Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/8DFE2984EAD811ECA1ED8915C4F9AE02.roa
File:                     8DFE2984EAD811ECA1ED8915C4F9AE02.roa (raw, json)
Hash identifier:          Y0nyOQFtGM7QMWfObN4EdvQRJMeSWv8sAdWfmCpoLZg=
Subject key identifier:   91:8A:4C:14:7F:3D:B6:10:48:2A:A0:A7:A7:0C:0F:A9:77:D2:EB:DE
Certificate issuer:       /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
Certificate serial:       3533
Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/8DFE2984EAD811ECA1ED8915C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:34:51 +0000
ROA not before:           Fri 24 Oct 2025 15:00:46 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     38211
IP address blocks:        203.135.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl
                          rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13619 (0x3533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
        Validity
            Not Before: Oct 24 15:00:46 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4407a-e60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:c3:0d:31:de:99:54:1f:c1:f5:86:0b:fc:
                    bc:eb:6c:31:58:98:7b:48:0b:76:a7:a3:0d:7a:c8:
                    9e:85:db:33:ea:08:1d:90:f4:09:45:e3:78:08:1e:
                    16:c5:ed:73:6d:49:a6:03:78:1e:cb:e1:5e:0e:02:
                    7f:c0:dd:f6:1e:69:04:8e:1b:ac:d3:a2:33:3f:b1:
                    7e:70:7b:ab:34:f6:75:92:8f:ce:6e:0c:48:d5:83:
                    38:49:67:69:06:23:11:82:95:ec:2c:0e:69:66:9d:
                    cd:93:bf:cf:1e:7d:87:56:e2:e2:03:a8:58:0d:0d:
                    b2:c8:61:0d:10:80:7b:4b:77:bf:72:7b:a1:f9:d4:
                    64:e2:d0:76:0f:3c:de:5b:d4:80:ea:7d:3b:62:1b:
                    7e:d4:12:1f:ea:b8:3a:50:91:0a:33:3f:8a:1e:20:
                    51:95:b0:11:d1:5e:67:84:3b:3c:c1:91:00:d3:54:
                    b3:84:f5:47:85:59:4e:0b:62:0f:fa:4c:e4:9d:e1:
                    67:05:0c:a4:d6:66:ea:7b:42:27:f4:af:3d:8d:fd:
                    38:15:12:46:8d:37:7f:4b:18:00:5b:93:fb:0a:fd:
                    74:c0:ee:b9:38:1f:f6:a6:ab:33:db:c6:a1:23:3e:
                    99:a5:a9:6e:76:ad:00:11:dc:fb:30:2a:f0:28:e2:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8A:4C:14:7F:3D:B6:10:48:2A:A0:A7:A7:0C:0F:A9:77:D2:EB:DE
            X509v3 Authority Key Identifier:
                keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/8DFE2984EAD811ECA1ED8915C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.135.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:09:93:58:ef:d6:b4:37:28:d9:6d:dd:1d:02:57:1b:77:
         0c:39:9a:f5:14:f3:aa:19:d2:6d:7e:26:9b:e9:da:33:fc:89:
         e1:36:52:e5:ce:2e:10:99:5b:2b:de:7a:b5:47:48:d8:fe:1b:
         d1:a5:47:8b:3b:a1:9d:2b:eb:eb:60:d6:4f:30:37:b1:48:91:
         b5:94:47:b0:4e:89:6c:5e:ef:13:c0:61:c7:0f:8d:03:a0:13:
         23:a1:00:ce:76:fc:88:cb:92:b0:91:20:8b:c3:e3:39:85:3e:
         ed:1d:88:88:b7:bd:99:7f:90:cb:27:c0:53:5f:5c:56:c4:61:
         a9:6d:c6:0a:23:c5:5b:8b:96:ef:d1:81:20:3a:20:ec:7f:d3:
         36:a5:cc:19:d1:62:f5:c9:7f:98:b8:3d:55:2e:cc:19:79:90:
         eb:5e:79:f5:d9:6d:c4:fd:6a:4d:29:87:17:26:5c:89:29:be:
         b1:d9:b2:06:fc:af:9f:53:2f:50:0c:44:c0:5b:09:ab:f4:83:
         3c:f6:65:6b:ee:6d:03:3c:ac:fc:4e:1d:aa:2d:cf:62:d4:6f:
         ff:83:94:90:fa:e8:dc:62:97:c6:79:40:c8:4d:85:cc:28:18:
         67:6f:7c:95:fa:fd:be:a7:2b:c5:d0:47:d6:da:50:38:bf:ea:
         49:f0:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:56 2026 by rpki-client