Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/6A44AF9A1AC711F191E10968393D8C67.roa
File:                     6A44AF9A1AC711F191E10968393D8C67.roa (raw, json)
Hash identifier:          uPMubkV8FhRQlQGVWB1Ss5RVIBMdWnZesOclj5/0msM=
Subject key identifier:   E8:64:AE:37:04:C1:79:8A:A3:5C:E6:42:A4:EC:7C:BF:00:42:D7:88
Certificate issuer:       /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial:       355D
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/6A44AF9A1AC711F191E10968393D8C67.roa
Signing time:             Sun 08 Mar 2026 08:18:41 +0000
ROA not before:           Sun 08 Mar 2026 08:18:41 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     197537
IP address blocks:        101.0.17.0/24 maxlen: 24
                          101.0.18.0/24 maxlen: 24
                          101.0.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13661 (0x355d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
        Validity
            Not Before: Mar  8 08:18:41 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69ad30e1-13a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:48:04:2c:0d:19:32:9c:5a:4e:30:77:8f:
                    10:b5:8f:45:0e:08:93:e6:24:af:a2:c8:d0:25:4d:
                    a4:9a:57:4a:9d:45:1c:f0:b6:89:20:56:56:1d:73:
                    f4:8b:21:0c:4a:e3:37:66:c8:13:35:ae:5c:74:3b:
                    09:38:6e:ac:eb:fc:f6:5a:4e:f6:e5:ba:f0:b4:7f:
                    9d:e1:db:e8:35:7f:46:0c:d0:bf:98:31:07:b1:d6:
                    46:c8:3b:40:c3:38:1f:bd:6c:52:8f:9d:37:94:d5:
                    d0:af:4e:1e:40:88:dc:d7:84:e5:f8:df:27:31:f4:
                    f1:1a:d4:83:f6:c4:6b:c1:c1:b6:f8:83:e5:01:46:
                    96:99:2f:24:32:fb:fb:6f:8e:cd:e1:37:9c:de:7f:
                    3c:b2:d8:3a:39:cd:4e:62:ac:5c:44:12:fb:e2:0c:
                    c8:d8:1b:89:52:44:9e:98:4e:4d:ca:4b:a2:ef:d0:
                    a3:29:27:ed:90:e0:7a:54:5d:27:a3:ac:b5:89:9d:
                    a5:3e:a4:19:db:a8:f4:02:13:14:e1:0e:4c:46:d6:
                    b4:d3:5e:5b:98:67:b3:71:94:5a:82:fc:cf:9c:c8:
                    32:71:ab:c0:3a:15:25:dd:06:04:00:b9:e0:6f:79:
                    eb:e3:8c:59:a0:d5:9e:d2:35:c9:e2:f4:70:fa:73:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:64:AE:37:04:C1:79:8A:A3:5C:E6:42:A4:EC:7C:BF:00:42:D7:88
            X509v3 Authority Key Identifier:
                keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/6A44AF9A1AC711F191E10968393D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.17.0-101.0.19.255

    Signature Algorithm: sha256WithRSAEncryption
         52:87:47:b6:85:4f:32:57:bc:93:0d:ab:29:1e:e9:da:73:95:
         23:37:1b:ce:b5:3c:1c:86:1c:07:3d:55:9d:5a:29:17:73:ce:
         33:7a:cf:01:72:13:af:9e:2f:75:a2:15:b1:16:fb:8f:8a:0f:
         c4:81:c3:58:a2:b1:54:09:45:44:21:7c:ea:41:18:68:26:a7:
         85:16:06:9a:75:8b:e0:1a:96:18:4f:b5:d0:6f:fc:5f:23:05:
         cf:c5:14:28:57:7c:93:8c:ff:bf:f7:d2:9a:3a:ff:79:5b:7b:
         97:83:2e:f4:4d:68:fd:0b:26:ec:cc:36:34:31:1c:ee:56:23:
         59:5b:40:ae:2c:ca:be:11:58:45:27:cc:70:17:5d:08:3b:db:
         7b:51:95:90:72:2d:23:70:d1:f6:45:bd:99:ec:13:31:ce:62:
         d8:4d:3c:fe:9d:73:b4:5c:61:ed:ea:4a:88:82:1e:10:a6:0e:
         3b:60:7a:01:46:ab:20:bd:5d:5e:f5:95:a3:5c:32:8f:c9:84:
         1b:75:3e:d0:83:4a:51:8b:12:f4:87:e6:60:97:72:ce:5c:80:
         79:54:7c:bd:2d:55:54:d9:d5:7a:73:8d:94:d7:40:83:30:48:
         ec:c1:f7:8a:9a:6f:5c:46:a2:c2:c3:12:ca:56:9a:f0:20:c9:
         a0:d6:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:49 2026 by rpki-client