Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/EA731210895D11F193C4BB306611F970.roa
File:                     EA731210895D11F193C4BB306611F970.roa (raw, json)
Hash identifier:          LhIix3MqgGCa2w3+feEZuut9yVtkWwXiLFodoDN7Li8=
Subject key identifier:   F5:CC:27:4A:BE:FD:50:5A:DB:B2:EB:01:7C:53:09:D5:41:14:A2:76
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       26B7
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/EA731210895D11F193C4BB306611F970.roa
Signing time:             Mon 27 Jul 2026 01:53:08 +0000
ROA not before:           Mon 27 Jul 2026 01:53:08 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     18115
IP address blocks:        203.177.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9911 (0x26b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 27 01:53:08 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a66ba04-39da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:31:09:fc:fc:a4:07:b6:8a:80:31:fc:4f:
                    26:1b:c1:60:63:8c:65:61:62:84:f3:6f:4f:40:00:
                    a8:a9:59:6b:be:55:c1:ae:5e:1d:a6:71:45:72:32:
                    44:07:6c:ae:e9:71:43:f3:2f:a3:4d:4d:16:0f:ed:
                    eb:fe:6e:4e:d8:10:41:d0:a3:f9:b8:40:8d:e8:df:
                    ef:f5:e2:29:f5:41:23:9d:da:f2:64:de:b5:07:f7:
                    b6:31:0c:13:31:16:9b:5f:e6:e5:16:e2:1d:20:c7:
                    fc:0c:96:b2:63:85:6f:b4:93:49:87:9c:93:2a:aa:
                    ff:58:1a:85:0c:e3:ea:3f:f1:69:93:90:9e:8e:63:
                    3b:7b:cc:68:b1:9b:cd:bb:f6:6b:51:9e:5e:87:a9:
                    7d:5a:12:5e:b7:53:c4:20:3a:55:ce:43:67:4a:87:
                    b6:81:7a:70:f3:2f:79:6d:3f:07:91:2d:e0:dc:4c:
                    3f:6b:d8:e3:7c:a3:96:71:ba:28:7f:74:b2:d8:67:
                    e1:59:f8:e6:ee:4d:9e:86:44:7e:49:9c:7a:98:70:
                    fb:f2:70:09:ce:e5:1c:48:73:93:1b:fa:20:be:42:
                    6c:fe:94:fc:4c:38:cc:42:29:6b:61:5d:25:97:e4:
                    c3:c0:c5:71:71:6f:ed:da:1e:48:a9:1f:02:1e:4a:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CC:27:4A:BE:FD:50:5A:DB:B2:EB:01:7C:53:09:D5:41:14:A2:76
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/EA731210895D11F193C4BB306611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:fc:d7:f7:58:97:ca:05:29:cd:bd:26:fb:9d:07:2c:40:c9:
         48:c0:b8:41:84:f5:42:00:bc:98:f3:0a:70:ce:87:d7:25:e3:
         56:9c:e3:6c:de:ad:73:3b:a2:be:de:e9:39:ea:3c:4f:d7:a2:
         68:f6:62:8d:16:db:a1:1c:21:19:ec:a5:9e:3d:df:40:34:b8:
         20:d9:cc:2b:bb:bb:8e:f0:88:01:ed:85:7e:64:58:15:e4:93:
         f1:52:b8:88:ec:9c:10:d1:24:3f:3a:da:8b:25:f7:10:47:45:
         ae:20:fd:82:0b:b5:99:98:85:76:ed:de:54:27:66:6a:1d:44:
         02:06:78:b4:f6:48:04:c9:5c:a1:da:77:6e:28:d5:e3:52:8f:
         66:d6:79:81:0d:11:fc:9a:04:ec:37:a5:94:63:8e:60:b1:89:
         c1:38:79:c3:90:e4:da:52:14:5b:cd:db:e8:8b:ac:26:e8:ff:
         a7:67:86:e2:32:15:87:70:9d:26:ea:49:7e:33:6a:14:36:67:
         6a:f8:e6:72:d3:ef:31:3d:aa:21:3f:a7:66:cb:6a:4c:b3:7a:
         d4:b4:b9:41:8b:90:f5:72:aa:26:cc:e9:d6:2b:78:08:7c:c0:
         25:34:64:6d:ef:88:31:2a:98:6f:39:83:99:fe:48:00:a9:63:
         2e:d2:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:36:48 2026 by rpki-client