Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9A3920B4366311EEB376DC3AC4F9AE02.roa
File:                     9A3920B4366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          dti+2Mbi2DlkA6SSlhA/NMboEuMCZTL6lyCn6w58GLU=
Subject key identifier:   25:37:56:C5:66:51:4E:4F:AE:6A:66:C9:5D:C0:ED:89:22:41:42:9C
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       0251
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9A3920B4366311EEB376DC3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:31:22 +0000
ROA not before:           Mon 23 Jun 2025 03:22:04 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151040
IP address blocks:        83.118.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 23 03:22:04 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a485fa-4cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:80:f0:dd:98:fa:33:52:8e:ca:6f:56:b2:
                    b4:b3:5b:aa:fa:b0:79:27:90:c6:a8:4e:a7:fb:1a:
                    36:50:54:9b:08:68:c1:2b:e8:19:71:bb:5f:25:07:
                    b8:2c:02:23:db:18:dd:03:00:9f:55:ec:23:ee:a7:
                    3a:19:a2:e1:59:ef:c9:f6:d0:13:2d:07:a2:eb:da:
                    9c:d5:b7:e2:5d:85:2e:1d:8f:62:f6:69:d8:12:22:
                    a8:35:d9:9f:21:2e:b9:3b:ab:dd:a7:6d:30:2c:51:
                    fa:7d:ff:d6:4f:07:5f:14:0c:be:54:2e:40:65:7f:
                    ee:0a:c7:d3:75:92:99:28:29:a2:13:24:43:05:74:
                    be:5d:f6:fe:bf:8f:3b:8d:62:52:4f:f1:0a:70:dc:
                    62:ba:e6:56:63:5d:c3:7d:71:54:47:1d:98:cc:9f:
                    31:4a:e7:39:48:f7:10:82:48:4b:cb:07:5b:18:94:
                    b7:15:18:64:53:4d:40:73:ae:63:63:23:e4:9f:77:
                    6d:08:6b:d1:5f:b3:10:3a:3d:a9:50:dd:cd:bd:f1:
                    df:22:e0:29:ff:30:42:62:43:82:99:69:65:1c:34:
                    ca:4c:8a:44:97:04:06:c4:a8:e1:ba:d8:d1:ae:90:
                    c8:a4:04:a0:f4:ff:5d:d3:14:c0:64:fc:a5:ed:9e:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:37:56:C5:66:51:4E:4F:AE:6A:66:C9:5D:C0:ED:89:22:41:42:9C
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9A3920B4366311EEB376DC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:30:0e:66:d5:5e:7b:a8:4e:02:59:43:98:0d:ee:ad:ed:c1:
         c8:87:fd:b5:a4:af:e4:0d:50:ba:b2:b7:93:89:cd:d0:a1:d3:
         63:14:5e:60:b2:57:4a:59:c5:e7:f2:5d:43:b5:3b:1e:bc:9e:
         0e:b2:4e:10:43:79:cf:37:f9:c1:37:a3:62:b3:63:9c:62:c4:
         5a:88:2a:ed:19:8d:34:2a:4e:84:e6:3a:79:8c:76:d8:a2:72:
         a7:01:69:3d:8c:ce:02:02:94:94:86:42:2a:7b:48:51:3f:d5:
         f7:bb:f8:5f:5e:1f:1e:d5:bf:eb:d4:e3:b5:08:c0:5f:fd:4f:
         8a:3b:4c:ba:d3:5b:21:13:f1:96:50:36:f7:88:6a:cc:24:34:
         29:2d:ef:cd:79:50:ce:f2:27:97:26:be:ee:76:f5:01:24:4b:
         61:00:d5:2b:f1:8f:24:7e:c9:61:d9:48:cd:20:c4:2c:ee:b5:
         1d:9d:5b:47:7d:dd:2a:7f:6e:71:77:45:60:31:29:69:23:7d:
         b2:83:10:d5:4d:34:54:46:d5:92:cd:6f:36:78:7c:0f:b2:6a:
         6c:69:c8:e9:c1:09:85:b8:e4:bd:90:e1:55:ab:2a:e6:51:30:
         cc:a5:23:e4:bf:a4:b9:6f:17:52:b4:b3:a6:dd:4e:68:0a:e4:
         12:22:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:38 2026 by rpki-client