Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/18E533309C7811F1B8A0B6754F11F970.roa
File:                     18E533309C7811F1B8A0B6754F11F970.roa (raw, json)
Hash identifier:          VNWu4+QvC25ogRBuLbwqDdfOtwN4gpg+Bfzft5T1yPE=
Subject key identifier:   EE:29:DC:5F:F1:0F:54:66:43:9F:18:35:96:49:F2:65:65:34:81:52
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0C64
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/18E533309C7811F1B8A0B6754F11F970.roa
Signing time:             Thu 20 Aug 2026 09:18:25 +0000
ROA not before:           Thu 20 Aug 2026 09:18:25 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     136897
IP address blocks:        61.18.170.0/24 maxlen: 24
                          61.18.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3172 (0xc64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Aug 20 09:18:25 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a86c661-c150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:2a:58:60:fe:e2:df:a0:46:f2:58:d0:79:
                    1a:26:ba:b8:d0:a2:70:cb:df:48:d2:9f:b8:88:73:
                    55:34:69:e6:cf:04:63:2d:40:6c:a1:38:15:43:1e:
                    60:39:56:b4:38:e8:af:c1:53:eb:fd:3b:73:66:de:
                    74:68:61:0a:89:87:2f:72:5b:fe:d7:51:1e:af:f5:
                    93:e2:8d:f0:73:7d:89:6b:80:ec:9e:d6:86:d4:df:
                    54:8e:60:71:d1:46:52:fc:08:c0:5c:db:e7:ad:70:
                    56:8c:a8:19:3c:3e:9a:03:00:a0:02:92:46:9f:68:
                    00:73:b9:1a:d2:d7:7c:cf:da:2c:fd:a6:97:aa:53:
                    d1:d4:f0:33:df:cf:2b:dc:d2:a9:b9:1d:6a:a3:8d:
                    05:26:cf:85:f1:67:6c:a5:c9:0e:b0:86:ee:ee:25:
                    54:0e:ed:3a:b0:0a:13:39:99:ca:d4:47:1b:78:4a:
                    ec:61:d8:fd:ce:5a:13:b3:53:5d:90:48:16:7b:df:
                    b4:42:f2:22:d1:8a:56:e5:94:1e:80:b0:74:5b:f1:
                    5a:d7:6e:24:bb:53:c3:11:6e:c8:49:81:b0:4b:ed:
                    a8:4e:72:3a:53:e9:30:02:97:27:65:86:8c:59:85:
                    0b:f4:87:a1:02:bd:e6:58:f0:af:0b:4e:84:12:9a:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:29:DC:5F:F1:0F:54:66:43:9F:18:35:96:49:F2:65:65:34:81:52
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/18E533309C7811F1B8A0B6754F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.18.170.0/24
                  61.18.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:ed:73:bf:42:1d:6a:25:9d:0d:9a:1d:1f:2e:53:df:c7:
         9f:c3:65:6c:68:6b:4e:2f:42:d5:a7:74:df:7e:96:14:c0:28:
         42:f2:54:56:21:b0:b2:07:c7:a5:a5:70:39:d2:b6:91:dc:ea:
         e7:fc:ef:8f:5c:82:6f:d2:7a:50:93:a1:c9:59:79:c3:d3:12:
         5e:ab:5e:4c:04:3c:de:df:3d:c1:f7:1f:c5:0c:97:09:90:3f:
         a1:50:10:b2:78:e8:28:ba:aa:84:62:b9:e2:ec:e6:63:12:39:
         15:5b:db:16:97:1b:68:a2:e0:8a:f0:eb:12:89:31:70:30:bc:
         5c:27:a5:8c:67:b2:ad:cf:1f:4b:9d:db:ea:dd:0e:de:f1:dc:
         a5:48:8f:2a:5e:e6:21:91:5c:ab:e6:08:96:78:bd:59:78:9c:
         5b:94:47:e5:05:60:93:18:f5:39:fd:74:1f:0f:73:99:97:8e:
         90:cd:fb:5a:3a:50:6a:43:04:32:f5:5f:ea:0f:81:1a:53:12:
         fe:56:31:6b:52:9e:b6:fb:20:42:00:81:26:92:0a:c8:88:5b:
         0e:f1:12:b3:de:9c:9e:81:e9:6c:cf:06:69:1e:06:6f:82:4f:
         a4:6a:ca:c7:0d:82:1a:ec:a7:e6:a8:d3:0a:68:42:54:c8:a0:
         10:08:d3:54
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjYwODIwMDkxODI1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg2YzY2MS1jMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBUqWGD+4t+gRvJY0HkaJrq40KJwy99I0p+4iHNVNGnmzwRjLUBsoTgVQx5g
OVa0OOivwVPr/TtzZt50aGEKiYcvclv+11Eer/WT4o3wc32Ja4DsntaG1N9UjmBx
0UZS/AjAXNvnrXBWjKgZPD6aAwCgApJGn2gAc7ka0td8z9os/aaXqlPR1PAz388r
3NKpuR1qo40FJs+F8WdspckOsIbu7iVUDu06sAoTOZnK1EcbeErsYdj9zloTs1Nd
kEgWe9+0QvIi0YpW5ZQegLB0W/Fa124ku1PDEW7ISYGwS+2oTnI6U+kwApcnZYaM
WYUL9IehAr3mWPCvC06EEppBSQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFO4p3F/x
D1RmQ58YNZZJ8mVlNIFSMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvMThFNTMzMzA5
Qzc4MTFGMUI4QTBCNjc1NEYxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAPRKqAwQAPRK1MA0GCSqGSIb3DQEBCwUAA4IBAQAzwe1zv0IdaiWd
DZodHy5T38efw2VsaGtOL0LVp3TffpYUwChC8lRWIbCyB8elpXA50raR3Orn/O+P
XIJv0npQk6HJWXnD0xJeq15MBDze3z3B9x/FDJcJkD+hUBCyeOgouqqEYrni7OZj
EjkVW9sWlxtoouCK8OsSiTFwMLxcJ6WMZ7Ktzx9Lndvq3Q7e8dylSI8qXuYhkVyr
5giWeL1ZeJxblEflBWCTGPU5/XQfD3OZl46QzftaOlBqQwQy9V/qD4EaUxL+VjFr
Up62+yBCAIEmkgrIiFsO8RKz3pyegelszwZpHgZvgk+kasrHDYIa7KfmqNMKaEJU
yKAQCNNU
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:10:05 2026 by rpki-client