Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/4E7FF5F8CF4011F093323D50C4F9AE02.roa
File:                     4E7FF5F8CF4011F093323D50C4F9AE02.roa (raw, json)
Hash identifier:          tKUyqADQNHpmGouxD/J8Dml9YhqA+hcHH8c4dolMR/8=
Subject key identifier:   1A:7F:99:26:B9:4F:5D:78:A8:5D:3D:D1:B5:24:C1:6E:86:EB:C5:A9
Certificate issuer:       /CN=A915AC36/serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Certificate serial:       35
Authority key identifier: F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/4E7FF5F8CF4011F093323D50C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:39:44 +0000
ROA not before:           Tue 02 Dec 2025 05:32:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        144.79.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
        Validity
            Not Before: Dec  2 05:32:35 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5a12f-5818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8a:8c:a9:12:7e:ee:df:45:1e:4c:7b:11:13:
                    60:30:1f:ad:09:b0:bb:4f:83:2b:aa:ca:b3:be:9d:
                    1c:60:6e:57:73:7a:83:ae:7b:2f:09:9e:5c:19:d0:
                    ef:c4:53:2a:c9:d9:18:bb:6a:a7:de:89:a4:13:64:
                    57:43:19:f2:de:cf:2d:de:d9:a9:48:e6:dc:e9:75:
                    bc:4c:16:80:d6:a3:69:50:1a:c0:ae:22:84:39:08:
                    bf:7f:a3:ea:2b:c6:e5:78:e8:74:35:7d:b0:14:44:
                    68:6c:d0:b7:10:f6:ad:ab:36:33:04:b0:97:f0:4e:
                    15:ca:d1:0d:f5:f5:55:67:61:fc:93:4e:68:5b:5c:
                    5f:df:f2:92:de:94:5b:82:14:d6:34:4c:6f:29:ff:
                    1d:7a:08:a1:c4:74:c3:f6:f7:36:bc:12:7a:08:28:
                    97:41:2b:1b:2d:a3:8c:bd:65:36:c7:63:cf:3a:5c:
                    b8:cb:7f:49:73:ea:02:70:c8:5e:f6:1b:7e:b4:27:
                    32:f2:d7:0c:48:02:fa:43:8c:96:81:33:04:b8:63:
                    5c:84:34:78:9c:8c:d3:c0:e9:eb:b7:0f:73:ce:1d:
                    e3:02:96:dd:18:8c:14:49:51:b0:4b:0a:0a:d7:a2:
                    39:51:0c:87:0e:6b:4e:7c:05:cf:86:d2:ad:71:c3:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7F:99:26:B9:4F:5D:78:A8:5D:3D:D1:B5:24:C1:6E:86:EB:C5:A9
            X509v3 Authority Key Identifier:
                keyid:F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/4E7FF5F8CF4011F093323D50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:51:90:76:2d:69:78:c3:eb:90:fa:b8:64:30:e9:06:35:18:
         e4:a8:2f:34:98:7f:d1:e9:fe:83:05:6a:24:a3:e4:22:29:7c:
         39:76:a0:40:ee:e6:01:8c:39:28:6a:8b:ee:62:5a:e3:f5:83:
         15:58:cf:2f:22:69:f6:4f:56:0c:83:05:ba:db:68:c2:14:dc:
         f0:ab:e7:0f:1a:0e:4b:be:05:ad:33:cb:37:b0:65:5e:d0:3f:
         da:3b:4d:9f:2d:45:0a:2b:d5:cf:82:08:1e:e3:a4:4b:c9:6b:
         3a:2b:a3:f3:d2:14:01:34:15:63:da:57:1e:f8:87:8c:bd:a1:
         90:ef:aa:57:ba:2e:dc:b9:4c:93:3b:1b:6d:bc:c3:e2:67:94:
         27:a6:9b:15:db:a7:d0:20:d8:d3:d0:a2:be:2c:c5:19:9a:9b:
         f7:d7:18:3b:68:a8:e0:9d:55:92:0c:2d:74:eb:1e:6a:60:62:
         23:86:0c:bd:f8:c0:b9:33:10:99:a7:6d:ce:f7:33:bd:7d:f4:
         33:ec:6a:8f:9a:93:7b:0d:2c:72:21:a1:04:35:16:9e:ab:29:
         04:8e:d1:30:b0:ae:5c:b4:b1:8e:fd:4f:75:d6:c5:88:d0:e0:
         6f:8f:4a:7a:3a:80:9f:04:2a:32:52:de:7e:28:66:eb:73:0b:
         c7:7b:b8:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:47:47 2026 by rpki-client