Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/B94D12C0F07F11EBAE5A5934C4F9AE02.roa
File:                     B94D12C0F07F11EBAE5A5934C4F9AE02.roa (raw, json)
Hash identifier:          +oZqqbSfF7y4PvnGsPCA1za/Eu6HGAUVAMjzcBgpEOY=
Subject key identifier:   9B:11:56:7B:EA:31:8F:6F:FB:16:3E:CD:3D:03:30:5C:3B:B9:4C:B6
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       10F7
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/B94D12C0F07F11EBAE5A5934C4F9AE02.roa
Signing time:             Sun 31 May 2026 18:04:38 +0000
ROA not before:           Sun 31 May 2026 18:04:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     63528
IP address blocks:        203.159.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4343 (0x10f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: May 31 18:04:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1c7836-661e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:b8:d5:e9:03:18:21:df:a6:7a:b1:d1:21:
                    cc:3c:33:b1:89:f5:a0:b4:9f:df:30:c3:58:05:0a:
                    c6:2d:c0:f0:86:f6:3b:2f:fc:d0:f3:8f:ce:a4:92:
                    30:b4:35:76:e8:1e:a8:5c:78:da:37:2f:64:f4:0d:
                    63:15:a2:5f:87:9a:d5:e7:3c:e1:6a:89:b8:06:79:
                    cb:75:16:36:95:2f:4f:50:26:99:8b:71:0f:36:df:
                    1e:43:96:90:5a:8c:e9:aa:5f:f2:e7:8e:af:dc:dc:
                    68:43:28:4f:18:f9:69:27:33:4b:e5:9d:fb:e1:3c:
                    60:2b:bd:98:c0:a2:c5:cb:94:1d:09:25:71:e2:13:
                    85:3e:c8:94:01:36:d0:95:02:04:45:68:2c:26:2c:
                    52:be:05:9a:36:38:e9:d9:ed:17:b6:ae:bb:87:f0:
                    18:f8:d6:06:a1:b1:2f:5e:d9:23:4e:8a:75:6b:98:
                    83:31:a9:e7:cd:ca:b3:31:24:7e:bb:ca:67:be:6b:
                    10:62:81:03:41:a2:2e:ad:aa:6c:53:64:e1:24:1d:
                    7f:2d:8e:1e:d2:da:10:20:52:f7:62:79:d1:0a:5e:
                    d7:36:7c:8c:3a:79:aa:ee:ea:27:81:c9:8d:0b:69:
                    5f:be:ff:3a:84:4d:76:49:71:17:dd:f6:6e:99:5a:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:11:56:7B:EA:31:8F:6F:FB:16:3E:CD:3D:03:30:5C:3B:B9:4C:B6
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/B94D12C0F07F11EBAE5A5934C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.159.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:e3:57:d2:8e:90:74:fb:e4:eb:c4:db:b9:cf:a4:6a:fc:
         ce:a4:e7:a8:93:97:b5:96:64:ac:9f:dc:58:a0:71:e5:0f:92:
         53:d7:51:2c:d8:3b:0d:25:23:82:e3:2d:70:7f:be:1a:e7:ef:
         f3:c0:0b:e9:56:8a:17:60:17:3e:56:e1:c7:f5:6b:bd:de:e0:
         2c:c3:48:0a:2e:c6:85:eb:41:08:b5:06:92:cc:07:15:51:25:
         90:16:a9:b1:cc:dc:c6:04:b9:21:d1:b7:e6:9a:21:41:d0:ea:
         7a:29:79:e6:84:c4:e4:3f:91:6d:a6:82:79:6f:a7:ba:b5:07:
         0c:9c:7c:e7:d6:06:4e:48:80:32:87:97:28:58:70:7c:29:d5:
         a3:65:0e:b6:3f:a1:02:f9:7f:3c:cc:93:26:f3:37:65:fa:7d:
         96:40:59:c0:75:af:69:e9:5c:9f:1f:d1:a7:cc:fe:18:d2:90:
         cd:3d:6a:69:30:8a:d8:3a:76:4f:36:2d:03:a7:6e:52:29:e9:
         71:1d:d3:78:02:2c:a5:c5:9d:c8:ac:d6:79:4f:bd:9c:0b:b0:
         d0:23:2c:a7:80:04:b1:da:01:17:4b:7b:15:02:2a:7d:26:dc:
         8d:3b:ba:b2:ac:bd:ae:e9:7c:5c:ed:d0:21:a7:ee:a1:8f:16:
         da:93:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:31 2026 by rpki-client