Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/0171E23E2E9411E9A7232A19C4F9AE02.roa
File:                     0171E23E2E9411E9A7232A19C4F9AE02.roa (raw, json)
Hash identifier:          utZF48o+V1iqViyrul4ouJSJVWfTBOJgEF5i7OYCMAk=
Subject key identifier:   85:DB:CF:10:97:6F:86:57:61:99:96:FD:AB:D6:BD:98:55:51:72:5D
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       262D
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/0171E23E2E9411E9A7232A19C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:53:02 +0000
ROA not before:           Mon 04 Aug 2025 16:24:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4797
IP address blocks:        112.198.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9773 (0x262d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Aug  4 16:24:31 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48b0e-2079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:9b:24:33:62:d2:ec:1c:63:a9:a9:08:2f:
                    47:6b:02:1b:ba:64:cd:ad:b6:e5:15:c0:5e:21:6e:
                    31:ad:eb:09:b4:b0:b3:94:b0:b5:76:e8:b4:11:65:
                    ce:1d:5d:63:b2:3b:8b:72:cc:d5:4b:42:4a:8c:00:
                    76:b3:4e:67:ca:4d:77:49:8a:99:ea:9d:c6:d2:5d:
                    e9:bd:ee:d2:cd:75:6b:d4:e7:80:62:15:17:66:54:
                    22:03:14:29:6d:99:a0:f4:b3:f9:96:ee:3f:28:b6:
                    8a:d1:40:fb:da:2f:7a:0c:5b:30:cd:f6:99:78:db:
                    5b:90:80:ee:31:d0:b5:10:d4:6c:51:73:5e:e5:7f:
                    a2:5d:2e:26:15:32:ef:14:de:69:25:1e:98:8c:f5:
                    c4:3b:bf:99:06:7b:0c:78:c3:07:cb:9f:b2:8e:60:
                    83:47:50:7a:e9:56:70:ff:c4:51:83:95:f6:54:7c:
                    22:8b:a0:e3:92:a6:2b:63:b1:ae:cb:40:4a:ab:74:
                    a2:3b:39:66:fa:43:7a:b6:d1:ec:cf:4c:72:3a:f8:
                    19:98:9d:6f:e0:45:b2:05:0b:12:44:cf:7e:36:2d:
                    54:7b:af:11:f7:77:1a:10:47:01:d9:d3:cd:17:c7:
                    91:3e:36:cc:a6:58:74:46:22:ad:9d:d6:1e:db:32:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:CF:10:97:6F:86:57:61:99:96:FD:AB:D6:BD:98:55:51:72:5D
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/0171E23E2E9411E9A7232A19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.198.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:cd:ea:e0:85:e9:21:57:a9:45:bc:aa:19:03:32:07:c9:2a:
         6d:3b:eb:53:c9:e0:cc:0b:a1:95:b4:c2:9e:2d:1e:6d:2d:bd:
         be:a1:22:22:93:e6:72:4e:e8:e8:10:88:9f:90:8c:40:9b:ee:
         85:e5:f4:a6:74:42:a1:66:a0:0a:b2:6d:f5:62:57:4b:2c:f2:
         16:90:da:62:57:d7:62:29:38:23:47:e1:28:8d:2b:bb:af:83:
         1a:9b:37:32:d0:18:22:a5:3b:ac:d4:00:58:6e:a8:91:2c:84:
         bd:0e:5b:62:09:b3:8e:03:7d:e4:77:07:e6:cf:5a:c0:85:3f:
         20:bd:00:54:fc:58:7e:b2:fd:b8:cb:a3:43:ad:01:f5:ee:c9:
         07:e9:77:c4:36:32:b4:ff:1d:74:6c:34:bd:40:72:2d:71:62:
         8f:43:70:d4:18:cd:c9:88:cc:fc:ac:67:0a:cf:67:fd:76:d8:
         f9:0a:8e:8e:07:d8:8d:b5:2a:1b:70:31:d7:ee:ed:17:ab:02:
         47:6b:07:60:19:47:df:70:24:bc:ca:35:ee:68:61:a2:af:8d:
         d7:94:79:65:5f:25:e5:e7:42:62:40:2d:10:c2:bd:79:b7:4d:
         6e:bb:a6:22:c5:28:5f:65:87:1c:12:e6:d4:74:09:b0:ec:34:
         63:b7:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:26 2026 by rpki-client