Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa
File:                     B364F656C0AD11EEACCA627AC4F9AE02.roa (raw, json)
Hash identifier:          ABIzRnS9XvFxLIehdn3s265872TfVCUlGLIf7r900hs=
Subject key identifier:   99:D2:12:EC:25:8F:3D:D9:DD:88:63:A0:51:37:96:51:CA:42:BC:E8
Certificate issuer:       /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial:       0B1A
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:57:21 +0000
ROA not before:           Mon 19 Jan 2026 02:42:21 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     64079
IP address blocks:        61.29.244.0/22 maxlen: 24
                          61.29.254.0/23 maxlen: 23
                          61.29.254.0/24 maxlen: 24
                          103.211.192.0/24 maxlen: 24
                          103.211.193.0/24 maxlen: 24
                          146.196.78.0/23 maxlen: 24
                          2400:9380:9265::/48 maxlen: 48
                          2400:9380:f000::/40 maxlen: 40
                          2400:9380:f100::/40 maxlen: 40
                          2400:9380:f105::/48 maxlen: 48
                          2400:9380:f14f::/48 maxlen: 48
                          2400:9380:f1bc::/48 maxlen: 48
                          2400:9380:f1ff::/48 maxlen: 48
                          2400:9380:f200::/40 maxlen: 40
                          2400:9380:f245::/48 maxlen: 48
                          2400:9380:f2ff::/48 maxlen: 48
                          2400:9380:f300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2842 (0xb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
        Validity
            Not Before: Jan 19 02:42:21 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47e01-4a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:88:42:9d:3e:df:77:2d:59:ec:7b:53:6b:
                    05:ec:75:69:09:af:3b:bf:44:ad:20:a9:ab:91:35:
                    97:70:bd:b3:8e:ca:dd:48:89:ac:e4:c1:67:c9:5a:
                    07:3a:39:eb:64:16:92:35:77:1c:5c:a0:c2:e5:57:
                    2b:81:f0:1e:46:1e:3c:65:6c:c2:d4:1e:78:97:7f:
                    a8:fe:b4:ff:5f:b3:9d:f0:1f:c4:e0:84:af:60:73:
                    55:76:ac:b1:23:f5:32:26:6d:d7:ed:24:2f:12:d6:
                    ff:f0:04:6a:af:0c:20:cb:3b:54:b7:fe:8f:9e:f2:
                    60:60:b5:ff:44:6d:fa:3b:30:72:51:81:29:df:bf:
                    66:95:63:7b:19:61:f4:44:79:1c:40:94:55:c5:8e:
                    4e:58:89:23:b6:7f:56:ea:1e:5d:13:a2:61:f9:e0:
                    d2:06:25:d8:90:6e:2f:d2:03:85:0b:50:6c:7c:f2:
                    7f:42:e9:88:3f:07:5a:98:36:f0:cc:83:b8:9e:34:
                    97:fa:28:04:97:9d:53:e1:18:0d:09:b5:22:f5:fc:
                    b7:a4:d2:d7:5e:74:b5:ae:81:4b:13:53:60:06:d5:
                    2a:bc:84:03:5b:5b:5e:3a:7c:b5:a6:e2:92:a5:e0:
                    62:7e:db:2e:2a:34:72:d8:ea:5c:d4:88:61:00:61:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:12:EC:25:8F:3D:D9:DD:88:63:A0:51:37:96:51:CA:42:BC:E8
            X509v3 Authority Key Identifier:
                keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.29.244.0/22
                  61.29.254.0/23
                  103.211.192.0/23
                  146.196.78.0/23
                IPv6:
                  2400:9380:9265::/48
                  2400:9380:f000::/38

    Signature Algorithm: sha256WithRSAEncryption
         84:40:84:53:b5:d3:61:05:70:a2:09:b1:7e:78:49:12:ec:ee:
         57:4a:80:82:b1:01:32:fa:ee:c8:87:2d:f3:80:af:fb:b5:70:
         c9:91:3f:82:c0:1a:04:ed:12:f0:c8:fd:86:a6:92:e4:2b:da:
         39:13:42:4c:d9:cb:b2:a4:05:b6:3b:cd:d6:98:4f:0e:9c:82:
         18:b1:05:81:38:2d:6d:e1:0d:ef:12:6b:ff:10:bf:c1:e8:bd:
         ac:7d:1c:39:a2:b3:63:16:65:99:1c:51:ef:84:18:a8:a6:cf:
         72:1b:3a:80:bb:c9:2e:d3:53:44:5c:ba:e6:6b:de:10:b9:08:
         8e:77:40:9c:01:cb:a3:06:91:66:c3:32:90:3a:25:e7:cd:4d:
         de:d6:70:21:51:45:ca:d7:fb:11:c1:06:9b:56:a2:41:08:0e:
         42:e3:92:05:82:f0:18:8e:06:38:2f:21:6e:17:91:8e:2b:03:
         5e:d8:b9:1e:82:6e:8a:fe:57:0d:18:2f:14:d4:0b:db:46:32:
         69:78:c9:2a:c9:49:cd:8b:ff:05:86:78:7d:c3:51:41:28:9b:
         5f:03:52:06:bf:1d:12:1f:f7:57:50:cd:28:82:d1:5a:f1:0c:
         a1:78:93:f7:e0:24:da:53:59:4f:c5:61:30:58:b4:65:89:84:
         f4:c5:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:39:24 2026 by rpki-client