Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
File:                     26A143C291EB11EF8A024083C4F9AE02.roa (raw, json)
Hash identifier:          qOuOZrrZglkih59X/Pjz7efqStftFhfdFn50wlzJXt4=
Subject key identifier:   53:A8:E6:B5:06:47:73:A4:02:44:EA:4B:57:BA:D4:5F:CC:C4:A8:26
Certificate issuer:       /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial:       37ED
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:18:01 +0000
ROA not before:           Tue 30 Dec 2025 15:10:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        125.19.17.0/24 maxlen: 24
                          125.21.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14317 (0x37ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
        Validity
            Not Before: Dec 30 15:10:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490e9-4aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:9c:13:6f:d0:c2:8d:2c:a1:0b:4b:6f:15:
                    3f:b7:d1:66:d7:ab:de:f3:0d:e9:d5:00:d4:c1:4c:
                    a6:4a:fe:94:bb:93:33:73:62:f5:e3:46:a8:4a:db:
                    d0:da:c2:3c:f8:b5:35:c1:ce:d3:e2:80:08:f7:f7:
                    e7:97:25:25:9e:30:6e:db:f7:d3:c7:ea:13:39:ad:
                    0d:f3:6b:47:96:f8:a1:cc:e8:ef:87:6a:8e:44:c5:
                    4a:31:4a:af:89:79:c1:5f:b4:a4:cf:b8:4e:65:1b:
                    16:28:66:d9:04:cb:59:f0:18:de:28:a0:41:91:55:
                    88:bc:0c:ad:d5:c5:14:0d:7d:dd:b6:34:5a:ab:68:
                    74:d6:2c:c4:c3:cd:a3:c3:0b:e2:c9:ad:7f:00:ec:
                    c7:17:8b:b2:86:4e:32:15:60:d5:80:f8:6b:3b:52:
                    e7:31:4b:f9:dc:61:12:dd:e9:a0:ef:1a:2a:4c:83:
                    4e:a5:2f:4e:6f:0e:1a:d4:b3:4b:5a:9a:0c:1f:e4:
                    73:32:94:4b:2d:90:95:a0:72:4b:4c:08:6f:ea:2c:
                    a9:cc:0b:f1:0e:df:a0:c1:a5:8d:e9:ac:71:c6:38:
                    98:36:43:b1:65:69:49:fa:e9:ec:48:c3:db:f6:a5:
                    55:a6:4f:6b:17:77:3d:57:79:4b:4a:e9:bf:75:0a:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A8:E6:B5:06:47:73:A4:02:44:EA:4B:57:BA:D4:5F:CC:C4:A8:26
            X509v3 Authority Key Identifier:
                keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.19.17.0/24
                  125.21.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:31:64:f3:94:c2:76:82:3c:fd:57:71:6e:50:95:31:bb:
         23:13:aa:33:f3:8f:ec:41:e5:d5:d4:43:06:ca:59:84:06:c6:
         01:a8:ba:81:41:ed:3d:23:52:7c:d6:8e:2f:7b:09:51:9f:22:
         47:01:7f:cf:40:d7:e8:05:22:e6:aa:e8:58:6b:d1:3e:15:70:
         42:ce:78:d2:c0:22:1f:5a:14:50:8c:5b:bd:29:96:7a:91:b7:
         aa:7a:21:43:e9:b9:1b:b0:0f:f9:55:1f:83:45:a0:e3:6b:a5:
         37:6b:9c:8c:df:bf:aa:08:c0:54:89:46:70:ae:24:01:61:90:
         8b:6e:2f:e4:3a:e8:7b:0c:d5:1a:bc:00:82:1a:b2:24:5c:7c:
         1d:8b:0e:81:d3:2b:55:c6:71:6d:7e:f7:47:99:7b:67:68:12:
         5f:8f:a2:8c:d4:15:62:28:4d:27:a0:61:34:05:e7:71:f8:a0:
         9a:39:1e:3c:b8:22:cb:c2:43:b3:44:96:ee:25:e0:8e:99:81:
         ac:16:05:8f:88:bd:3a:6d:78:15:64:df:1a:3d:ef:9f:56:8a:
         45:31:5c:7f:12:1b:24:b7:84:72:c8:f4:ef:6e:b1:b9:99:71:
         dd:75:c0:57:eb:9a:d9:ea:6a:50:45:f7:a3:e5:e8:0c:04:b6:
         a6:f4:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:21:42 2026 by rpki-client