Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa
File:                     EB429364CA3811EE99BEB838C4F9AE02.roa (raw, json)
Hash identifier:          q2r56qA7EC09+cAvQlDYR+19HkC6/7LH8pBlmSxU3qs=
Subject key identifier:   76:9D:02:7C:E2:7A:94:6D:34:63:0B:ED:B4:3F:9A:DC:A1:43:E0:DD
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       1459
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa
Signing time:             Thu 10 Sep 2026 17:33:50 +0000
ROA not before:           Thu 10 Sep 2026 17:33:50 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        203.12.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5209 (0x1459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Sep 10 17:33:50 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa2e9fe-9ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:c1:f9:55:bd:42:94:51:19:7c:2a:b5:65:
                    38:9c:32:d7:6f:7b:6d:13:03:f6:25:45:c4:49:5b:
                    62:15:c4:e2:12:f4:56:36:71:ef:9b:6b:b8:5b:f4:
                    6e:c6:81:3f:03:2e:4c:a4:7b:68:ac:b8:d0:35:4e:
                    44:6b:9b:7b:97:53:6b:26:e1:47:21:9b:74:3f:23:
                    45:48:41:e2:90:51:c5:1b:11:4e:07:36:42:08:0b:
                    ab:bf:3f:ad:f4:bc:b8:b1:cc:9b:f7:1e:61:04:c7:
                    11:24:f2:d7:20:35:02:d5:2e:cd:28:2f:12:c0:c0:
                    60:d0:2a:fd:54:1c:dc:2d:3e:ac:b0:de:be:2b:f1:
                    15:ff:50:9e:c0:c7:a6:e2:dd:6d:2d:0a:69:d2:41:
                    bb:60:3c:20:74:73:43:ed:87:7a:5a:68:29:04:13:
                    1a:55:ef:a4:03:59:bd:b6:df:b5:a7:9d:f5:14:c4:
                    bd:69:ef:80:36:9d:20:dc:c8:d5:d3:18:b3:9c:15:
                    24:03:0b:6e:73:4e:01:5f:3c:59:94:de:f5:3a:0c:
                    48:39:f1:93:ce:f7:76:47:18:37:ac:e6:eb:6f:19:
                    73:98:0c:03:8d:3c:e2:9b:c8:68:39:de:be:04:2a:
                    45:57:20:f0:20:4e:4f:76:29:8a:04:83:f1:f9:04:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9D:02:7C:E2:7A:94:6D:34:63:0B:ED:B4:3F:9A:DC:A1:43:E0:DD
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:2e:5d:28:94:77:49:f6:e5:57:f4:d8:da:53:77:f6:f2:1b:
         59:ed:f7:1a:b8:3a:52:30:dd:40:c7:93:b1:1e:aa:2e:8e:46:
         e6:28:11:55:43:7e:bd:87:98:7a:70:18:4e:1f:ec:ea:f2:22:
         7e:cc:1c:0f:f4:14:ec:15:7f:24:69:78:89:d1:52:e7:07:a1:
         1f:a2:92:69:17:4e:33:a7:6c:77:5c:fd:09:39:19:2d:ad:cc:
         21:4d:1f:dc:aa:49:68:df:52:1d:e3:e5:93:3f:72:f4:ab:51:
         c6:9b:e6:d3:41:9e:c8:0a:b8:b0:b1:97:be:a1:3e:bf:89:a1:
         e0:2e:d8:b8:27:67:fe:da:a8:1e:4e:d8:6f:71:9d:48:01:2e:
         e9:2e:36:54:3d:19:d0:bf:b4:79:ee:0a:4e:11:34:ac:52:6c:
         3d:38:43:4c:e0:79:4d:1c:d4:71:46:07:1f:ee:84:72:ae:d6:
         37:0e:1e:99:08:b1:51:91:f0:bf:9c:ae:dc:cd:5d:05:d7:62:
         46:01:52:12:72:87:e2:e5:cb:a3:a2:0d:5c:7c:e8:07:90:6b:
         80:8f:c3:d0:50:4f:ac:6c:f3:47:22:bd:ae:14:01:e8:ba:0c:
         71:39:64:f7:c6:03:21:f4:e2:79:61:e4:90:a0:fc:25:d8:ba:
         3a:88:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:44 2026 by rpki-client