Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3E07A36C86F411F1BD8261F36211F970.roa
File:                     3E07A36C86F411F1BD8261F36211F970.roa (raw, json)
Hash identifier:          BGvqc4UsU530k2dBpTtvxP8tk2t0R4+qf5A7cpULha0=
Subject key identifier:   3E:F2:28:9E:2F:DB:50:64:F9:39:47:D2:A5:4F:97:C0:F2:4C:22:D8
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3DB3
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3E07A36C86F411F1BD8261F36211F970.roa
Signing time:             Thu 06 Aug 2026 15:11:53 +0000
ROA not before:           Thu 06 Aug 2026 15:11:53 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     202036
IP address blocks:        49.128.222.0/24 maxlen: 24
                          112.196.199.0/24 maxlen: 24
                          112.196.215.0/24 maxlen: 24
                          124.66.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 14:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15795 (0x3db3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:11:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a439-194a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:ee:61:12:b1:e7:e0:c7:48:74:8c:5c:97:
                    3f:62:41:60:3d:31:bb:e7:3d:8d:ee:2c:85:95:76:
                    3e:a9:54:53:bc:49:36:2d:62:21:53:39:c0:d7:bc:
                    34:2a:14:72:7f:a4:95:c7:40:f5:48:f2:06:d0:e4:
                    a9:b0:d8:23:b8:4f:30:0f:f5:49:77:37:16:66:99:
                    0b:ab:06:c9:30:1d:12:a1:b1:2c:d6:d3:b7:00:67:
                    86:67:70:fe:50:c0:63:f6:f8:b2:13:15:1a:f7:8c:
                    90:28:ed:d1:6b:80:ac:57:f9:df:dd:ef:38:09:26:
                    5d:8a:d5:12:ef:97:1d:a4:2e:5a:1b:76:e9:19:44:
                    00:36:45:9c:96:54:65:78:0b:6b:6d:4b:d0:33:24:
                    68:f9:26:e8:43:31:31:58:e5:db:27:3b:51:59:27:
                    7d:e8:d0:96:67:c7:7c:85:35:fd:61:7e:ff:e3:7f:
                    2b:76:8f:61:75:51:1b:ba:57:9e:ba:ed:4c:8b:6d:
                    db:54:95:e4:0e:b2:40:fb:cc:9f:32:06:10:d3:c4:
                    cf:3a:00:5c:d1:61:1a:9a:19:03:57:ae:db:5f:44:
                    bb:bb:60:cb:4d:fb:83:79:76:90:5d:67:3c:08:09:
                    ab:8d:1b:89:f5:c6:24:87:82:10:7c:97:53:c9:cb:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F2:28:9E:2F:DB:50:64:F9:39:47:D2:A5:4F:97:C0:F2:4C:22:D8
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3E07A36C86F411F1BD8261F36211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.222.0/24
                  112.196.199.0/24
                  112.196.215.0/24
                  124.66.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:02:4d:0e:3e:f3:20:4d:30:40:c4:1a:0a:b1:9c:f1:67:98:
         ee:c3:41:03:0b:09:e1:c7:2d:67:1f:0b:5e:59:0a:34:d2:7b:
         ba:16:e4:a5:4a:34:9a:31:61:3b:2d:3b:30:dd:2b:04:c0:ab:
         67:d8:0d:0a:b9:67:8b:5c:5b:06:03:42:70:53:c1:f8:15:ac:
         83:e6:2d:ad:92:97:09:88:ca:82:b4:48:72:7e:1b:ce:2a:21:
         52:2b:a4:da:ff:34:5f:d8:de:bd:69:d0:f2:69:54:95:5c:6f:
         63:0a:3c:37:b1:66:0e:c4:7a:10:27:8e:a0:28:de:6f:34:82:
         e7:f0:1a:53:e0:33:13:3f:84:d9:36:f9:5a:bb:89:61:14:cc:
         26:57:3f:23:d8:a8:47:24:c9:be:60:fe:b7:b8:50:23:b0:35:
         80:29:e6:7e:cc:b2:57:14:aa:36:1f:23:42:a4:f7:60:50:45:
         9d:1d:7e:cc:d6:c5:80:2f:06:0c:53:9b:db:bf:ff:59:d7:7e:
         f1:5f:43:2b:f0:c8:e8:41:b3:ee:8b:f5:c1:6b:96:09:af:41:
         69:36:1a:d1:cb:3a:68:16:3b:1a:2d:8f:6e:dc:ff:c1:96:ac:
         99:29:62:d9:c2:fe:68:0b:1c:3a:bb:d0:ae:7e:77:ff:fa:df:
         3c:b7:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:21:48 2026 by rpki-client