Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/4453BC8A2CD411EC8884B41FC4F9AE02.roa
File:                     4453BC8A2CD411EC8884B41FC4F9AE02.roa (raw, json)
Hash identifier:          z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=
Subject key identifier:   35:BB:CB:14:38:7A:93:FD:EB:79:90:06:81:C3:20:D6:86:B8:00:6A
Certificate issuer:       /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial:       3548
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/4453BC8A2CD411EC8884B41FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:22:11 +0000
ROA not before:           Mon 06 Oct 2025 15:11:08 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     198504
IP address blocks:        203.171.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
                          rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13640 (0x3548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
        Validity
            Not Before: Oct  6 15:11:08 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a467b3-6412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:5c:53:f9:af:6e:76:19:7f:13:2f:14:52:
                    ef:38:0d:f0:58:4c:56:9e:62:2b:4b:85:5b:ce:4f:
                    bd:72:19:8c:7d:86:eb:20:82:06:62:4a:a9:b9:70:
                    26:79:7e:d4:15:c1:d5:8a:f7:3a:bb:2e:25:ac:a3:
                    e8:6e:61:c9:7d:56:fe:34:42:3f:ac:24:84:78:cb:
                    d6:d9:32:af:d9:d1:a2:c2:91:0b:2d:6b:39:79:de:
                    82:11:ba:95:8d:b3:70:a1:34:f3:78:09:48:11:92:
                    72:2b:9d:52:35:ab:5f:45:b9:1c:f8:88:d2:0b:a4:
                    b9:ea:aa:f6:c5:86:cf:55:cd:9f:3a:59:ab:eb:86:
                    ff:23:c2:49:23:4b:e3:e6:70:47:6d:0f:b7:dc:05:
                    e9:5f:23:82:79:c2:b9:ef:49:7d:9f:24:84:d9:99:
                    6a:78:97:c4:e1:e6:b4:e4:91:2e:88:54:aa:eb:32:
                    29:67:23:b2:9f:90:97:2e:ef:77:f8:2d:4f:66:7a:
                    a1:04:79:b9:8d:aa:fd:ab:23:61:df:6f:6f:e5:3d:
                    1a:5e:98:90:0e:d6:fc:1e:6e:60:ec:17:bb:d0:27:
                    78:bf:cb:d1:2d:97:01:69:96:22:42:7c:83:75:90:
                    d6:f8:c6:b2:b1:96:82:1b:51:af:47:64:e0:e7:87:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BB:CB:14:38:7A:93:FD:EB:79:90:06:81:C3:20:D6:86:B8:00:6A
            X509v3 Authority Key Identifier:
                keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/4453BC8A2CD411EC8884B41FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.171.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:1d:a7:32:24:e2:42:45:36:4a:c8:51:c1:3f:9a:1d:44:
         1d:52:c7:fc:07:8c:52:13:4f:01:ca:4c:e0:65:8c:df:f8:06:
         0a:18:e3:b4:cb:cc:75:89:47:c3:51:f5:df:e4:31:da:6c:da:
         df:91:26:e2:a4:ce:27:a6:5f:d6:7f:dc:8b:17:78:9e:af:ce:
         b5:e1:8b:28:d2:e6:14:40:e3:7e:18:9f:d4:b4:bf:89:81:d9:
         4e:52:80:d4:84:5c:7d:0a:3d:25:15:b2:25:03:8b:95:55:7d:
         45:b8:7d:a4:b0:30:40:e2:a2:e0:0c:bb:72:c9:d2:51:a2:c1:
         d9:8c:93:5b:4b:3c:bf:e3:95:dc:ff:9e:a2:90:06:e5:cf:a1:
         d2:8b:26:25:c3:84:64:49:0d:71:6b:3c:a7:c4:b4:99:0c:8e:
         17:d0:50:42:ce:e9:8f:ad:d6:45:cc:98:dc:d7:6a:ec:9c:56:
         d8:c3:8b:3c:9e:89:33:a2:9d:8c:44:14:ab:34:da:ee:2e:7a:
         28:96:19:01:10:ad:1e:7f:ff:c7:cb:39:36:08:eb:b2:fc:ef:
         4b:b3:7a:33:eb:65:ed:cd:28:6f:7a:62:17:53:aa:6b:99:b7:
         4a:ba:15:4b:ae:2f:82:e9:10:61:3c:b0:4b:52:e4:22:96:a3:
         e6:33:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:14:02 2026 by rpki-client