Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/D7BC0C82CC1D11F18CEEA98FF965CEF9.roa
File:                     D7BC0C82CC1D11F18CEEA98FF965CEF9.roa (raw, json)
Hash identifier:          1sjqnD93yakhij9HdyUkpPBspcxwyoPwWxnt+Dazg98=
Subject key identifier:   DE:EA:6D:DA:0A:2F:EC:49:87:88:E8:3B:B7:C6:12:05:84:B8:1D:02
Certificate issuer:       /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial:       01AD
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/D7BC0C82CC1D11F18CEEA98FF965CEF9.roa
Signing time:             Tue 20 Oct 2026 00:33:17 +0000
ROA not before:           Tue 20 Oct 2026 00:33:17 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     24046
IP address blocks:        203.10.24.0/24 maxlen: 24
                          203.10.25.0/24 maxlen: 24
                          203.10.26.0/24 maxlen: 24
                          203.10.27.0/24 maxlen: 24
                          203.10.28.0/24 maxlen: 24
                          203.10.30.0/24 maxlen: 24
                          203.10.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
                          rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 05:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
        Validity
            Not Before: Oct 20 00:33:17 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6ad6b6cd-7f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:2e:34:95:b7:61:ee:95:3b:42:d1:b1:75:
                    fd:f5:bf:cc:73:e5:88:8a:e3:d6:df:cd:30:15:8f:
                    29:a7:eb:4a:7e:91:67:86:ec:f7:53:0b:8c:0c:82:
                    76:e8:b6:30:6e:ea:3c:ef:11:3b:f8:25:d3:d8:e3:
                    c8:85:46:58:3e:04:f8:bd:f1:6d:ab:a3:b6:67:10:
                    c2:61:40:04:24:5f:ad:76:62:8e:2f:cd:f8:c1:be:
                    54:16:64:1b:d8:9c:07:48:b6:aa:2a:df:fe:f9:56:
                    31:17:91:0e:e2:1e:32:bb:01:a6:d0:82:36:3e:ae:
                    1f:08:b2:07:90:8b:3f:d5:cc:90:9f:ae:b5:5f:aa:
                    e5:e5:25:51:97:d2:25:f0:18:33:aa:22:22:a4:63:
                    d2:d5:e1:cd:f8:37:a6:31:58:5e:70:1c:21:46:8a:
                    24:d7:90:bf:1b:59:93:95:49:8b:c9:14:14:6e:bd:
                    4c:c4:4d:af:9d:22:e9:09:e1:0c:92:85:47:dd:d0:
                    b3:a4:b2:2b:d5:9b:46:72:d5:88:2a:18:d6:c5:17:
                    d0:72:2e:52:ad:79:4c:60:d2:fd:d9:6a:07:d8:e1:
                    8e:80:6d:8c:fd:be:42:70:bb:42:88:4d:9a:66:ef:
                    d2:68:24:bb:2c:aa:5c:0e:dc:8d:cd:16:ce:a9:a8:
                    98:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EA:6D:DA:0A:2F:EC:49:87:88:E8:3B:B7:C6:12:05:84:B8:1D:02
            X509v3 Authority Key Identifier:
                keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/D7BC0C82CC1D11F18CEEA98FF965CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.24.0-203.10.28.255
                  203.10.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:3e:70:64:70:13:d6:cd:db:7a:91:79:60:8d:0c:f2:85:13:
         17:72:fa:23:2e:a2:e0:de:d4:78:00:4b:49:cf:40:ce:fd:e4:
         98:40:7d:4e:48:66:a1:40:4a:57:59:a5:76:48:da:ea:28:ca:
         e9:96:f1:47:a8:36:98:0c:f6:64:b8:51:a5:cc:a4:37:6a:65:
         31:93:1b:3b:73:37:a4:64:dd:03:c6:da:e5:29:2c:61:6b:f5:
         ff:72:35:ea:33:ad:02:2b:5e:c5:57:18:dd:50:17:0c:c7:d6:
         3a:1e:02:b4:b5:7e:e9:ee:c2:78:60:34:1b:58:f6:f5:43:b9:
         be:cc:7e:12:a3:c3:8d:85:09:37:34:21:51:0d:30:14:18:d7:
         2a:61:9a:9d:7b:0a:d1:2d:69:21:67:16:ab:3c:3b:61:64:21:
         ea:86:bd:6f:4a:24:82:ea:6c:d6:78:3f:dd:bc:59:90:88:ca:
         64:42:2e:5a:cf:fa:a3:3d:16:a8:3d:d6:a1:11:65:1c:84:37:
         06:02:05:80:81:ee:0c:87:1b:2f:cf:0c:19:61:7e:98:b7:79:
         3f:2b:07:a4:1d:27:1c:3a:f9:9f:72:e6:03:7a:c0:2c:1f:5e:
         2f:d0:3c:73:41:a5:c3:18:fe:fa:50:6a:b1:84:e0:c4:7d:a6:
         c4:0d:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:41:55 2026 by rpki-client