Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/46A6690EB41911EFA68E0826C4F9AE02.roa
File:                     46A6690EB41911EFA68E0826C4F9AE02.roa (raw, json)
Hash identifier:          dSWQcWQh3WBDm7Umv9mrfAGrAU2sU+zuXSmlYE9NSl8=
Subject key identifier:   E1:F7:4F:B3:DE:E9:7E:2A:3F:E3:DC:5B:BB:E4:AC:31:2C:C4:F1:F6
Certificate issuer:       /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Certificate serial:       F3
Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/46A6690EB41911EFA68E0826C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:15:14 +0000
ROA not before:           Tue 03 Feb 2026 06:28:18 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     17481
IP address blocks:        203.79.16.0/24 maxlen: 24
                          203.79.17.0/24 maxlen: 24
                          203.79.18.0/24 maxlen: 24
                          203.79.19.0/24 maxlen: 24
                          203.79.20.0/24 maxlen: 24
                          203.79.21.0/24 maxlen: 24
                          203.79.22.0/24 maxlen: 24
                          203.79.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
                          rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
        Validity
            Not Before: Feb  3 06:28:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a5a982-1366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:82:a9:c6:60:e7:43:99:76:d2:92:ce:e1:
                    09:f5:fe:95:f5:b0:2f:64:f0:ca:b7:86:4b:4c:22:
                    66:48:69:7c:ba:76:a6:f2:74:2e:f4:ad:75:24:4c:
                    bd:53:71:22:8d:f2:bc:05:67:72:ce:52:5d:9e:1a:
                    e1:d1:f5:84:10:1e:41:75:42:81:f9:cd:3e:57:23:
                    70:6a:09:92:72:5a:70:cb:19:d0:b5:1a:2d:c3:b6:
                    56:4e:f6:dc:38:3a:e2:da:8a:e9:d1:4d:04:cc:c6:
                    a9:60:f9:89:bb:2a:c5:79:ef:eb:4c:a2:ef:86:1d:
                    54:da:64:d5:bf:a2:e5:a5:ce:7a:79:60:54:07:9e:
                    78:4c:7e:4c:01:79:ba:cb:d0:2e:56:31:e9:91:77:
                    e0:d4:76:1e:86:e2:58:be:96:92:a1:b0:2e:8b:03:
                    af:83:74:dd:4d:bc:2c:4d:83:98:d4:90:75:87:0e:
                    be:8d:0d:a4:66:3d:eb:59:13:22:ec:90:61:72:f4:
                    6a:e8:fa:a8:d5:9b:17:b0:75:31:4d:91:14:0b:2b:
                    88:65:4a:c1:fc:f8:d7:b7:70:48:9c:89:64:31:74:
                    ed:c3:72:39:36:90:55:8b:49:6d:62:14:98:8e:a6:
                    59:9b:74:c8:00:e3:70:11:c0:22:46:b8:c2:aa:9d:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F7:4F:B3:DE:E9:7E:2A:3F:E3:DC:5B:BB:E4:AC:31:2C:C4:F1:F6
            X509v3 Authority Key Identifier:
                keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/46A6690EB41911EFA68E0826C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:7e:ec:a9:0e:58:9c:c8:4b:2f:a3:37:d7:f2:b7:bd:7e:3b:
         89:76:01:5c:23:ac:6d:cb:ad:02:3d:e0:1c:cf:55:aa:b0:e9:
         a7:b3:e1:17:fe:bb:5b:de:18:bb:33:d5:61:e3:75:e3:de:1c:
         5d:f2:b4:23:fa:08:d7:45:79:c4:28:90:60:cc:53:68:7f:0f:
         d5:38:35:ea:8a:80:b5:cc:ee:3a:ef:2b:af:58:0e:38:3f:91:
         22:f3:5f:1c:28:84:a8:12:f9:48:21:3d:a2:15:fb:f3:cf:4b:
         60:8e:e4:03:e1:8c:c9:30:23:8f:5b:17:6a:f6:1b:a0:57:13:
         2a:a7:72:3d:ed:c9:72:65:f9:4c:b9:1d:9f:97:bd:2e:6a:60:
         fd:9f:3a:6b:ce:fd:46:7f:eb:80:7d:32:9a:f4:fb:72:77:41:
         9e:27:f0:3b:f1:75:df:15:85:d0:b9:1f:ea:82:4d:f6:b3:c6:
         03:b7:ac:d4:6f:ed:5f:40:d1:7c:a8:1d:29:48:01:51:9f:d5:
         c9:06:da:01:fd:83:aa:2c:89:e0:c6:58:e8:23:4a:e8:96:43:
         34:9c:f6:15:0a:31:06:c7:9a:40:33:87:60:e8:c3:49:2e:fc:
         ae:7c:b4:59:64:6b:b9:3a:cc:3d:5f:23:3b:ec:60:71:7b:eb:
         8a:3a:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:25 2026 by rpki-client