Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
File:                     4C0C96C6022E11EBA920EA37C4F9AE02.roa (raw, json)
Hash identifier:          OEgEDUAjf9BTlI+eiF5A69LmOCeN7jWjg18CXPzKJG4=
Subject key identifier:   C8:8F:51:BA:BE:87:7C:7A:95:B2:AB:CF:7E:FB:47:AF:B7:DE:4D:85
Certificate issuer:       /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial:       187B
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:19:42 +0000
ROA not before:           Thu 08 May 2025 17:17:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9263
IP address blocks:        203.198.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6267 (0x187b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
        Validity
            Not Before: May  8 17:17:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4752e-56ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:1b:24:8a:43:7f:b1:93:d8:7e:96:b3:de:
                    41:72:68:85:f7:07:81:b2:41:82:14:b1:a0:9c:5e:
                    72:8e:b8:ad:b2:85:ee:78:0c:98:a0:c5:37:ad:c8:
                    5a:08:55:48:ad:38:d0:17:fc:66:a0:d6:a6:37:01:
                    2e:3a:2f:a2:14:3b:b0:ad:d8:38:48:2e:ef:4e:e9:
                    fb:24:d3:ec:2b:99:f6:94:8c:bb:e3:00:5c:a9:63:
                    7c:f8:af:da:d5:8a:ae:ea:9e:64:a1:2f:2b:04:cc:
                    97:b3:e5:d0:71:c5:dd:75:c5:67:03:60:d6:fd:62:
                    f8:f0:e8:25:0a:39:5e:96:b0:a7:32:3e:f3:84:54:
                    b6:07:df:16:98:80:2a:1f:48:9f:19:ce:ef:dd:99:
                    06:65:ad:f9:e7:65:ea:d3:02:a0:09:d9:91:e1:09:
                    6f:e6:c6:48:69:11:ae:d1:45:3d:48:b4:3f:09:95:
                    80:66:7d:54:2e:f1:f6:8e:8c:73:68:7d:17:13:08:
                    22:25:08:a2:40:46:06:01:a9:c6:2b:f6:ae:5e:40:
                    ef:e7:f7:46:b2:84:b6:32:f8:6a:70:b7:83:23:30:
                    13:0f:8e:b8:c8:04:64:4c:90:df:4f:3e:06:09:f6:
                    71:28:9c:4b:42:cb:82:5f:ae:53:80:ab:15:ae:26:
                    8e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8F:51:BA:BE:87:7C:7A:95:B2:AB:CF:7E:FB:47:AF:B7:DE:4D:85
            X509v3 Authority Key Identifier:
                keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.198.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:0c:26:3b:27:b2:14:7f:e7:df:aa:aa:1d:c4:89:44:ef:70:
         c7:3f:82:b0:ed:ed:bb:a4:30:2b:67:f4:e8:20:98:a0:10:6d:
         0b:27:e1:d8:dd:2c:54:53:c6:4f:54:70:92:ae:f5:23:56:ae:
         49:5b:05:3b:47:04:d8:ca:ea:fd:a1:20:e8:26:be:33:99:f3:
         e6:4a:f3:f1:ac:a1:e0:e9:5b:2b:7b:2e:09:21:4d:f7:e9:ed:
         0d:1f:a2:e8:25:bd:c1:63:32:4b:bf:d2:30:c4:2b:2e:cc:48:
         80:4e:cc:f6:fe:03:d0:1b:ed:cc:95:13:1e:54:34:61:25:fb:
         93:0c:e9:62:5a:91:9d:f9:97:29:9d:fb:ec:b9:dc:cb:f2:3c:
         20:59:7d:89:55:d5:3f:c2:a7:35:d1:73:54:93:81:fa:01:03:
         ee:21:86:6e:4c:94:b7:5c:d1:86:74:86:f6:5d:31:46:34:1e:
         9d:46:0e:d3:f1:de:b5:a6:7d:b5:27:00:88:bd:de:3e:08:c1:
         49:46:a3:c6:07:ff:65:8a:47:74:10:6d:d3:84:25:27:3f:ce:
         b2:9c:80:9f:7a:22:f5:bc:22:6d:4e:e3:c2:68:c9:fb:ef:e9:
         55:9a:29:a1:cc:bf:8a:48:6d:b5:36:67:2a:f5:8c:51:b4:dc:
         1a:9b:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:51 2026 by rpki-client