Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/D84149CCEBAB11F090F576B05F6F56BC.roa
File:                     D84149CCEBAB11F090F576B05F6F56BC.roa (raw, json)
Hash identifier:          hJz6pu98ti8mAR+MVo7nXFlkux8V4L70Mk2QQCM3jdI=
Subject key identifier:   D4:3A:27:00:51:A1:78:34:1F:9F:D5:DC:0A:94:59:3D:B1:E2:BB:C0
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       03C8
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/D84149CCEBAB11F090F576B05F6F56BC.roa
Signing time:             Wed 05 Aug 2026 01:50:16 +0000
ROA not before:           Wed 05 Aug 2026 01:50:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        163.53.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 23:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968 (0x3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Validity
            Not Before: Aug  5 01:50:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7296d8-68aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:62:4e:a0:89:17:f1:c3:1a:8b:a1:71:f7:
                    c0:81:fd:21:16:68:46:e7:0f:86:5f:f1:ce:fe:fa:
                    89:12:0f:d4:02:e6:8d:15:97:ff:ac:7f:c0:c2:66:
                    65:10:a4:4c:44:b7:c4:a2:5a:8f:a6:fc:ea:8f:e5:
                    d2:aa:b2:e5:ce:38:77:04:0e:f4:e1:cc:57:9a:e7:
                    d2:99:12:2c:5d:3a:59:1e:4d:8b:61:a7:74:0d:50:
                    be:7a:87:2d:5d:5e:be:c1:dc:91:02:a4:c6:26:6f:
                    f5:3c:b5:45:7c:b9:c3:96:c5:d1:d4:07:76:60:f3:
                    a2:b3:50:53:c4:76:3c:2b:09:73:bd:8a:23:7d:c7:
                    a3:9f:24:90:04:3a:2a:e5:56:c3:dc:3a:27:43:47:
                    75:ec:9d:b9:29:ba:3f:b7:a4:f6:3c:69:e0:27:e3:
                    59:c4:fa:9c:bd:79:e2:da:a4:c7:9e:c5:ec:b3:26:
                    f3:5c:65:05:2e:de:8c:84:38:9e:46:30:c4:43:c9:
                    58:b3:9e:6d:a7:1c:ef:6d:f1:41:3f:df:3f:0f:38:
                    53:1f:ec:f0:e8:ea:12:c0:dd:6d:3e:48:67:c0:b7:
                    5b:0d:62:ef:2a:0d:30:06:2f:bf:58:0b:68:89:4a:
                    76:e2:08:6d:55:bc:21:7a:70:84:50:94:e9:2e:8f:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3A:27:00:51:A1:78:34:1F:9F:D5:DC:0A:94:59:3D:B1:E2:BB:C0
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/D84149CCEBAB11F090F576B05F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:68:1f:99:f5:46:46:29:2b:b1:7b:a9:eb:63:7e:70:a4:
         37:83:7e:6e:2a:a9:af:7a:04:36:40:1c:b9:38:1d:84:4b:88:
         5e:2e:52:b1:41:f3:3e:9e:9f:9d:83:cd:43:cf:e7:56:e6:c6:
         19:3a:4a:ec:09:2e:b6:e2:d0:66:53:c9:20:cf:89:2b:ba:4f:
         c0:ac:26:25:f5:35:bf:2c:0b:5b:27:54:e4:fa:29:c2:c7:71:
         6f:42:dc:0b:02:47:8d:3b:12:be:74:12:08:e4:60:98:e1:dd:
         3c:63:85:40:06:11:7a:54:4e:48:d3:ed:9a:ce:8d:d6:9b:bf:
         37:0a:ae:d2:47:fd:11:50:fb:6d:ef:2c:3f:13:e8:ab:cd:6f:
         fb:42:d8:54:a5:1c:2f:69:b1:ae:d4:13:e6:80:3c:9c:ed:e8:
         e1:4e:c5:89:54:87:89:38:75:e4:52:57:aa:ca:44:f1:9e:d1:
         9a:b7:f4:be:7b:fe:fc:6c:f3:d5:62:5b:55:16:a4:a3:d9:31:
         c4:bf:59:93:63:bd:9a:98:4f:c2:d2:3e:4d:e9:25:0c:92:78:
         50:62:11:cc:24:06:a0:92:6a:9f:15:f2:f3:6b:cb:ef:5f:36:
         5d:a7:6a:ca:f0:da:c9:34:b4:d0:ac:f1:8c:f9:5d:8c:df:7c:
         7d:5a:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:03:25 2026 by rpki-client