Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
File:                     A97B2098C70811ECBAECCC78C4F9AE02.roa (raw, json)
Hash identifier:          kyIG7ncvbWqzn85Ha8KabsesL4FJLH6bGyp9u+dlsPU=
Subject key identifier:   06:0B:A0:04:F5:7A:34:5F:EB:7E:B7:09:27:2E:01:5A:0C:FF:31:41
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       04B9
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
Signing time:             Mon 08 Jun 2026 11:38:20 +0000
ROA not before:           Mon 08 Jun 2026 11:38:20 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        31.69.0.0/17 maxlen: 24
                          31.69.224.0/19 maxlen: 24
                          31.99.144.0/21 maxlen: 24
                          141.163.128.0/20 maxlen: 24
                          141.163.144.0/20 maxlen: 24
                          141.163.160.0/20 maxlen: 24
                          141.163.176.0/20 maxlen: 24
                          141.163.192.0/20 maxlen: 24
                          141.163.208.0/20 maxlen: 24
                          141.163.224.0/20 maxlen: 24
                          141.163.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1209 (0x4b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Jun  8 11:38:20 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a26a9ac-ca35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:f8:d6:1f:e4:17:22:42:77:94:76:92:fa:
                    98:27:67:ed:dd:db:dd:a6:c5:f0:ef:5b:30:f8:74:
                    61:a2:05:82:6b:c6:07:68:65:ab:22:ed:ff:1f:61:
                    bd:38:b8:78:c6:80:90:89:9c:fc:da:9d:15:20:4e:
                    e6:ef:76:43:16:91:51:20:29:5d:e2:44:54:44:0d:
                    b5:46:3c:e0:d0:87:5c:21:6c:7a:fa:a7:cc:f4:41:
                    28:86:a7:4e:08:c9:3f:02:17:e7:b1:a1:50:21:3c:
                    a5:92:06:fc:ba:f9:a0:d6:2e:46:0f:0a:78:54:28:
                    7c:a5:f4:68:ce:a3:74:ab:c6:85:2f:b8:5c:0b:9b:
                    49:b1:70:fc:a5:6c:4e:7d:30:20:24:3b:d3:57:c0:
                    14:f2:98:28:23:12:f6:a1:b3:57:e3:ce:e7:e6:44:
                    84:e1:2f:dc:09:c0:5c:3c:6d:b4:0c:cf:e5:fc:5c:
                    ac:53:df:85:15:7d:4e:0c:9f:fd:d0:fa:a8:4b:97:
                    f7:3a:85:8c:72:a6:28:d0:36:14:e0:6e:70:db:81:
                    ee:ea:c8:64:53:d6:ca:9f:fb:bc:95:88:22:29:5f:
                    ea:c4:a8:04:0c:1c:35:ac:7e:bb:51:e1:70:4c:4c:
                    58:1e:86:e0:c1:4b:72:f9:c1:12:d1:c5:3a:f0:c1:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0B:A0:04:F5:7A:34:5F:EB:7E:B7:09:27:2E:01:5A:0C:FF:31:41
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.69.0.0/17
                  31.69.224.0/19
                  31.99.144.0/21
                  141.163.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9e:34:23:2f:68:02:14:85:1e:26:df:43:f5:06:66:49:e3:97:
         a1:4b:37:50:24:dd:c0:98:45:89:ec:96:19:ac:4a:60:4b:7b:
         6e:23:5b:c9:0d:98:a6:b5:bc:2b:c8:c6:86:fb:4e:fb:4b:5b:
         1b:48:61:96:37:75:44:43:c0:d9:52:ed:10:de:de:6c:5f:29:
         29:fa:3a:27:d1:b9:b5:90:c3:87:f5:61:98:fa:54:44:46:c0:
         3a:2d:a2:e5:fd:97:ef:0a:95:de:d4:c6:e0:bb:61:b2:f9:4d:
         f4:86:f3:30:84:76:bc:a2:39:17:47:87:4b:29:2c:92:87:48:
         a9:69:c1:49:cd:1d:34:ce:e7:0a:fd:c6:47:67:cd:c5:0f:da:
         12:8b:3c:25:eb:82:d9:ec:b4:2a:99:5d:99:99:3b:55:e9:e9:
         36:1e:7c:01:ec:4b:21:16:3e:a4:97:22:43:36:5f:e4:1f:30:
         0f:4d:d0:a7:0f:63:04:a7:65:8b:73:26:7e:df:c4:a3:bb:38:
         fe:55:96:38:72:f8:7b:15:a1:a1:aa:1e:33:81:30:32:35:2c:
         d6:76:ab:91:6d:23:04:90:9e:21:15:c0:b4:77:5e:7a:07:e1:
         cc:0a:e9:4f:8c:61:ed:5a:6b:e0:82:bc:7f:98:38:4a:73:13:
         12:4b:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:34 2026 by rpki-client