Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/B94D12C0F07F11EBAE5A5934C4F9AE02.roa
File:                     B94D12C0F07F11EBAE5A5934C4F9AE02.roa (raw, json)
Hash identifier:          5uzOMDxVQG6o2wJsSwgOydC+9oz2b76Yz5g0H0UYCJg=
Subject key identifier:   29:EE:1D:39:F2:C7:86:52:3E:A6:25:09:3C:95:1E:DE:0C:24:8B:22
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       10C0
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/B94D12C0F07F11EBAE5A5934C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:37:22 +0000
ROA not before:           Thu 24 Apr 2025 17:46:16 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     63528
IP address blocks:        203.159.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4288 (0x10c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: Apr 24 17:46:16 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a44f22-6e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:30:04:1f:20:ec:2d:ce:55:16:96:63:50:
                    62:c6:0c:e7:ed:36:f5:6d:02:80:e2:d1:47:50:6a:
                    96:f9:c3:50:ea:d6:b8:31:43:0b:9d:16:d3:2e:5f:
                    b9:b9:73:70:80:84:bb:63:31:c2:98:56:4e:43:a9:
                    e3:65:1e:04:39:c2:d6:e1:70:d7:d0:1f:99:2a:80:
                    48:3f:10:72:38:0a:a5:99:da:eb:5d:ff:48:fc:90:
                    21:1a:cf:1a:e2:c9:30:45:58:b5:a7:01:b2:54:98:
                    1c:eb:eb:29:d7:fb:d2:01:a2:b6:e7:fb:91:a2:82:
                    49:93:51:b7:35:80:a7:97:85:7c:98:47:ea:b9:91:
                    80:12:52:ae:34:e7:8d:2b:40:0e:68:b3:82:ca:c4:
                    a8:af:d8:5b:fa:03:14:b8:19:ad:bd:06:58:20:66:
                    26:d4:b1:c6:6d:49:85:c6:60:a2:d7:d0:8e:ff:dc:
                    7e:cc:35:c1:a4:4f:b6:4b:ef:a7:a7:0f:14:06:3c:
                    6b:71:f3:03:88:46:0c:1d:80:a2:c8:63:01:1e:15:
                    dc:91:30:ed:15:09:53:85:64:53:88:ef:a4:96:db:
                    2e:1a:3d:54:1a:60:86:b6:90:ee:01:b7:35:78:d2:
                    71:11:1a:b7:f0:b1:90:f0:74:f9:56:40:09:68:5d:
                    18:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:1D:39:F2:C7:86:52:3E:A6:25:09:3C:95:1E:DE:0C:24:8B:22
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/B94D12C0F07F11EBAE5A5934C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.159.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:af:e5:93:58:69:6a:68:90:31:21:cb:af:53:84:79:59:3c:
         ea:e4:07:c4:74:95:55:c9:16:9c:6d:2b:84:e2:8d:c1:84:8b:
         90:38:00:3b:ea:90:1d:a0:6e:16:05:bf:e4:ae:37:2e:6a:6f:
         00:64:05:da:6d:97:43:fb:ef:fd:75:cb:c5:5d:27:73:93:3e:
         8d:38:89:a7:ee:38:7d:b2:f0:f5:85:7c:0a:3e:d4:a7:bb:fb:
         83:ae:de:d9:8a:c6:04:ee:0a:7c:03:fc:8a:ec:21:71:52:02:
         7d:64:bb:6d:a2:a5:1a:66:68:b0:e7:94:7a:31:6b:85:cd:21:
         97:59:6f:15:2b:9a:93:a9:a7:19:b3:bd:26:b4:c4:15:a2:2a:
         76:7f:3a:8e:02:8e:ac:41:ff:18:06:e8:27:a8:ed:e6:a8:18:
         4c:0c:09:4a:1a:cc:49:00:e9:83:70:79:85:2a:60:55:95:1c:
         60:41:f4:88:2b:0d:3a:56:5d:0d:1a:5f:67:61:45:d4:75:e7:
         16:fa:17:5f:5c:99:b6:a9:c8:12:95:27:9f:53:99:3b:1b:a9:
         59:f7:34:91:58:47:cf:90:4f:b1:e4:53:42:6d:16:13:84:7b:
         b7:6a:24:77:27:07:cb:3d:f9:88:88:13:68:dc:f5:9d:8f:e0:
         8c:10:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:22 2026 by rpki-client