Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FAF6D732CD3811EDBD37B674C4F9AE02.roa
File:                     FAF6D732CD3811EDBD37B674C4F9AE02.roa (raw, json)
Hash identifier:          seQ8uVAh35aq3M/igCKAVdNsc4JEzAd3tV9hIjsKA/c=
Subject key identifier:   7E:9C:7E:B3:F8:8E:5B:F6:7F:68:2E:3F:95:60:59:DE:CB:54:99:16
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C21
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FAF6D732CD3811EDBD37B674C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:33 +0000
ROA not before:           Fri 04 Jul 2025 14:50:44 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     45996
IP address blocks:        110.172.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 01:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15393 (0x3c21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul  4 14:50:44 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4af09-3598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:52:96:03:e2:0f:a6:7e:8a:2c:5b:8b:b5:
                    c5:d5:b6:8d:1a:46:3b:56:2b:e8:d2:a8:c0:b2:10:
                    6b:12:a7:2d:b2:53:cc:75:b9:e8:dc:b1:6b:c4:ed:
                    d1:61:6d:a3:8b:d4:46:93:2f:64:11:82:d7:5c:71:
                    4e:96:bb:81:d8:37:0b:1f:77:b9:99:8f:38:99:4f:
                    80:b1:dc:f5:00:79:1f:d2:f5:c9:b5:02:5a:a0:fc:
                    a6:4c:54:4d:61:7b:88:6b:bc:a6:f0:5e:09:d1:d7:
                    29:6e:40:24:36:ef:d5:4b:81:80:65:25:d5:e7:88:
                    a7:7a:e3:e5:20:e2:ce:d3:5a:5e:ed:6c:98:75:0e:
                    c1:88:cc:1e:56:27:b4:f4:5c:af:ff:bc:b2:9d:2e:
                    c8:60:ba:99:96:38:40:e6:be:02:92:f0:bf:5a:f5:
                    fe:7d:16:1c:5e:c3:c0:c1:ce:23:2d:98:81:4e:bb:
                    5f:14:06:97:52:1a:99:63:c4:88:1b:54:96:65:3c:
                    f5:22:31:cd:cb:79:60:05:54:c2:89:80:9d:8e:f6:
                    12:ff:a3:78:b7:b7:2b:42:db:2c:3d:91:c6:af:19:
                    e3:f5:c6:a4:6c:85:5a:5a:8a:e3:89:e1:a8:9f:0f:
                    cc:d4:20:d5:da:62:4a:22:e4:b4:03:a6:d5:db:37:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:7E:B3:F8:8E:5B:F6:7F:68:2E:3F:95:60:59:DE:CB:54:99:16
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FAF6D732CD3811EDBD37B674C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e0:2f:3a:31:6e:c4:2f:42:9d:c4:94:d2:a4:58:6b:73:08:aa:
         48:05:62:18:8f:95:2c:86:a3:32:2f:1b:4d:ca:ba:a3:92:28:
         8f:81:ca:e3:d3:be:45:85:a9:8e:ac:fc:54:40:e2:5d:b9:21:
         47:6a:58:fe:cc:00:5b:3a:b0:eb:1f:bd:cf:7e:fe:7f:ff:c0:
         28:a0:e7:61:49:c1:0a:af:d8:2f:46:ab:c4:9b:95:0d:ce:b2:
         44:02:37:9c:e1:69:c7:49:d0:32:66:28:37:10:01:ef:cf:f9:
         99:df:70:25:93:dc:2e:37:fc:9c:95:dd:a6:dd:f3:94:90:c6:
         69:53:35:48:d6:7b:d8:8e:0f:49:5c:e7:ab:78:6f:e0:5c:b7:
         80:62:d7:18:c0:64:46:45:a6:c0:be:0b:f7:64:86:60:0e:8a:
         f4:9e:a2:1c:19:fa:b5:80:df:a9:c6:b8:e2:2f:90:f4:0d:46:
         ca:37:75:bd:09:14:87:ae:ab:3e:62:76:8b:58:08:08:18:19:
         b2:5b:55:94:15:b0:47:84:19:79:9b:8c:e9:af:b6:03:1c:fb:
         01:6f:fe:e5:18:3a:5d:c8:cb:2b:41:15:7e:15:1b:0c:41:6a:
         fc:c9:67:63:74:8e:d7:2b:48:f5:de:e6:b1:f1:cd:c6:d1:4e:
         ed:5d:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:22:25 2026 by rpki-client