Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa
File:                     CDD9D46EA82511F0A1B4386EC4F9AE02.roa (raw, json)
Hash identifier:          /fZtQO9WFWt4xEmvAMiAEgk560qzFG36sx+TD4RIiz4=
Subject key identifier:   D0:48:0A:BB:1C:10:22:11:05:97:75:3F:6D:AE:B1:A9:93:B9:91:73
Certificate issuer:       /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Certificate serial:       BB
Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:58:55 +0000
ROA not before:           Mon 13 Oct 2025 11:17:02 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135495
IP address blocks:        163.227.240.0/24 maxlen: 24
                          2001:df3:7200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
                          rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
        Validity
            Not Before: Oct 13 11:17:02 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a5979f-152f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:35:0d:4e:60:13:4e:61:a1:c2:5d:47:78:
                    03:dc:1a:3c:2c:7d:ac:0b:9d:70:a1:82:c1:7a:7b:
                    ed:fd:53:6f:d0:c2:b2:7c:fc:0a:61:03:2f:ee:b4:
                    61:34:d9:03:6c:42:36:e5:35:3e:91:d6:4b:c3:a1:
                    f9:25:3b:bf:6f:8d:df:16:2e:06:a3:48:50:18:30:
                    1e:9d:05:ba:3d:7f:07:dd:a6:ab:6e:a9:3d:85:d3:
                    45:72:d7:63:f3:37:44:72:7a:d9:ca:20:bd:b1:9a:
                    a4:9e:99:a5:36:0a:78:60:21:50:16:c0:25:9d:ab:
                    8f:53:d4:3f:52:23:a1:91:c3:82:32:68:10:eb:32:
                    c8:ff:ba:7a:e5:12:c0:34:e1:4e:a8:31:70:05:16:
                    4d:f9:db:6a:e2:a4:60:40:28:b3:b0:b6:45:d8:4a:
                    26:24:c5:49:e4:82:82:6e:54:28:57:7c:b1:53:1e:
                    4a:dc:8e:44:7d:29:5a:28:22:87:4d:40:3d:f7:b6:
                    a7:fd:e3:b1:f8:67:4f:1f:25:5e:75:e3:27:2e:5f:
                    f2:5e:ab:a6:dd:7a:83:24:b5:79:2a:74:a8:8f:bc:
                    10:18:73:ba:e6:ab:c0:6f:99:b8:e0:2c:ce:cc:e6:
                    69:82:c8:cb:4a:44:31:b7:db:44:9e:27:82:48:85:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:48:0A:BB:1C:10:22:11:05:97:75:3F:6D:AE:B1:A9:93:B9:91:73
            X509v3 Authority Key Identifier:
                keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.240.0/24
                IPv6:
                  2001:df3:7200::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:54:bf:e0:b0:f4:9d:83:cf:f5:c6:21:38:f6:41:c4:0e:3e:
         74:b3:c9:27:09:22:50:22:bc:52:5e:b5:83:da:98:09:4b:d9:
         f2:70:80:5d:72:70:98:18:9e:6e:0d:2a:5a:c8:93:5e:21:32:
         7e:ae:2f:f3:09:7f:ed:46:db:07:c2:66:3a:28:6f:17:e0:5e:
         5c:a5:65:14:ca:ef:c3:2b:2d:b6:ed:cf:d7:11:b5:70:58:7e:
         68:b6:9c:ba:8d:db:3c:ab:1a:ab:a2:e0:98:9b:0c:9d:35:64:
         0b:64:dc:a1:30:bd:bd:03:33:ed:3a:34:db:14:bf:30:ab:66:
         82:87:34:08:70:37:e2:f9:a4:b3:bf:f6:a7:c6:0a:72:99:be:
         60:1d:b4:bc:bf:33:5a:e2:b4:40:df:fb:6e:d7:c3:4c:82:cc:
         75:62:af:be:c3:b2:42:5f:e4:91:19:20:a0:f6:0a:18:d0:9c:
         d0:c2:80:eb:5d:48:36:57:88:3a:f9:2d:39:17:d2:0f:79:51:
         05:21:f9:1b:2c:9b:7f:41:89:32:13:a6:02:ca:10:89:1e:78:
         5a:a8:29:8d:84:fc:32:8c:64:4f:24:fa:28:82:ff:e8:36:56:
         9c:be:11:17:17:09:01:68:fc:b9:ae:7d:83:a9:a1:ee:c2:c3:
         3f:1e:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:58 2026 by rpki-client