Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/F2C40E76FCCF11F08F91A5156B6F56BC.roa
File:                     F2C40E76FCCF11F08F91A5156B6F56BC.roa (raw, json)
Hash identifier:          hjtJk2OsTeC7305w9qgJUbXnV2reFWS44M7SvUt4IwQ=
Subject key identifier:   AA:2B:BB:F7:0C:9B:E6:BB:1A:47:18:75:04:68:55:74:13:92:FD:0A
Certificate issuer:       /CN=A91736F5/serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Certificate serial:       18
Authority key identifier: 13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/F2C40E76FCCF11F08F91A5156B6F56BC.roa
Signing time:             Thu 29 Jan 2026 05:04:11 +0000
ROA not before:           Thu 29 Jan 2026 05:04:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136396
IP address blocks:        144.79.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
                          rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736F5, serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
        Validity
            Not Before: Jan 29 05:04:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697aea4b-d23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:fd:f0:3b:ef:d2:c9:2d:46:1b:d8:a8:31:
                    90:5c:b3:0f:dd:83:76:91:82:c3:5e:24:35:67:07:
                    e8:f3:27:72:6b:5c:7f:38:1a:10:4d:83:66:5b:44:
                    1a:dd:88:c9:37:86:e6:6e:73:7a:9f:64:a7:81:c1:
                    79:15:2a:c8:e4:53:fd:93:2c:c8:24:ca:59:29:1b:
                    be:6d:2c:73:4b:23:a6:d9:7d:18:57:7b:88:a7:6d:
                    a5:2d:1b:d9:b5:9c:43:5c:05:10:4f:6e:4a:3a:78:
                    e8:5b:f5:9a:97:d5:68:60:7b:63:03:cd:d3:df:0d:
                    74:69:93:7a:36:23:ae:62:94:2e:7a:ee:2c:5c:d6:
                    3c:47:f8:7d:0b:03:a9:26:15:ca:f4:d4:06:c3:bb:
                    3f:82:7e:9f:e9:4c:d5:0d:40:4f:8a:d0:24:93:16:
                    09:66:95:44:18:f6:22:eb:6c:2d:5b:de:7b:f7:04:
                    20:0c:57:5b:95:cd:69:64:fb:e1:54:d2:e3:fb:fd:
                    87:15:f4:c6:12:be:1f:13:46:bc:34:70:a0:91:0c:
                    7c:fb:71:8b:4d:4d:60:91:aa:e2:58:64:39:9c:b8:
                    1e:79:5e:cc:74:7f:1a:9b:d1:12:1e:f0:ab:c6:ca:
                    fd:1f:9c:81:53:87:8c:b1:1a:b3:b4:25:c7:5a:bc:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2B:BB:F7:0C:9B:E6:BB:1A:47:18:75:04:68:55:74:13:92:FD:0A
            X509v3 Authority Key Identifier:
                keyid:13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/F2C40E76FCCF11F08F91A5156B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:39:e2:0d:8d:e0:2e:84:7b:72:63:98:a8:fe:93:d7:1b:
         f7:aa:e8:f8:94:cf:fe:dd:14:1f:96:fe:61:a7:29:8d:11:c6:
         62:d7:37:b7:79:76:34:41:24:90:b9:73:7e:8f:6c:b1:86:d8:
         23:1a:b2:f4:c6:f8:10:d7:b7:cb:eb:4e:8b:2b:f2:56:b0:a5:
         fd:0d:fb:70:9f:1a:df:34:49:81:52:b9:82:70:21:c2:0a:f4:
         27:3b:a6:60:de:da:97:87:77:34:fb:ef:f2:17:26:7d:3e:bf:
         77:e0:82:53:73:1d:2a:f5:d6:9e:cb:e0:a6:83:13:a8:9f:71:
         2a:8f:10:c0:e8:da:f0:52:62:16:8d:99:ea:49:cb:5d:5b:1d:
         9e:8d:b0:02:8e:54:03:cf:48:38:7d:0e:7b:b8:e7:34:8a:be:
         89:4d:e5:e7:0c:45:35:63:48:63:1c:cd:6c:78:18:95:e8:1a:
         cb:c2:7a:7e:7d:5d:99:33:8e:41:01:58:09:8e:fa:52:ca:93:
         35:d5:00:10:1f:03:f2:d8:d6:35:5e:57:ab:40:43:38:d0:ea:
         4c:e1:5c:a3:f6:ee:f1:21:44:5c:97:31:8b:c9:64:04:dd:11:
         ec:de:01:06:4f:10:0a:f3:43:a1:3e:02:45:a9:6f:52:96:4c:
         8e:1c:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:35:06 2026 by rpki-client