Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa
File:                     F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (raw, json)
Hash identifier:          5mVaiMwplqRf3wo+cmT13v7nFPq+pyaaZ5AbsWK8FKM=
Subject key identifier:   34:02:D5:67:4F:5D:96:36:51:0A:38:EB:7E:18:38:21:72:D4:9C:27
Certificate issuer:       /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0
Certificate serial:       080A
Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa
Signing time:             Tue 08 Sep 2026 07:41:59 +0000
ROA not before:           Tue 08 Sep 2026 07:41:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137060
IP address blocks:        203.17.154.0/24 maxlen: 24
                          2001:df3:1500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl
                          rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0
        Validity
            Not Before: Sep  8 07:41:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a9fbc47-15f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5c:0b:05:39:1c:20:9f:a0:da:a7:e4:61:fd:
                    57:7a:6e:12:fd:da:91:b9:99:fe:2e:e0:b7:16:c5:
                    4c:6d:78:9d:48:d4:1e:56:ae:c9:6d:43:39:83:bb:
                    79:84:7d:e2:df:91:59:fa:dc:e3:47:16:bc:b6:d5:
                    90:70:f7:6a:85:c8:ea:2d:1d:bb:37:0e:ab:13:1a:
                    25:93:49:bc:87:04:8d:d0:66:d2:2f:c3:c2:3b:45:
                    3f:90:ad:0e:fd:b1:fb:ea:d6:54:25:dd:1b:e4:ea:
                    68:c5:04:13:5b:71:25:51:09:a5:f0:91:4b:25:71:
                    31:53:8f:3f:2f:8e:38:e4:d8:3d:cd:80:aa:5b:9b:
                    e6:6b:6d:2d:f9:0b:e9:58:3f:d3:09:d0:96:56:f8:
                    3a:95:29:be:58:c8:04:8b:1a:e4:a6:3e:d2:f2:08:
                    03:a2:e9:b4:6f:a0:0d:19:93:8d:48:fc:05:ff:61:
                    26:e5:d4:0d:99:aa:c0:cb:1c:50:7d:c9:4e:a5:7e:
                    a4:f6:31:ae:4f:ba:6b:c7:f2:d1:63:06:42:d6:10:
                    0e:e1:cc:a3:e8:4a:d6:e2:a8:65:6f:38:c3:ac:f8:
                    c3:8f:3b:be:91:2c:45:bf:4f:20:5e:fd:cd:d6:5d:
                    8d:50:0f:ac:f4:05:c0:76:2d:33:1e:1f:e1:a0:48:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:02:D5:67:4F:5D:96:36:51:0A:38:EB:7E:18:38:21:72:D4:9C:27
            X509v3 Authority Key Identifier:
                keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.154.0/24
                IPv6:
                  2001:df3:1500::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:22:54:42:75:f8:37:19:9f:c3:20:6a:ca:c2:52:0c:25:
         46:69:f7:a7:dd:25:15:1e:28:cd:06:cc:0f:7b:6c:f3:73:0b:
         e6:bf:e7:b4:57:b4:bc:c8:df:b6:a4:dc:23:a1:37:c7:a0:37:
         ef:f8:ba:ba:67:aa:a9:2b:a1:e9:0a:f8:fd:3a:cd:12:62:2b:
         5f:0d:3c:5f:59:29:a9:e8:9e:da:77:c7:2a:07:33:d5:5f:0e:
         7f:c4:f1:7f:ea:85:c5:dd:54:f1:9d:fe:d9:17:43:c9:48:f1:
         1c:91:24:a0:44:f5:80:6f:86:bf:9a:fc:86:3f:7f:81:e2:fa:
         4a:62:35:26:ea:25:e7:29:a6:45:a4:63:45:4f:c2:63:8b:c5:
         54:af:41:c9:66:1c:e5:c0:a9:70:f4:c5:1b:a7:a8:45:75:a7:
         95:53:66:49:3e:c2:d0:a2:2d:00:98:bd:04:1a:6b:47:47:df:
         80:68:56:30:b9:0c:b4:dc:ec:dc:45:b8:9f:03:d4:d5:5c:b3:
         e3:fb:94:94:14:f2:32:b9:0d:70:79:06:39:52:26:6c:d8:c5:
         c0:e4:2e:0b:bf:52:9e:4e:2b:7d:12:ad:96:86:b8:00:fb:e4:
         ff:3c:1c:3b:fe:5b:7f:58:65:3a:49:0a:2e:98:17:67:17:47:
         c4:3e:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:40:34 2026 by rpki-client