Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/584ED0CCDD1A11EA96723D11C4F9AE02.roa
File:                     584ED0CCDD1A11EA96723D11C4F9AE02.roa (raw, json)
Hash identifier:          rh0SYpKPI4YWrufj0stAAObhOoq6ZpWqFOFkGw1rWIQ=
Subject key identifier:   00:CE:D5:25:37:D6:EE:68:84:2D:18:00:E3:62:41:39:66:21:46:BF
Certificate issuer:       /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
Certificate serial:       08AE
Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/584ED0CCDD1A11EA96723D11C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:05:56 +0000
ROA not before:           Tue 02 Sep 2025 21:12:39 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        202.44.120.0/21 maxlen: 24
                          2407:1080::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl
                          rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222 (0x8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142182, serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
        Validity
            Not Before: Sep  2 21:12:39 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a447c4-8e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:3b:34:ca:67:a3:20:6b:7d:be:dd:0a:93:
                    8f:88:93:d7:56:8d:6a:43:6b:60:b4:8b:c5:ce:df:
                    4d:40:59:ee:8a:0e:e7:7c:50:bb:ea:e1:7f:53:0d:
                    bd:8b:08:b5:8d:5b:1a:29:33:dd:04:3c:7e:70:f9:
                    0f:51:54:69:5e:01:d6:0e:8e:cf:2d:8f:34:5e:47:
                    0c:c7:28:a1:00:f7:8c:bd:72:fb:09:e7:a5:00:74:
                    d2:cc:c5:2e:a0:70:30:4e:c2:c6:dc:54:6d:be:48:
                    95:1c:08:13:d4:25:cb:a0:ff:93:a1:22:7a:80:76:
                    39:92:55:82:12:77:0a:4f:d2:ac:99:04:99:11:ce:
                    72:d9:59:44:ba:29:cb:65:7a:f3:57:04:2b:ee:c2:
                    9e:7e:ca:ff:42:80:ff:b1:c6:63:87:26:cc:51:d8:
                    4a:3d:58:3b:93:2a:2b:2d:a8:27:3c:bd:95:09:f8:
                    f6:f9:8f:59:a2:1d:20:6c:60:ab:c4:9f:ed:55:a4:
                    5b:50:38:74:84:83:07:94:5b:29:05:60:c7:87:31:
                    6d:4b:56:98:4d:af:b5:bc:45:ac:0b:55:35:da:3c:
                    45:36:bc:47:35:1f:bb:aa:91:50:b4:4f:5c:dd:2c:
                    21:29:0e:b6:90:4d:38:f3:77:a5:fd:da:09:75:a9:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CE:D5:25:37:D6:EE:68:84:2D:18:00:E3:62:41:39:66:21:46:BF
            X509v3 Authority Key Identifier:
                keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/584ED0CCDD1A11EA96723D11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.120.0/21
                IPv6:
                  2407:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:44:43:b1:51:99:52:88:95:2c:92:c5:ed:14:de:f6:1c:0b:
         2e:a6:3c:74:43:f0:a9:9e:39:06:7d:9e:b3:98:77:36:4e:d7:
         be:31:70:3c:9b:32:fd:9f:6a:3e:29:17:98:f4:7f:20:00:52:
         8b:04:ad:6f:49:09:bb:64:ce:d2:d5:3a:40:2b:d0:9e:aa:7d:
         13:76:03:81:9a:4c:2d:ad:25:0c:72:be:db:10:60:09:b3:61:
         4b:e6:41:4a:1b:2a:dc:1c:a0:2e:49:67:68:10:99:e9:0f:0a:
         5a:6c:ac:88:1c:ff:e2:ad:d6:34:2f:a6:81:81:64:9c:0b:83:
         b9:38:d0:f7:2d:19:eb:07:21:64:84:4a:ea:97:c7:2d:6c:26:
         2c:d0:6e:3a:b0:5a:26:e9:bb:74:49:d4:a7:41:c0:e5:61:df:
         7e:a9:7b:55:f1:35:fb:7f:c7:6f:29:22:0b:e2:47:1b:70:66:
         dd:a0:e2:82:3b:12:db:54:22:f8:4e:35:0a:62:5d:d5:01:be:
         2b:40:db:2a:74:42:75:28:f1:be:c3:dc:b8:db:a9:87:04:b0:
         d9:1b:0e:f7:93:99:af:22:31:bf:95:f5:b9:cd:25:0a:75:2e:
         88:bd:d4:32:44:2b:51:e1:87:ae:7b:e8:ce:ee:13:68:f0:f0:
         09:23:1c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:33 2026 by rpki-client