Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
File:                     24D4F9F0E61B11EBBAE35771C4F9AE02.roa (raw, json)
Hash identifier:          4D8RNBVxZ4n/YFoAFxcO6RiKNijl1P5296cdlR8pmnU=
Subject key identifier:   35:4E:8B:0F:B8:BD:3F:BB:8D:57:89:EC:BB:3E:A6:FF:80:6F:A5:94
Certificate issuer:       /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial:       0839
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:52:06 +0000
ROA not before:           Tue 18 Nov 2025 20:12:18 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7545
IP address blocks:        203.4.197.0/24 maxlen: 24
                          203.4.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
                          rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
        Validity
            Not Before: Nov 18 20:12:18 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45296-d67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:1f:f5:53:52:c1:db:7a:8e:b7:77:ea:73:
                    85:8f:45:9b:66:1d:8b:7d:21:59:a6:4c:a2:0b:e6:
                    8c:61:ce:4a:6c:34:e4:f8:35:4d:3f:44:7f:ec:ca:
                    1f:bd:46:8c:fc:96:cd:c2:e3:f3:e3:e4:50:23:17:
                    39:2f:30:67:f6:f9:b0:dd:fd:63:c6:15:35:24:85:
                    3f:63:8a:16:ba:5f:0c:54:61:a9:53:f5:28:e7:f4:
                    85:5d:33:2f:c5:73:d0:bf:3f:de:e8:cd:eb:e2:5a:
                    76:b0:dd:45:51:c1:e7:f4:c8:57:ba:ec:03:ac:3f:
                    6b:75:ac:3e:52:ae:8c:39:da:8f:63:ac:01:88:06:
                    5a:73:22:d3:50:b6:20:29:fb:75:90:5b:4b:bf:f2:
                    cc:a6:62:5f:fc:a8:a0:7f:60:39:c1:0e:61:ee:3c:
                    73:8c:bf:8a:60:54:48:6f:90:86:d9:5e:d1:4e:7f:
                    26:68:f9:02:ca:5d:f1:66:52:1e:ee:eb:1e:bc:63:
                    de:70:87:b7:eb:b0:3a:d1:c0:ab:3b:f8:b8:43:84:
                    e5:b5:c4:9c:4d:a2:0f:0b:75:dc:78:77:51:56:88:
                    16:39:ae:ad:29:92:4c:67:e7:c1:90:46:76:87:01:
                    09:a8:36:17:86:50:b9:65:bc:5b:0d:fc:50:78:10:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4E:8B:0F:B8:BD:3F:BB:8D:57:89:EC:BB:3E:A6:FF:80:6F:A5:94
            X509v3 Authority Key Identifier:
                keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.4.197.0-203.4.198.255

    Signature Algorithm: sha256WithRSAEncryption
         ac:09:ee:7d:4e:bc:98:ec:8c:6e:eb:82:ab:24:6b:f7:23:89:
         57:66:ac:03:62:b0:00:80:e2:0c:96:8f:b9:e9:83:7d:ae:1d:
         64:69:ed:cd:03:7d:96:85:dc:e4:6a:c4:86:19:c4:68:fd:86:
         12:ee:51:4b:51:90:5f:77:80:38:88:9a:b2:7a:ad:6d:eb:35:
         2a:fa:32:6f:a3:72:41:02:5f:81:4e:78:96:d2:42:a8:9a:f7:
         91:15:21:02:c2:0c:b6:df:04:e6:f6:03:06:3f:ff:7d:35:e1:
         e8:66:a2:22:94:c4:26:42:14:22:b9:1e:df:3b:49:05:da:c3:
         49:61:9d:c9:e3:52:7c:fb:de:f0:3a:e6:06:85:47:e6:45:44:
         71:95:5d:62:d0:5c:dc:09:67:3d:79:72:8d:9f:4a:45:3f:dc:
         f7:00:d1:c7:00:ab:00:6c:3c:a4:9c:39:ad:ca:31:f5:04:36:
         fc:41:f5:97:00:24:2d:5e:ea:57:e8:5e:1f:18:e1:0a:0f:19:
         11:d0:b1:85:54:43:f5:a7:4d:4b:df:c6:55:77:fb:5d:ab:bd:
         a6:a3:0f:01:d3:35:18:86:10:42:0b:94:69:90:4d:aa:ab:38:
         2b:a4:cd:ea:c0:31:02:dd:b3:9b:d6:c0:83:eb:7b:89:2b:6d:
         56:1c:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:05 2026 by rpki-client