Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3CE9A810799D11EF9547461CC4F9AE02.roa
File:                     3CE9A810799D11EF9547461CC4F9AE02.roa (raw, json)
Hash identifier:          jyhxOeVpH0OFLETq5nPbqtVCOCG8G/oOvurrxR+iOB4=
Subject key identifier:   46:DF:F0:61:54:3D:6D:86:42:9B:3B:2B:CD:F4:6E:9F:CC:A4:84:64
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       0125
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3CE9A810799D11EF9547461CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:12:44 +0000
ROA not before:           Thu 23 Oct 2025 07:49:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        202.50.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Oct 23 07:49:45 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5a8eb-fdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:17:b7:5b:9d:67:f4:8b:0c:e0:8e:dd:3a:
                    3d:8c:1e:7e:2e:35:12:43:6e:00:7b:3d:81:61:4e:
                    a4:2a:3a:8d:b1:81:79:7d:b6:c7:d8:83:96:3b:06:
                    dd:91:9f:a7:78:da:64:b5:85:e2:7c:31:63:7f:ea:
                    dd:94:0e:f9:03:f0:f9:4d:cf:64:97:13:e1:c1:d3:
                    d0:f2:39:28:c4:e7:26:be:47:d5:f7:a7:b5:0a:50:
                    46:c8:44:f1:57:67:a0:4c:23:e1:24:32:ad:1c:c8:
                    30:ef:a2:49:b4:47:4a:62:00:4a:a5:fe:8f:d7:25:
                    c8:03:4a:4c:fc:0f:62:db:8a:24:98:16:56:84:b2:
                    ad:fa:d8:bd:5f:aa:ae:f2:85:88:af:2d:1d:24:db:
                    f5:db:ec:40:b7:9c:50:3e:4b:62:03:70:45:4a:fc:
                    8b:df:db:9a:02:9b:53:d5:21:d6:c2:02:7f:2b:14:
                    db:2c:2d:66:a9:52:07:33:ae:dc:19:9b:34:8e:e7:
                    c2:d3:fe:29:fd:7a:aa:32:01:33:13:a1:8b:f8:23:
                    63:1a:ee:0d:38:79:b5:f9:b6:a6:7a:cb:2e:e8:b2:
                    96:5c:49:86:6c:18:1a:8e:d6:b3:3f:0f:30:65:db:
                    33:29:8b:fd:67:c9:35:02:63:97:fe:cf:1f:39:61:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DF:F0:61:54:3D:6D:86:42:9B:3B:2B:CD:F4:6E:9F:CC:A4:84:64
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3CE9A810799D11EF9547461CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:17:44:50:20:d7:82:bc:cb:ea:37:32:8d:be:0e:14:ec:4f:
         69:08:18:3b:7e:8d:1b:27:b2:ab:c8:71:18:ae:ea:61:f1:95:
         cd:4c:35:34:03:42:b2:94:e0:9b:d8:6e:ca:c9:0d:80:1a:b9:
         0c:59:3e:09:70:86:8a:20:f3:f2:34:32:19:e5:74:60:b4:92:
         eb:a2:2d:2a:58:f6:98:ff:8d:dc:96:3a:62:e9:4a:ed:e9:2b:
         08:b3:f5:5f:2a:1f:8f:ae:e1:8f:d9:4f:d1:8d:e4:ce:79:3e:
         2e:12:c5:a6:f0:0a:fc:6a:ef:12:45:1e:d5:75:50:e0:c1:d9:
         c2:25:53:5a:d6:c3:6c:37:2c:2e:ab:ba:71:c9:61:0b:38:c3:
         06:d7:b7:2b:36:67:2b:ba:15:90:7c:2e:b0:56:7b:42:23:d1:
         2b:4a:e4:cb:82:84:4e:0b:b9:d7:68:72:61:c1:c7:8d:1b:72:
         d6:31:e2:43:11:7f:dd:89:51:2d:a4:31:eb:41:9b:a8:d1:ba:
         d5:56:d8:fb:9d:ac:3e:ac:3a:03:c3:7d:9f:ec:0f:ed:a2:19:
         c0:3e:7f:68:ac:bb:75:bc:01:04:4c:ed:81:a6:15:ab:85:fb:
         de:ac:9e:6f:a8:99:35:cb:ea:a7:e4:35:09:c4:f9:b3:89:36:
         f2:f6:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:20 2026 by rpki-client