Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/4795022EB68211EA8D895A86C4F9AE02.roa
File:                     4795022EB68211EA8D895A86C4F9AE02.roa (raw, json)
Hash identifier:          8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=
Subject key identifier:   95:C7:2E:1C:7A:60:A2:83:86:D8:64:EA:5B:D9:3B:9E:7E:7B:52:FE
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       256C
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/4795022EB68211EA8D895A86C4F9AE02.roa
Signing time:             Mon 04 Aug 2025 16:24:20 +0000
ROA not before:           Mon 04 Aug 2025 16:24:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24081
IP address blocks:        203.177.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9580 (0x256c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Aug  4 16:24:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6890deb3-c39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:48:ed:96:1c:f3:9e:b3:b7:e3:a8:3b:16:
                    bb:88:a6:c9:44:20:ac:ed:8c:51:3e:49:9d:a8:1b:
                    bc:54:fe:df:54:7b:56:bf:8f:16:0d:e9:e3:e8:18:
                    b3:60:ed:bb:31:27:05:6b:93:a5:ed:f0:b5:4f:49:
                    91:6c:1a:1f:58:ef:11:51:d4:52:42:fc:32:d9:7c:
                    05:7b:e3:39:75:8c:af:82:1a:ac:61:2d:60:80:27:
                    0d:d8:f3:60:bb:8d:cf:f2:32:84:5f:92:ed:9c:db:
                    48:7e:74:7d:07:85:54:86:bb:cd:f2:fe:75:ab:35:
                    2c:4c:e9:09:5c:bf:61:49:3a:78:18:e6:b2:f4:e2:
                    b0:ab:db:da:8d:03:26:69:9c:6c:44:38:a0:5f:2c:
                    3d:20:e7:82:e5:ce:f5:d8:e0:f9:0e:51:c8:d8:b1:
                    66:b8:9e:f1:a3:42:0e:10:a6:43:f0:62:ec:fe:2d:
                    c3:92:3d:e2:75:07:00:27:7c:33:ad:9b:73:5a:a2:
                    0e:d8:77:e0:19:7c:d6:eb:b4:a2:db:8a:ae:a5:cc:
                    51:4d:5a:82:1d:4d:3f:6f:b5:fa:7b:3b:9b:d6:13:
                    f8:c0:1f:6c:0e:4e:f4:8d:e4:22:d5:55:f9:40:0c:
                    da:df:62:d5:91:d9:ec:15:ca:e8:80:ac:82:24:51:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C7:2E:1C:7A:60:A2:83:86:D8:64:EA:5B:D9:3B:9E:7E:7B:52:FE
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/4795022EB68211EA8D895A86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:19:c8:f6:ce:a9:a0:be:f0:a3:d9:f4:bc:67:49:59:36:4a:
         83:68:af:ef:b2:1b:c0:af:0b:0b:77:38:42:8a:f9:3b:bb:9b:
         e8:0b:81:ee:65:1e:40:63:27:c0:72:a8:5a:b1:a2:65:9d:ee:
         3d:36:a7:02:9f:6b:d2:07:6d:5d:54:90:37:a1:2c:ee:a6:62:
         22:fc:f8:f8:1f:9e:a0:60:e5:da:78:3c:12:40:a7:8b:19:51:
         d1:37:f4:35:07:fc:70:90:51:30:56:85:b4:76:ef:e0:b2:9a:
         0c:78:71:7c:31:5d:df:55:92:6b:2e:00:48:97:e6:b9:8e:74:
         06:4b:7b:29:d0:c4:84:10:b1:36:11:96:68:1f:1e:97:be:2d:
         81:99:14:38:d0:91:0d:34:ae:bf:51:91:32:d7:8b:6e:18:d6:
         cd:bf:a0:4b:b9:9d:ed:52:4f:68:59:b0:7b:4c:13:45:e7:43:
         73:37:62:8e:c1:58:f3:b5:d4:e2:17:b3:cb:a3:d2:f6:01:ec:
         2c:0e:8f:ad:15:9a:b3:97:67:14:e2:fc:d2:37:d8:db:06:07:
         2d:1f:c6:09:f2:92:08:7c:53:87:63:08:90:9d:28:9d:51:dc:
         a0:79:4a:94:c3:4b:6b:b1:7f:00:24:b4:0f:fc:fd:dc:80:1b:
         c8:18:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:58:38 2025 by rpki-client