Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9CBAA0689CF611F196D169193711F970.roa
File:                     9CBAA0689CF611F196D169193711F970.roa (raw, json)
Hash identifier:          6nUQWd7mTQaLMPhObtlvQIXFK3XgpZ2O8wVLRwXcYm0=
Subject key identifier:   85:60:49:06:3C:2B:46:D8:39:34:14:1D:0B:C0:AE:24:36:1F:31:C6
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0C67
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9CBAA0689CF611F196D169193711F970.roa
Signing time:             Fri 21 Aug 2026 00:24:03 +0000
ROA not before:           Fri 21 Aug 2026 00:24:03 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     22160
IP address blocks:        61.18.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 19:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Aug 21 00:24:03 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a879aa3-9b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7c:18:72:80:f3:ea:23:b3:b3:39:43:6b:24:
                    fa:dd:7d:88:ab:84:f3:21:e4:f7:94:c6:cb:25:db:
                    51:bc:eb:07:08:f5:3e:10:32:68:82:86:11:ad:a1:
                    18:ff:1a:c0:74:da:db:1a:01:ba:71:7d:99:c1:c2:
                    fc:e7:7a:ad:43:2c:bc:95:5b:2d:c3:3f:6e:7e:b4:
                    c9:43:75:95:71:3a:c3:a1:1c:ab:4d:8b:b3:fc:49:
                    7a:e6:44:02:4f:aa:be:bc:bd:4a:10:cb:6b:bd:7f:
                    23:dd:2a:96:d1:2a:d9:a9:74:7d:f9:93:e5:67:99:
                    f6:49:9c:35:b2:51:e9:71:9b:11:0c:8c:41:b0:b4:
                    92:8f:48:32:b1:a3:21:b8:3e:fe:24:82:d8:f6:6f:
                    87:6f:6c:e7:33:72:17:93:f6:72:b7:ed:d8:7f:d9:
                    ce:78:07:e1:40:bd:64:61:f0:e9:31:90:1b:7a:2e:
                    96:0a:c0:d0:e1:68:67:ee:9b:84:f4:56:ef:32:14:
                    3d:d9:5e:63:06:fa:f6:4c:ae:c9:96:db:5a:9a:2f:
                    df:90:78:82:11:4d:9d:0d:51:1d:9e:46:29:64:03:
                    39:26:f4:7c:bb:44:8d:63:72:c0:67:62:f4:5e:ae:
                    4a:ab:8a:6c:6f:02:11:91:ea:b5:02:5c:6c:c5:d7:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:60:49:06:3C:2B:46:D8:39:34:14:1D:0B:C0:AE:24:36:1F:31:C6
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9CBAA0689CF611F196D169193711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.18.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:6b:34:c7:1a:6c:8a:ba:2f:38:a4:f8:00:99:bc:0b:88:
         41:c9:c9:5e:78:c8:f4:83:d3:a6:70:50:7b:25:d4:bc:eb:6d:
         f3:6e:a9:0e:08:07:65:0c:6a:57:6f:89:46:47:2f:08:7d:33:
         49:e2:c3:31:4f:e7:c5:fb:3c:8e:33:77:57:81:1a:28:95:e4:
         42:a0:1b:93:d8:09:8d:f6:22:44:3a:3e:bd:01:6b:d7:9d:ea:
         4a:6c:47:12:c1:5c:55:25:ba:70:f2:97:ea:ee:77:02:a1:b9:
         ee:2d:b6:8c:20:5d:5c:98:cc:ff:f9:a2:29:f0:0b:f5:09:73:
         8e:f6:7b:8b:43:24:83:34:88:7a:9f:d7:ad:56:83:b5:5d:d5:
         0e:f1:89:10:28:f9:79:f5:b6:b3:52:33:fd:33:81:8f:77:f8:
         2f:e2:08:89:ff:9d:90:0e:fd:2b:58:d7:90:9b:42:49:e8:bc:
         cd:9d:d1:e7:a4:f3:51:f4:49:ed:29:7c:34:d9:b9:ca:5c:11:
         7f:01:0e:a0:8b:3b:d0:08:33:39:43:0d:61:10:08:99:e1:b9:
         4d:fb:f2:7a:cf:47:9b:09:32:09:53:a1:99:e0:4e:a0:bc:41:
         6d:8b:29:48:6a:62:59:5f:fa:a3:53:c7:60:ab:1b:f0:37:9b:
         a5:73:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:09:57 2026 by rpki-client