Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3C74C0E0799D11EF9547461CC4F9AE02.roa
File:                     3C74C0E0799D11EF9547461CC4F9AE02.roa (raw, json)
Hash identifier:          2lh0VekensC1iCGtapEG4/oWVTugB2CUNEuEgGTMM4E=
Subject key identifier:   03:94:65:73:D9:EA:4F:F1:90:80:6C:3E:CA:42:DC:D6:C7:74:21:5E
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       0123
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3C74C0E0799D11EF9547461CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:12:42 +0000
ROA not before:           Thu 23 Oct 2025 07:49:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        202.50.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Oct 23 07:49:43 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5a8ea-49a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:85:40:da:37:74:17:9f:37:e3:2f:c1:e5:
                    0d:f8:7b:44:44:bc:55:c4:c4:23:e8:f1:51:72:da:
                    9f:c1:d3:a3:8f:d3:42:e7:d7:ea:ae:bf:da:8e:30:
                    28:15:60:c2:33:50:3c:a0:84:7f:44:b5:20:22:cc:
                    00:de:53:43:75:ee:f3:2c:49:4a:d2:3d:fc:c1:29:
                    39:ad:e7:5d:32:3c:da:6a:c1:09:a9:db:09:6c:35:
                    82:7c:87:47:11:2d:38:6e:8f:74:22:66:0d:a6:43:
                    fb:5b:33:80:89:d7:6a:20:71:09:84:42:b1:5f:4f:
                    db:b5:dc:a0:ac:c7:10:d3:89:f6:69:ca:7e:c8:6d:
                    a9:7c:92:4f:54:23:d7:69:0d:05:59:c9:40:d1:05:
                    75:a7:93:61:65:ee:54:81:1e:38:cf:99:f0:e0:5c:
                    f1:c5:e3:7a:e6:aa:dc:f3:0f:2c:6e:27:db:84:b0:
                    73:d3:e0:15:89:4c:ea:96:8c:e0:e5:ef:80:77:b4:
                    1a:fa:13:aa:84:59:a7:66:f1:80:75:2d:6e:1a:57:
                    5d:48:9a:83:f3:21:55:62:c0:5a:e2:31:7b:6e:46:
                    3a:f6:b5:56:f8:c6:75:2c:72:8d:69:ce:65:66:ae:
                    c6:5b:fb:42:4f:1a:69:98:fa:92:1f:bd:d0:fe:0a:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:94:65:73:D9:EA:4F:F1:90:80:6C:3E:CA:42:DC:D6:C7:74:21:5E
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3C74C0E0799D11EF9547461CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:71:15:1c:8e:28:b1:33:cb:c7:5d:6f:12:68:2c:32:c8:5c:
         f4:7a:34:cb:6c:54:0f:82:ab:ed:08:7f:99:bb:26:3a:7e:bd:
         ed:15:1c:6d:fd:f4:4f:ef:f7:87:4f:d1:ab:30:b9:22:3c:33:
         46:4b:a7:a1:11:51:71:82:05:70:ce:b4:56:a4:df:70:a2:f9:
         ce:1f:0f:d8:54:e1:80:eb:70:b4:2f:29:a5:3b:05:70:bb:df:
         a0:e1:ed:d2:88:d6:d0:c6:15:d2:6c:24:8b:c6:5e:6b:30:06:
         a0:44:2d:9e:05:65:2d:06:d1:a6:31:0f:9b:55:66:03:32:e2:
         34:98:f4:c5:f3:5d:00:e5:bb:87:ce:61:92:42:49:b6:8d:e5:
         6a:03:ef:ad:3c:ad:4d:85:9e:f9:26:1f:4d:9d:b1:2a:dc:b2:
         24:fc:b7:45:35:d8:54:78:32:15:c5:f4:32:79:27:04:42:e8:
         15:3d:d6:ac:e5:af:80:6d:af:0f:e2:41:1f:99:b1:57:5d:e2:
         f6:51:00:9a:82:db:7a:39:9a:d5:81:e7:1a:d0:2b:91:7c:3f:
         52:7c:89:e4:6b:97:0d:12:9d:7e:75:c0:1e:54:29:ec:87:8c:
         8e:2c:26:62:51:a1:67:96:e1:5e:d2:dc:f8:c7:8f:4d:30:b2:
         24:70:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:26 2026 by rpki-client