Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/B32ED56A27EB11F1BCE516B1AC833773.roa
File:                     B32ED56A27EB11F1BCE516B1AC833773.roa (raw, json)
Hash identifier:          mfYPELhyFi3+ksWi51fs3IkPk6Ldr6hQWYywSX9UUpI=
Subject key identifier:   C0:1E:4D:D5:0D:3F:AC:8F:76:5D:0B:C8:F4:3D:D1:8A:14:E3:93:B2
Certificate issuer:       /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial:       07
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/B32ED56A27EB11F1BCE516B1AC833773.roa
Signing time:             Wed 25 Mar 2026 01:41:10 +0000
ROA not before:           Wed 25 Mar 2026 01:41:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132029
IP address blocks:        162.145.64.0/24 maxlen: 24
                          162.145.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
        Validity
            Not Before: Mar 25 01:41:10 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69c33d36-3523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:b7:c8:96:a4:e5:df:59:5a:87:85:3c:59:
                    c8:a2:8e:b2:e3:67:f9:2a:81:db:a6:95:cf:43:75:
                    f5:b2:6a:12:a1:87:99:80:b6:a3:29:86:c8:8f:cc:
                    ae:95:9f:97:c5:82:b3:ca:02:5f:c0:8f:7a:7e:c1:
                    16:c2:b8:93:0e:84:b0:10:b5:20:2d:17:96:46:4e:
                    2f:7c:25:c1:1e:6a:1a:ec:bf:e2:8f:bc:00:b4:bb:
                    23:da:78:e2:4e:dd:cb:d9:9e:5b:c3:45:66:ef:e6:
                    28:fe:51:4a:9a:c7:32:25:6c:20:b1:64:09:44:88:
                    1e:f7:37:44:79:a4:15:48:10:d1:f0:2a:fd:70:0d:
                    a1:bf:e1:b0:1a:7d:27:4b:02:72:e8:ed:fa:d3:e6:
                    53:49:72:bb:19:29:da:a3:de:e8:e5:bd:b6:b4:86:
                    73:8a:24:12:ea:4a:d1:eb:75:69:12:5f:ea:69:29:
                    29:de:a7:3c:fc:d3:d7:b0:11:c3:ef:14:15:fd:1e:
                    e9:1e:37:35:5c:49:1f:55:fe:f2:04:a8:fc:0e:65:
                    71:0d:44:b8:25:b9:ae:71:17:0c:3b:08:b1:39:6f:
                    ef:2a:6b:2b:35:21:04:f0:5b:5f:04:d2:c1:f5:1e:
                    a6:34:a1:18:59:44:9b:d5:02:0b:f9:91:61:6e:6c:
                    bc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:4D:D5:0D:3F:AC:8F:76:5D:0B:C8:F4:3D:D1:8A:14:E3:93:B2
            X509v3 Authority Key Identifier:
                keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/B32ED56A27EB11F1BCE516B1AC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.145.64.0/24
                  162.145.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:44:89:b6:ef:fd:47:c6:9c:7f:d1:99:d8:3f:19:3a:c8:5c:
         e4:af:e7:4c:0f:24:47:00:3e:91:18:98:85:79:c1:70:98:e5:
         60:40:e1:71:18:70:6b:62:15:5b:30:79:cb:3f:3a:67:c7:6c:
         c7:3a:ce:b0:a0:4f:f3:a7:84:77:46:46:1e:98:31:da:fa:3c:
         a0:ab:14:c8:04:89:df:19:dd:75:d0:3f:15:d1:99:35:00:95:
         6e:23:96:5b:b8:40:5c:77:4d:f4:7b:7b:c2:f1:5a:f4:f0:91:
         12:0f:c0:6c:3b:a7:87:37:91:a5:fa:e9:bc:bc:e8:1b:ee:7c:
         0f:6c:79:ac:72:82:dc:d5:06:c0:39:9c:55:87:cb:79:8a:86:
         4a:85:a3:03:2a:88:71:18:c8:d3:a6:52:36:bc:3f:4c:9b:c8:
         3f:6a:ce:b7:e1:25:75:0c:22:23:fe:91:88:7e:e6:d7:2f:61:
         64:ac:32:0e:4e:b6:55:01:4b:d2:86:76:33:be:a9:b8:df:8e:
         80:2b:d1:36:d1:0f:3e:25:e5:3b:5c:67:d7:2f:60:44:db:41:
         b6:cb:4a:31:26:c1:aa:4e:27:8a:27:09:77:00:7c:6c:ca:e0:
         90:01:15:79:ad:ac:b2:7a:de:98:bf:da:63:80:7e:ce:26:01:
         83:b9:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:33:15 2026 by rpki-client