Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/1C977098A54911EEA5726C58C4F9AE02.roa
File:                     1C977098A54911EEA5726C58C4F9AE02.roa (raw, json)
Hash identifier:          FyXf2fobeEelKCn2zXCHN98VT8DDXKJKgs0rdLSjTBg=
Subject key identifier:   3B:BC:60:21:C6:58:86:E6:06:5D:A8:22:B9:2F:60:3C:B8:D0:8E:1E
Certificate issuer:       /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
Certificate serial:       01BD
Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/1C977098A54911EEA5726C58C4F9AE02.roa
Signing time:             Fri 27 Mar 2026 03:38:14 +0000
ROA not before:           Fri 27 Mar 2026 03:38:14 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152178
IP address blocks:        36.50.148.0/23 maxlen: 23
                          36.50.148.0/24 maxlen: 24
                          36.50.149.0/24 maxlen: 24
                          2401:c220::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl
                          rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE01, serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
        Validity
            Not Before: Mar 27 03:38:14 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69c5fba6-e003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:69:30:cc:61:ef:b9:c9:20:6a:5d:1a:58:
                    cf:78:58:3a:44:07:b1:01:31:43:b6:ac:20:11:00:
                    57:8e:44:f0:79:29:b6:5a:7e:3c:b8:c0:04:7d:f2:
                    90:67:0e:59:6f:22:19:c8:47:b5:cb:1b:e1:a3:6f:
                    9b:4d:f5:ef:ee:c5:60:97:c0:b4:24:d0:52:a2:d7:
                    6a:04:d7:d2:ba:b9:90:69:68:49:3b:55:77:39:61:
                    0c:64:c8:71:6d:1e:3b:39:13:bb:4c:94:ea:8f:51:
                    84:df:52:35:19:d9:79:9a:68:88:55:dd:27:a5:bd:
                    f5:e8:30:57:f0:56:e2:c4:08:6f:c7:50:4d:9e:cf:
                    0f:89:b3:63:ef:85:ac:82:91:c0:74:03:8f:85:d3:
                    be:bb:f5:87:12:a4:b5:77:62:13:bd:bc:ed:30:ac:
                    42:8f:a9:25:06:6d:0f:42:3f:84:e5:d3:45:a2:4b:
                    99:a8:31:b7:68:50:34:05:b3:14:1d:11:27:6b:3a:
                    ae:98:e8:17:12:08:0c:01:c9:e4:30:68:cf:28:1d:
                    ab:7a:a6:a9:4e:00:05:58:78:e3:07:54:7d:4a:2f:
                    aa:33:39:29:f0:3f:f9:7c:49:91:77:29:82:6a:44:
                    16:05:4c:8c:32:4f:5d:e1:30:18:79:bc:3b:ed:66:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BC:60:21:C6:58:86:E6:06:5D:A8:22:B9:2F:60:3C:B8:D0:8E:1E
            X509v3 Authority Key Identifier:
                keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/1C977098A54911EEA5726C58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.148.0/23
                IPv6:
                  2401:c220::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:ed:1f:ca:f1:38:3b:92:92:b9:19:00:25:24:79:81:c4:48:
         ed:6c:e7:e2:6c:61:8a:27:ab:df:68:de:67:79:86:c3:08:47:
         87:c3:2f:1f:e4:ef:0e:55:e5:b2:9b:44:ce:79:c0:06:e5:f9:
         78:d8:7a:dd:00:36:82:70:c3:6b:e7:11:df:b5:c6:c4:ac:86:
         84:06:4d:f5:f8:ff:22:ab:9a:0b:a3:5a:1f:98:c7:9a:90:a2:
         e3:a5:a7:92:37:b8:40:94:59:a2:5a:86:7c:50:38:e9:2f:d1:
         c7:06:05:f3:b2:d9:ba:42:47:65:78:b9:6a:9f:53:14:f2:f9:
         53:67:eb:18:43:30:20:6c:02:d4:5e:62:4d:62:d9:6a:6f:9c:
         be:b8:8a:70:b8:00:dd:65:a5:74:90:c4:53:be:be:3e:df:b6:
         25:e8:54:21:b3:cc:9d:3f:7e:0b:d3:9a:f0:b5:af:b6:00:31:
         52:e7:cf:76:ca:35:74:dc:8c:bb:3b:d2:c0:3f:80:5b:23:76:
         81:50:29:d4:53:9c:3b:46:f1:0c:81:42:97:d5:5f:12:1c:4c:
         bd:87:4d:e8:8a:d0:89:5a:8d:8b:ff:f0:29:5b:8f:c3:e7:09:
         41:df:f2:f0:95:81:64:d9:d8:69:95:80:82:d0:59:bb:22:4b:
         29:dd:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:34 2026 by rpki-client