Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/E32B7E6E348811F0ABE70D36C4F9AE02.roa
File:                     E32B7E6E348811F0ABE70D36C4F9AE02.roa (raw, json)
Hash identifier:          CFQyHd1DaZe4HwiTxx7hgb4D5y3SUsXP8EzeKtQCe8Q=
Subject key identifier:   DF:97:99:CA:29:A3:86:CB:EF:56:9E:9C:CB:B9:F6:7E:AB:F4:3B:C7
Certificate issuer:       /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
Certificate serial:       93
Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/E32B7E6E348811F0ABE70D36C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:06:00 +0000
ROA not before:           Mon 19 May 2025 08:11:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153740
IP address blocks:        163.223.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl
                          rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
        Validity
            Not Before: May 19 08:11:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e558-1e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:b7:80:40:1e:f6:7a:83:d2:8b:99:f9:a5:
                    5e:31:b2:4b:e4:87:2a:60:7d:4c:98:b1:dc:e1:93:
                    32:27:eb:18:15:b5:fb:01:38:86:d2:0e:23:34:1a:
                    3c:f8:a9:b1:78:43:17:8b:31:71:05:78:bc:d2:a9:
                    9f:39:f1:84:9a:d3:32:ec:a1:79:98:f6:86:1a:4b:
                    7d:3a:33:0c:c3:4f:c7:6c:19:7a:c5:0d:f3:9e:78:
                    43:0a:2f:e5:18:40:86:30:b2:4a:cd:6f:50:b9:51:
                    4a:7c:e2:78:d2:66:03:07:3a:06:29:f0:26:a6:78:
                    1c:e9:32:73:6e:8d:a0:0c:8f:ca:fa:fe:5e:03:5f:
                    32:88:ca:45:58:6c:f5:f9:85:e5:85:83:38:18:16:
                    a0:4d:d2:59:4b:22:28:57:91:e6:f4:58:f5:b1:07:
                    39:a5:4f:b8:45:cf:f9:66:62:29:ec:93:e8:3c:fe:
                    f8:c4:33:7f:f5:f3:2b:09:9b:2d:1a:bb:5f:f2:da:
                    56:46:7f:e9:7c:f8:66:c1:90:c0:08:50:8f:06:53:
                    3a:2e:1c:71:20:3b:f1:3c:d5:4e:50:bd:59:6c:5f:
                    b2:f6:70:fe:12:7a:41:ed:4e:88:d1:55:27:e0:3b:
                    b7:05:31:c5:6e:bc:54:f9:67:9a:53:3a:8f:f0:46:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:99:CA:29:A3:86:CB:EF:56:9E:9C:CB:B9:F6:7E:AB:F4:3B:C7
            X509v3 Authority Key Identifier:
                keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/E32B7E6E348811F0ABE70D36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:01:26:3f:a4:40:d5:63:99:33:68:10:f3:0b:ed:b7:88:21:
         9a:0e:13:db:70:65:8e:c3:35:8c:38:7e:7d:2d:17:dc:ca:e6:
         96:0f:e5:40:14:df:3d:d9:97:d8:15:2f:f6:d9:a7:67:bf:e0:
         00:9b:36:2f:26:02:e0:08:73:82:39:e6:f8:d2:b1:ee:69:19:
         95:a5:21:df:87:05:f1:6d:6f:e9:91:d2:d9:96:02:f8:49:e8:
         56:04:65:b5:dc:60:70:7f:8a:e1:80:24:e5:ed:7d:9c:56:54:
         5f:3b:34:a0:d2:a9:50:20:f0:34:4e:2c:b1:53:bf:37:ab:6e:
         93:04:71:1c:14:20:eb:c6:2e:9a:45:14:ce:71:5b:1a:ea:f9:
         ed:d0:13:6c:0d:ad:13:71:9b:41:ac:aa:16:81:d4:90:47:05:
         f3:dc:f0:f8:ef:5e:8a:aa:b9:50:a6:56:14:5f:1f:0c:de:5a:
         93:cd:c8:0f:6e:03:0a:2b:2a:55:5a:3b:84:e2:2f:a6:5d:6a:
         6d:26:59:ca:ee:fa:a8:ea:5d:9c:20:7e:b0:52:db:5a:f8:2e:
         5b:be:39:e3:d0:b7:18:98:de:93:15:bb:c8:c8:e4:3d:52:d5:
         dc:d3:e2:47:ba:ac:e1:ba:df:f6:40:bf:ca:d5:aa:5d:16:f7:
         34:33:a3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:04:01 2026 by rpki-client