Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2B2C075023EA11F186E876B5A0833773.roa
File:                     2B2C075023EA11F186E876B5A0833773.roa (raw, json)
Hash identifier:          xcnqZbBOsHmB7ppjhES5aXJd6D3g4yk2+3u2L+zmIqM=
Subject key identifier:   F8:76:E2:3C:C5:B8:34:EE:FB:7E:DF:FB:E6:51:14:CF:E8:0F:EE:02
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3790
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2B2C075023EA11F186E876B5A0833773.roa
Signing time:             Thu 19 Mar 2026 23:20:08 +0000
ROA not before:           Thu 19 Mar 2026 23:20:08 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     149280
IP address blocks:        175.29.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 14:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14224 (0x3790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Mar 19 23:20:08 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69bc84a8-c075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:e5:88:6b:92:f4:ec:66:cd:7c:80:d4:bf:
                    50:86:dc:4c:b4:25:1a:58:4b:3d:d8:c6:f8:d4:b3:
                    f7:b3:7a:18:a1:b2:f7:8e:09:0e:8c:88:1f:bb:88:
                    89:7c:94:3c:f3:aa:93:8e:6f:0f:e3:ed:93:d5:36:
                    1a:62:eb:53:22:2d:24:22:db:9c:8c:92:78:84:43:
                    fc:48:df:71:54:0b:45:26:d9:2d:89:e0:5d:82:c4:
                    43:bc:6b:8f:98:a1:b1:27:62:6a:94:fb:cc:29:cb:
                    2a:46:e3:a1:56:17:c2:82:fa:0f:9e:1f:ec:54:34:
                    ac:f0:48:37:0e:6a:f4:11:47:2c:90:dc:30:a1:0d:
                    85:d2:19:68:90:8e:01:91:9a:aa:14:b2:d6:16:6b:
                    92:e5:40:37:14:e3:f9:7d:44:99:f6:2a:49:6f:d1:
                    4b:ba:24:61:a9:a1:5f:43:11:b9:9d:7c:1f:9e:0f:
                    0d:0a:bb:05:5f:36:d1:7e:d0:25:8c:50:e7:d2:e9:
                    07:f0:db:c4:f9:14:0d:4e:9a:35:e4:b7:5c:82:0c:
                    e6:39:f6:c4:ba:d7:5f:89:82:01:79:40:79:9e:69:
                    f2:b2:19:5b:16:68:0c:11:57:58:ac:cc:54:87:64:
                    1e:aa:3b:bc:57:23:16:f6:74:b5:79:41:11:8b:a2:
                    75:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:E2:3C:C5:B8:34:EE:FB:7E:DF:FB:E6:51:14:CF:E8:0F:EE:02
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2B2C075023EA11F186E876B5A0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:3e:c6:3b:e9:fc:04:a8:04:4c:b3:b2:db:98:8e:bd:9d:25:
         11:d6:e6:a5:85:b1:46:b6:7f:52:d2:08:63:03:6a:15:95:1a:
         e3:6b:0f:db:a1:c2:eb:88:ab:d4:48:94:a1:9a:57:84:f8:b4:
         07:0b:8d:50:7b:4e:0a:25:09:0e:59:95:d6:2d:ed:b0:c9:e9:
         80:d4:c7:c9:fb:bd:c8:d9:89:78:3d:9e:c1:06:72:31:6d:08:
         5f:d2:b9:44:b3:4d:9b:79:b9:84:37:1f:9f:91:bb:dd:65:61:
         fe:2b:bd:86:37:e4:ec:bb:5b:27:20:ab:39:0a:30:60:bd:2f:
         f4:63:91:85:05:b6:47:90:00:74:a1:9b:1f:42:a5:4f:9b:dd:
         42:47:bd:9e:7a:d0:fb:cf:49:de:bc:24:33:c7:7f:f4:77:e2:
         57:bf:fb:a3:9d:f6:61:2c:c9:5b:28:31:41:83:c3:9a:56:a7:
         c7:4f:04:63:73:4d:2a:21:57:81:6c:4e:7a:5c:33:39:e6:18:
         ea:79:0e:e6:92:de:1a:85:15:b6:51:4e:15:88:47:35:24:dc:
         f1:12:9e:db:6e:9e:a9:9c:b4:1f:ce:88:33:ec:b9:51:50:68:
         97:af:70:29:da:2c:be:d9:d1:2c:26:f1:e7:47:71:91:f5:00:
         f8:eb:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 20:16:06 2026 by rpki-client