Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/C96601404B8D11F0B198C040C4F9AE02.roa
File:                     C96601404B8D11F0B198C040C4F9AE02.roa (raw, json)
Hash identifier:          TH3SDW9AHmv0LGt2HufenTbLpH3GqdPQgH6iOmrGdVs=
Subject key identifier:   86:02:E4:F8:37:53:9D:0B:57:E6:E0:B2:B1:FE:05:19:B8:93:16:B5
Certificate issuer:       /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
Certificate serial:       B8
Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/C96601404B8D11F0B198C040C4F9AE02.roa
Signing time:             Wed 27 May 2026 07:39:59 +0000
ROA not before:           Wed 27 May 2026 07:39:59 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138154
IP address blocks:        203.13.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl
                          rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
        Validity
            Not Before: May 27 07:39:59 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a169fce-84d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:7c:62:be:4b:ae:6e:90:f6:27:0e:65:ad:
                    7a:4e:6b:01:17:00:de:76:65:f8:5d:1e:88:df:1b:
                    7c:87:ed:9b:21:35:57:1e:70:64:13:0c:26:f3:0d:
                    30:ae:9e:0c:08:78:1d:16:e8:27:1e:ca:53:5c:a4:
                    5c:14:9b:41:89:e5:d7:c3:b8:52:fd:96:14:ad:05:
                    2c:12:ce:9d:72:75:e0:87:8c:4f:3b:48:b7:1d:fc:
                    f5:46:fd:66:46:5a:70:8b:01:35:3b:96:7a:52:0b:
                    2c:5b:86:ab:02:1d:20:1b:eb:be:52:35:c8:da:71:
                    57:9c:40:cd:79:04:da:ac:a4:1a:3c:79:cb:98:f4:
                    cc:42:0d:c8:9b:11:d0:c3:e3:63:cd:23:3d:88:22:
                    35:89:d9:00:d8:cc:f7:a0:5f:c0:30:fa:da:ab:f5:
                    26:a3:de:ba:ea:3e:6c:7e:bd:fd:b0:cb:42:c1:af:
                    df:b2:7e:d4:8f:51:43:6a:18:93:d9:1b:50:32:5d:
                    2f:86:40:33:b6:64:93:ad:dc:b8:ba:3b:c5:de:a7:
                    b1:42:a1:32:30:82:51:33:be:87:b7:96:b6:7f:af:
                    9d:46:9c:32:2d:5a:ad:fd:81:ba:7b:f6:de:48:7a:
                    95:b7:7a:d0:3e:84:c7:18:d2:c0:0f:51:c5:80:80:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:02:E4:F8:37:53:9D:0B:57:E6:E0:B2:B1:FE:05:19:B8:93:16:B5
            X509v3 Authority Key Identifier:
                keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/C96601404B8D11F0B198C040C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.13.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:68:7e:c4:93:ac:86:35:ce:c1:d1:a5:15:f3:59:63:e5:92:
         28:d9:d6:a0:03:a7:37:c7:7f:90:3c:f4:52:11:9b:25:08:7e:
         e8:1f:cf:55:43:2b:d2:4e:0a:4d:ea:1f:bd:ed:2a:c8:9f:43:
         12:b7:e4:22:44:98:9f:c0:8d:9a:7b:a8:b7:fa:7c:47:1a:a7:
         76:9d:79:4f:38:50:75:40:68:21:b9:89:22:6f:12:a8:d3:62:
         df:5e:79:7b:72:17:5f:33:ba:e8:bf:94:50:5a:75:8d:e8:d6:
         bf:0d:2b:38:5d:cb:5f:4c:52:86:6d:56:94:0f:42:99:86:27:
         b7:03:c1:bd:38:d9:c2:4f:39:dc:d9:d8:cd:ba:cf:36:6c:9a:
         f6:96:33:68:b9:27:1d:2d:34:43:96:fd:df:c8:6b:c8:26:a0:
         17:a5:4d:43:0c:c0:3a:ab:ab:b0:f1:aa:89:19:74:5a:19:ca:
         9a:e8:06:94:35:78:c7:a2:3f:86:40:2c:02:08:ad:b0:f0:84:
         91:ff:12:98:33:70:1b:29:2b:40:20:4e:dc:96:26:f6:18:41:
         7b:5c:88:f5:ec:df:86:df:53:a2:16:b0:fa:30:c2:25:54:50:
         62:46:1d:44:87:53:6d:01:fb:b0:13:f2:d6:de:51:9c:d2:10:
         0f:a7:f5:60
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3NjkxMTAvBgNVBAUTKDlFRDU2NDI5RDFBRTlGNjAwNEZCNkZCNjc4OEU5M0ZB
RjYyMjU3NTkwHhcNMjYwNTI3MDczOTU5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE2OWZjZS04NGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjZ8Yr5Lrm6Q9icOZa16TmsBFwDedmX4XR6I3xt8h+2bITVXHnBkEwwm8w0w
rp4MCHgdFugnHspTXKRcFJtBieXXw7hS/ZYUrQUsEs6dcnXgh4xPO0i3Hfz1Rv1m
RlpwiwE1O5Z6UgssW4arAh0gG+u+UjXI2nFXnEDNeQTarKQaPHnLmPTMQg3ImxHQ
w+NjzSM9iCI1idkA2Mz3oF/AMPraq/Umo9666j5sfr39sMtCwa/fsn7Uj1FDahiT
2RtQMl0vhkAztmSTrdy4ujvF3qexQqEyMIJRM76Ht5a2f6+dRpwyLVqt/YG6e/be
SHqVt3rQPoTHGNLAD1HFgIAlwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIYC5Pg3
U50LV+bgsrH+BRm4kxa1MB8GA1UdIwQYMBaAFJ7VZCnRrp9gBPtvtniOk/r2IldZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc2OS80NkJENTVDMjRC
OEQxMUYwQTNGNEZGM0ZDNEY5QUUwMi9udFZrS2RHdW4yQUUtMi0yZUk2VC12WWlW
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL250VmtLZEd1bjJBRS0yLTJlSTZULXZZaVYxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI3NjkvNDZCRDU1QzI0QjhEMTFGMEEzRjRGRjNGQzRGOUFFMDIvQzk2NjAxNDA0
QjhEMTFGMEIxOThDMDQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyw2mMA0GCSqGSIb3DQEBCwUAA4IBAQA7aH7Ek6yGNc7B0aUV81lj
5ZIo2dagA6c3x3+QPPRSEZslCH7oH89VQyvSTgpN6h+97SrIn0MSt+QiRJifwI2a
e6i3+nxHGqd2nXlPOFB1QGghuYkibxKo02LfXnl7chdfM7rov5RQWnWN6Na/DSs4
XctfTFKGbVaUD0KZhie3A8G9ONnCTznc2djNus82bJr2ljNouScdLTRDlv3fyGvI
JqAXpU1DDMA6q6uw8aqJGXRaGcqa6AaUNXjHoj+GQCwCCK2w8ISR/xKYM3AbKStA
IE7clib2GEF7XIj17N+G31OiFrD6MMIlVFBiRh1Eh1NtAfuwE/LW3lGc0hAPp/Vg
-----END CERTIFICATE-----
Generated at Sun Jul 5 09:23:37 2026 by rpki-client