Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/098D6EACAD3E11ED8B645C39C4F9AE02.roa
File:                     098D6EACAD3E11ED8B645C39C4F9AE02.roa (raw, json)
Hash identifier:          HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=
Subject key identifier:   C4:E9:1D:50:D5:B9:3F:D2:C4:7D:24:F3:42:FE:5D:B1:ED:E7:F8:6A
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       0250
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/098D6EACAD3E11ED8B645C39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:06:31 +0000
ROA not before:           Sat 07 Feb 2026 02:21:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     55803
IP address blocks:        203.20.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Feb  7 02:21:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a455f7-80f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:3d:3e:79:02:09:bf:24:40:fe:7f:bf:dd:
                    37:d9:9c:ee:23:6f:c4:9a:7b:ca:e8:e7:73:63:cf:
                    c8:ef:88:5c:09:9f:2f:b0:22:e5:20:fd:9d:c6:4b:
                    3e:69:ea:47:0b:2a:8b:c0:a3:27:0f:b0:5c:bc:42:
                    44:98:32:56:a0:97:71:d3:b7:26:b1:c7:df:ed:0b:
                    0b:47:bd:d7:c6:e6:4a:9b:c0:d9:52:ea:47:65:6e:
                    dc:d9:b6:a6:d9:3e:80:f5:33:bf:69:01:ee:8d:ba:
                    06:f7:a8:66:03:08:92:1c:3d:6c:ee:e7:ff:0f:1d:
                    d8:1e:9f:8c:ba:4f:26:aa:ee:0d:c9:3e:59:fc:10:
                    1b:6f:44:9f:7a:b3:c2:58:c7:4b:a1:a9:76:ac:cf:
                    12:26:20:82:a4:3e:c0:64:15:11:74:a7:6e:8c:2b:
                    5f:49:21:2a:3e:dd:e0:ff:bf:6e:cd:47:e5:29:f1:
                    de:2a:c0:2a:fa:3e:96:81:06:f6:b2:fa:4e:41:35:
                    eb:96:ea:ff:ad:fe:4b:b8:45:e5:6c:ce:5f:6c:aa:
                    5a:2f:69:e2:cf:a8:04:ce:d3:01:e5:3d:2c:46:8e:
                    6c:9f:b9:71:a9:3a:4b:82:ec:40:ce:7a:26:d6:b4:
                    e2:89:51:c0:b0:a1:74:36:79:8e:84:45:31:4d:cb:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E9:1D:50:D5:B9:3F:D2:C4:7D:24:F3:42:FE:5D:B1:ED:E7:F8:6A
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/098D6EACAD3E11ED8B645C39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c8:fe:07:e4:9a:df:52:13:4b:47:0b:9a:b1:a4:5d:20:4c:
         ac:0c:88:af:46:b3:d1:ff:d4:51:04:bc:cc:3a:82:82:e8:db:
         5b:aa:73:dc:70:44:07:60:1c:29:ea:15:66:d5:f6:ac:6e:31:
         cf:d1:cb:89:5d:9f:5c:33:43:31:ec:32:31:9a:96:66:d6:0b:
         fa:96:52:0e:3b:13:08:f0:42:66:75:a6:c9:19:7b:10:4e:65:
         3f:f5:9b:89:96:f6:93:16:ce:c7:c7:fe:68:aa:73:ca:2c:ed:
         44:d0:f2:8d:ff:75:a6:d3:f4:46:67:76:b4:30:ff:e0:ca:3e:
         25:c0:f6:10:33:91:10:8e:d5:9a:70:74:40:cc:c9:e0:07:9f:
         81:39:ff:a4:9f:cb:7b:7c:58:6e:1d:71:f2:3a:b6:06:ba:e2:
         41:68:0f:58:85:58:8a:e4:4b:06:c4:3c:4a:52:c6:aa:0e:aa:
         19:90:68:74:80:af:a2:19:92:bc:1c:d7:d6:36:fc:60:7d:12:
         f1:76:1d:ac:11:90:d6:d3:79:07:09:ed:00:de:92:a4:23:27:
         de:8c:3a:cb:e4:56:ff:31:5b:2f:77:43:ea:d3:1a:1c:43:5b:
         85:c6:39:dd:88:cc:4a:a3:82:93:96:9f:ea:54:0e:21:09:1d:
         ec:f0:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:40 2026 by rpki-client