Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/873C98E0DE5911ED826BDB39C4F9AE02.roa
File:                     873C98E0DE5911ED826BDB39C4F9AE02.roa (raw, json)
Hash identifier:          fi0WxUWe/5phyMY8NJJgU3JM6SHJJsIOXm8Rgthn7HU=
Subject key identifier:   69:B3:D6:E9:6F:F7:72:D1:BF:7F:14:5D:38:6F:D5:2F:53:80:AE:F6
Certificate issuer:       /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial:       034B
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/873C98E0DE5911ED826BDB39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:05:14 +0000
ROA not before:           Sat 01 Mar 2025 03:55:10 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        203.201.18.0/24 maxlen: 24
                          203.201.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
                          rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
        Validity
            Not Before: Mar  1 03:55:10 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a42b79-945f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:42:04:d8:03:e2:a5:84:97:69:7f:99:20:
                    6c:8b:81:55:dd:f4:37:0d:c3:1c:5a:3c:2b:3a:dd:
                    de:c1:82:ad:8d:07:42:5f:16:44:f0:7d:c5:06:44:
                    85:96:a9:4e:40:63:24:b0:6d:09:73:2e:89:3c:ad:
                    dc:48:3c:7f:6c:61:3d:04:be:fe:a1:70:70:77:52:
                    e8:46:f0:28:3d:f2:23:59:cc:e2:69:1e:aa:02:dd:
                    a7:07:0b:3b:80:0e:62:fa:19:99:7a:b5:c3:79:4f:
                    0f:bf:d5:0a:1b:ab:1d:7f:8f:da:0a:ef:bb:9d:36:
                    03:52:77:0c:f5:4a:1f:43:dc:2b:01:41:6a:97:9c:
                    d4:7d:4d:2c:b3:ca:62:66:71:c9:61:70:d8:80:46:
                    b9:6c:1f:d4:10:0e:fc:a7:3b:fd:6a:73:5a:a4:e2:
                    04:b7:c5:ff:58:1f:ba:59:7d:ad:5e:c5:10:01:3a:
                    cd:80:4a:c6:5e:9a:52:4e:6a:61:cf:1d:3c:8c:30:
                    39:ff:ae:89:8a:38:49:ba:55:9c:51:f4:0f:0c:7c:
                    e9:c5:2f:eb:c6:7a:41:38:7b:52:11:5e:66:bb:bb:
                    7d:5e:b4:ad:3a:50:13:0b:69:7d:c0:b7:ed:cc:e0:
                    27:d2:a0:3f:ec:e1:89:e6:af:74:7c:e1:96:c4:ad:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B3:D6:E9:6F:F7:72:D1:BF:7F:14:5D:38:6F:D5:2F:53:80:AE:F6
            X509v3 Authority Key Identifier:
                keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/873C98E0DE5911ED826BDB39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.18.0/24
                  203.201.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:db:9e:d7:f9:b2:bd:6d:cd:17:9b:e4:9b:c1:f5:ea:ce:a6:
         ba:6f:9e:e2:7f:ef:b2:21:1d:0f:f6:28:5e:f5:e1:76:e6:2f:
         67:b3:ea:e7:62:25:55:93:54:3d:a5:a4:71:67:f3:6c:f8:c1:
         33:33:ee:a8:14:74:2f:9d:64:63:1c:b9:79:17:75:a8:3e:0c:
         62:16:69:b8:32:4a:de:30:5a:32:e9:63:a4:34:4d:48:a4:5e:
         ab:d8:d2:61:f5:68:d2:89:1b:69:7c:d3:39:cd:91:30:f9:7d:
         82:78:48:f9:03:f2:cf:e6:3f:97:4d:8d:c0:99:e5:65:1e:54:
         47:dd:c7:89:3d:48:af:7a:f0:3e:28:fc:ed:1d:74:bf:b3:f6:
         6f:4a:51:23:9b:a8:0e:83:75:69:58:9a:69:07:08:af:55:8a:
         22:93:3f:51:ff:3c:9c:bd:27:c5:15:45:cf:b2:39:ca:52:4a:
         e2:b2:12:0d:91:c5:f2:a6:76:b4:b9:15:07:63:90:27:76:fb:
         79:75:36:4e:56:50:31:cf:17:bf:70:98:fe:09:e9:46:9f:fe:
         a6:27:d4:9c:c6:3b:d5:94:df:1f:af:b1:55:e9:0f:c2:e0:0e:
         4f:f7:a8:be:1d:47:8e:40:8b:6c:28:8a:4f:1b:ab:62:69:0e:
         db:40:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:22 2026 by rpki-client