Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/8EAC217CCA5611F089E70D44C4F9AE02.roa
File:                     8EAC217CCA5611F089E70D44C4F9AE02.roa (raw, json)
Hash identifier:          DEFVGm59VVJPmUFHSPNcZ52zcqrPZ6/Nyvm2+lEJprE=
Subject key identifier:   4C:92:67:E3:76:BB:D7:9C:84:C5:B5:8D:5C:00:EA:F5:5D:02:12:BB
Certificate issuer:       /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial:       F1
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/8EAC217CCA5611F089E70D44C4F9AE02.roa
Signing time:             Thu 01 Oct 2026 08:56:27 +0000
ROA not before:           Thu 01 Oct 2026 08:56:27 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     208185
IP address blocks:        203.28.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
                          rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
        Validity
            Not Before: Oct  1 08:56:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abe203b-e738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:22:0e:3e:f6:f5:5f:12:c7:6e:e8:f2:df:
                    c6:55:75:2d:44:3c:db:c3:50:c4:e7:e6:4c:0b:e9:
                    b9:fe:36:bf:78:a9:76:a3:c8:24:c3:9d:69:ee:22:
                    f5:23:6d:02:86:84:b2:12:b9:1b:8f:3b:bc:6d:97:
                    02:8c:55:1a:66:5b:fc:22:2b:ba:ce:e2:2c:04:d6:
                    88:c4:91:65:ce:84:4a:af:0b:55:f8:28:65:b4:34:
                    c7:5d:bb:0b:99:2e:b1:e9:b6:96:5a:77:c0:74:52:
                    12:81:80:d2:ae:f7:76:59:0a:0f:2e:92:d4:2c:d6:
                    67:17:81:6f:7e:3e:af:19:fc:5d:47:96:38:4e:7f:
                    b1:2e:40:50:af:41:2f:e8:dd:cd:32:59:8e:2e:2d:
                    4e:02:ba:cc:d8:f0:5c:f6:f3:19:0c:8d:e6:1b:e0:
                    8a:c1:4c:0f:71:04:c5:bb:4e:fe:c6:ed:4a:6d:f2:
                    ed:4f:8a:97:7a:47:90:12:3a:8a:5a:8c:fe:89:72:
                    94:eb:18:ee:98:07:24:df:a8:d2:ff:4e:fe:4d:d1:
                    b8:95:98:b8:62:83:81:63:79:36:41:a9:03:6a:40:
                    4d:07:1e:42:09:24:33:10:e1:6d:a3:20:91:d3:0b:
                    23:47:22:51:9a:63:39:38:76:d5:0c:c5:c0:c8:71:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:92:67:E3:76:BB:D7:9C:84:C5:B5:8D:5C:00:EA:F5:5D:02:12:BB
            X509v3 Authority Key Identifier:
                keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/8EAC217CCA5611F089E70D44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:fd:0b:dd:a0:91:fd:7d:1e:20:1a:9a:89:21:13:0e:ac:
         a0:18:4b:1a:cd:d3:3b:58:1a:4d:33:66:39:99:54:36:41:f5:
         fd:d6:c6:31:30:e8:17:ed:8f:43:d0:c2:18:20:da:fd:c6:f5:
         b6:32:25:33:43:0d:28:14:16:db:2c:5d:6e:ad:9d:ac:c3:be:
         82:05:1c:d1:a8:3b:65:87:92:2c:aa:c1:af:30:a4:e7:2b:85:
         48:aa:29:d4:c4:7e:b3:37:c3:9f:f6:c5:ae:9c:14:6f:7c:a5:
         80:af:a7:62:1d:7c:96:68:81:b7:38:c1:29:8d:fa:7e:7a:56:
         38:ab:0b:44:26:80:40:a2:7a:21:47:9a:df:6b:e8:1f:da:aa:
         0b:b4:64:7e:7a:17:c0:30:f8:53:fe:89:79:5d:e2:50:a2:b7:
         68:14:2f:18:42:da:60:1d:1f:9e:48:83:db:21:17:47:ef:97:
         e9:0e:f1:49:86:8d:fb:78:8b:99:28:d8:44:ed:ef:21:e2:89:
         7f:a6:a7:5b:06:ca:21:5c:63:43:02:1f:0a:b4:94:54:fa:42:
         ac:19:cb:05:de:08:7a:36:0c:02:09:f5:56:6d:91:54:f7:b1:
         6f:59:e5:d9:75:e1:ba:a6:56:93:65:8c:15:d2:74:92:e9:64:
         90:94:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:28:47 2026 by rpki-client