:d3:c0:39:a9:31:
                    92:c3:e4:b2:3f:a1:c3:b0:35:ff:65:e5:15:66:42:
                    5a:2a:b3:5a:e8:55:0b:ae:16:0d:c5:d8:6a:8c:06:
                    b2:20:37:b2:96:45:c6:c3:d0:1b:7a:23:2a:9b:3c:
                    38:60:7e:11:43:af:bf:e5:c9:e7:c6:2e:60:38:41:
                    9f:5f:ee:04:7d:c8:9f:b3:9f:54:0a:15:83:52:ea:
                    4f:46:7e:e3:37:25:f9:fd:8e:46:61:ce:2a:5c:93:
                    5e:d3:68:8e:03:a3:a2:7a:9e:79:cc:13:e3:79:cf:
                    a1:db:82:5c:a6:f9:84:59:67:83:a7:c7:f1:93:a9:
                    bb:80:07:a5:0a:6e:15:f7:9a:c1:12:ec:36:eb:18:
                    56:e7:9c:30:0d:03:bc:bb:c0:1a:5d:23:5c:0a:1a:
                    cc:f7:08:d5:f7:3b:f5:9f:43:93:11:6f:9b:b3:e9:
                    d9:58:7a:c0:76:af:e8:d6:08:10:d5:8e:dd:69:86:
                    0d:ed:e7:5c:a2:1d:f4:57:e9:83:7f:56:04:e1:cc:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:62:82:AE:A1:7C:E7:A8:10:74:3F:38:54:AC:89:DF:26:F6:C1:CB
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.251.182.0/24
                  101.53.64.0/24
                  101.53.73.0/24
                  175.176.130.0/24
                  175.176.133.0/24
                  203.173.98.0/24
                  203.173.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:e1:37:4b:e3:42:50:4f:72:6a:44:f3:2b:bf:92:ed:64:
         d0:5d:cf:4f:3c:30:79:bb:e6:1e:bd:d4:ef:03:ac:9b:cf:91:
         db:81:b7:4c:e4:36:22:48:6a:60:24:fa:dc:ba:2a:d6:ca:38:
         2a:76:c0:29:20:fe:bf:df:ef:9e:1d:1e:36:9f:22:f5:50:1d:
         ab:04:04:57:4a:da:49:15:1e:a3:26:8b:8a:7d:a9:29:8a:1c:
         7a:12:6a:4c:e0:fc:b4:1f:93:3e:28:6f:88:82:4f:17:84:a1:
         fc:65:01:62:db:5a:d2:5a:47:d2:87:e1:88:0d:b0:9c:d7:25:
         c8:fe:ef:01:0e:e5:ea:08:2c:47:d9:62:05:05:a3:9b:ea:82:
         dd:e4:7c:de:f6:42:9a:39:19:f0:a1:dc:21:c0:8b:a4:77:70:
         83:61:2b:e8:af:2b:f4:c5:9a:8b:7d:b1:0b:03:86:52:c3:07:
         da:ed:af:65:ec:5d:55:65:c7:2f:84:17:77:07:41:7f:18:71:
         bb:d8:69:7a:7c:98:37:47:1e:a9:6e:81:a9:38:aa:9e:a0:8d:
         7d:29:c0:b6:0d:44:aa:d3:e4:e6:0e:ef:28:4f:ee:09:58:95:
         12:91:e0:96:25:7a:07:f5:38:20:73:34:f5:1f:c3:10:42:44:
         b7:ab:fc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 01:17:13 2026 by rpki-client