Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/5F0ACC76962011F09F73D036C4F9AE02.roa
File:                     5F0ACC76962011F09F73D036C4F9AE02.roa (raw, json)
Hash identifier:          wod86w5iZJUU7svQSMOziKfoopgd08DclLwAV3P15BY=
Subject key identifier:   8F:67:8B:AA:5F:62:2A:5F:9B:51:75:2F:C4:5B:F5:CD:73:27:1D:C9
Certificate issuer:       /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Certificate serial:       026D
Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/5F0ACC76962011F09F73D036C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:05:20 +0000
ROA not before:           Sat 20 Sep 2025 12:50:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     9382
IP address blocks:        203.24.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
                          rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
        Validity
            Not Before: Sep 20 12:50:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a455b0-7166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:d2:3c:c2:ed:ff:52:50:91:80:ca:9c:7f:
                    02:29:27:5d:91:18:0f:f2:0e:3d:ed:0f:be:40:b9:
                    63:43:17:60:20:b9:2d:34:ea:82:12:00:09:6e:21:
                    2b:81:4c:ef:70:4f:95:47:1f:56:51:70:e5:9c:36:
                    b6:8c:7e:fa:f7:44:c1:5b:22:55:1b:7e:00:a5:67:
                    39:7c:b9:a3:89:69:3d:33:81:4e:2f:8d:9e:30:8b:
                    b2:92:82:31:42:d1:9a:d3:4d:3d:f6:e5:dd:f0:d0:
                    47:84:0e:a9:1d:ea:4b:f5:f4:a0:2e:12:31:37:91:
                    b7:3a:d7:f5:5e:95:d0:8f:94:78:62:35:6c:b0:fc:
                    8c:6c:c2:95:2c:53:65:0e:83:23:65:0d:c7:e2:79:
                    d7:7f:94:e0:7b:6b:99:90:c4:eb:aa:62:d6:80:a3:
                    2f:45:51:9b:03:d8:58:4c:30:f9:b0:31:41:ba:24:
                    68:0a:40:bf:8e:c5:1e:69:8b:3f:ac:0c:2d:b2:22:
                    4b:00:fa:39:77:00:42:11:f6:46:50:9e:2c:8c:b6:
                    3c:0e:c3:91:c6:d8:14:f2:37:f9:c9:22:bd:28:71:
                    91:7c:c8:fa:34:87:9c:30:44:e2:8b:af:99:74:cf:
                    45:52:4d:70:53:57:46:71:c4:e6:ed:84:76:8a:32:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:67:8B:AA:5F:62:2A:5F:9B:51:75:2F:C4:5B:F5:CD:73:27:1D:C9
            X509v3 Authority Key Identifier:
                keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/5F0ACC76962011F09F73D036C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:54:75:48:72:7b:fc:d7:d7:07:f4:87:24:80:98:43:b1:70:
         5f:39:21:69:1d:a0:ca:a1:67:1b:16:7e:ef:b7:3f:58:2e:b1:
         40:c7:48:eb:08:9d:01:18:cf:36:bd:72:b1:9e:d9:0c:3a:78:
         62:7f:1d:42:67:56:18:14:36:ca:04:0c:82:d6:47:5f:73:e6:
         08:a7:d6:c2:d6:bb:74:c5:e7:3c:64:c2:0b:73:03:e9:1a:59:
         05:6c:6c:db:9f:28:30:7b:b5:d8:82:fb:db:f4:e5:41:0c:75:
         b8:e9:05:7c:b2:25:8c:91:2c:05:d5:43:ba:11:03:7b:d5:df:
         af:36:30:51:93:3b:c5:7e:02:44:07:89:33:b6:f3:e7:c9:ea:
         86:84:e1:ca:a8:b6:46:86:59:9a:66:42:99:02:81:6d:e2:b0:
         95:db:dc:37:f1:51:5a:29:82:50:9f:d3:e5:c8:e1:5e:27:1e:
         86:78:81:17:79:b1:1e:44:2d:95:b0:ca:55:a1:57:b3:d6:90:
         e6:18:55:a1:28:2e:c1:fa:cd:e6:78:5b:13:0e:e2:65:ea:82:
         6a:43:53:ee:57:22:db:9e:81:96:32:46:c7:80:1f:f0:3a:ee:
         ee:d3:c1:c7:b8:2b:14:0f:dc:38:9d:90:1d:23:2b:66:5b:46:
         a3:99:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:11 2026 by rpki-client