Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa
File:                     16083E10A95E11EEBC0A7E5BC4F9AE02.roa (raw, json)
Hash identifier:          xotN2+0EZ6ouw9AZf08dpJO1PPBAAQ3hAa1HQQFiN7Y=
Subject key identifier:   09:C6:F6:0A:77:92:8F:3E:0F:49:2F:87:83:C4:6F:D1:FF:55:B1:FB
Certificate issuer:       /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
Certificate serial:       01B1
Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:23:42 +0000
ROA not before:           Sat 13 Dec 2025 03:22:36 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152137
IP address blocks:        210.79.182.0/23 maxlen: 23
                          210.79.182.0/24 maxlen: 24
                          210.79.183.0/24 maxlen: 24
                          2001:df3:3bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl
                          rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
        Validity
            Not Before: Dec 13 03:22:36 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43ddd-c174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:cd:cd:41:99:12:ac:48:f0:8e:ac:11:06:
                    c6:e7:80:2c:6e:5b:41:ff:a0:92:e8:37:33:39:0b:
                    0b:a5:32:dd:9e:d2:08:8c:4b:39:8a:2a:44:e2:d8:
                    9b:00:94:64:df:0c:3a:29:d2:40:38:4e:de:39:fd:
                    1e:48:56:19:3f:f1:85:5c:21:84:c4:46:76:27:5e:
                    98:a5:8e:1e:21:dc:84:c4:f2:29:1d:66:e0:ec:46:
                    2f:76:5f:36:d7:8b:8c:6d:1e:38:46:41:be:f3:33:
                    52:db:4c:1b:d0:f1:67:c3:6f:73:06:cf:8f:28:8f:
                    db:c0:a9:c7:c4:50:25:8c:49:08:78:fd:21:9b:cb:
                    13:ba:80:b8:02:ba:73:d5:9d:b1:f7:66:cc:d4:f3:
                    43:6f:03:07:2e:82:63:fd:de:e9:1d:05:6c:27:03:
                    6d:7b:9c:a4:32:c8:20:2d:79:88:ba:ad:91:b5:fd:
                    5a:dd:1c:25:9e:88:61:24:f2:aa:af:0c:36:82:c0:
                    5e:d8:36:e4:45:a2:64:37:b5:70:0c:20:f0:89:d4:
                    5a:0e:d6:c7:2d:17:dc:7b:9d:5e:5e:6e:e5:f7:b1:
                    60:35:8d:2d:bd:17:88:fe:cb:00:08:6b:3b:47:57:
                    31:2e:0f:b5:b4:38:0b:71:5a:c5:c2:cb:39:c7:21:
                    21:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C6:F6:0A:77:92:8F:3E:0F:49:2F:87:83:C4:6F:D1:FF:55:B1:FB
            X509v3 Authority Key Identifier:
                keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.182.0/23
                IPv6:
                  2001:df3:3bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:9d:94:34:9a:9b:2c:05:81:cb:cb:0b:92:7d:52:4e:71:
         6d:3c:8a:93:35:6f:c5:28:17:f1:0e:d6:a9:8a:35:c0:de:c8:
         bd:88:43:f0:0f:ec:e7:c1:1d:df:e6:e3:d4:84:7a:53:75:ce:
         73:5f:83:49:1a:48:0a:d4:c6:bb:95:5c:51:84:4e:3d:a1:52:
         53:18:5e:49:f4:09:81:61:61:47:e8:77:36:5f:dc:71:58:81:
         df:14:5a:d9:8c:4c:8e:18:ad:c0:8f:70:67:04:95:4d:dc:3a:
         28:29:34:15:e1:e2:fe:f4:27:88:5b:dd:ad:38:7f:21:55:68:
         05:33:46:da:a8:36:b3:22:e6:86:c7:33:7e:0b:70:60:a8:23:
         e9:9d:8c:46:e8:bb:52:50:6d:2a:dd:60:45:fb:49:44:3f:08:
         ac:0e:3b:b5:1b:34:6c:cd:a3:f2:dd:f9:72:8a:36:81:f4:82:
         07:88:cf:60:1d:8c:cc:d1:9b:ad:0b:76:34:19:66:41:6c:0b:
         4d:31:b8:b0:71:41:91:64:d4:89:f2:a9:7d:a2:be:fb:f0:d3:
         8f:6e:10:50:0f:79:20:10:f6:de:c5:7e:ba:5c:01:58:de:a9:
         7e:ac:5e:1b:cc:36:0c:3b:64:b8:ba:8a:d5:99:7b:07:ce:db:
         b5:74:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:35 2026 by rpki-client