Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/4795022EB68211EA8D895A86C4F9AE02.roa
File:                     4795022EB68211EA8D895A86C4F9AE02.roa (raw, json)
Hash identifier:          8ih8ohTFBlcOehmTFPg4QmBKSI75XqIdXYTzNP+mssw=
Subject key identifier:   7E:6C:8D:1C:06:A5:AA:25:21:62:C4:AC:24:B7:76:8F:03:C9:C2:A7
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       2624
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/4795022EB68211EA8D895A86C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:52:54 +0000
ROA not before:           Mon 04 Aug 2025 16:24:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24081
IP address blocks:        203.177.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9764 (0x2624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Aug  4 16:24:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48b06-226b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:21:3f:16:90:81:6c:9e:ce:57:b7:45:b5:d0:
                    97:29:7a:c4:2d:c2:01:98:61:70:0b:6a:b4:f4:28:
                    59:a2:c3:41:0e:56:61:b5:6e:b9:27:ad:1b:f3:8d:
                    2a:67:ee:90:76:b1:f1:1d:14:20:aa:d2:2c:25:bf:
                    59:1f:9f:43:db:d2:76:fc:3c:a5:fd:77:69:cc:25:
                    71:5d:74:52:bf:96:41:a1:9a:dd:5f:65:eb:dd:46:
                    45:8a:ec:63:e3:1f:f6:29:b6:a0:bb:94:53:ed:73:
                    b9:31:77:43:43:2c:64:fe:8f:81:6b:6c:3b:bd:09:
                    3a:a2:71:e2:25:3a:3d:88:23:f7:ad:b4:aa:d9:bd:
                    ba:43:46:db:10:96:c2:f0:bf:4f:2b:bc:ce:42:97:
                    25:b9:3d:fb:3e:0d:40:f0:5a:27:90:5e:b4:a9:f3:
                    93:72:98:d6:9c:a0:73:e6:84:32:aa:7b:2d:0f:5f:
                    a9:cc:44:71:ec:4d:45:ad:ac:6c:b2:f3:14:05:aa:
                    e1:8d:0a:7d:7a:03:ab:9a:33:75:c5:b1:14:a8:a4:
                    2b:12:03:86:eb:0a:df:07:49:8b:22:c4:d9:33:ef:
                    76:0e:c6:c0:f0:a4:8b:4a:0f:7c:a6:70:d6:e6:f3:
                    04:bd:24:8c:68:5d:d8:71:44:a8:08:92:8f:b1:32:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6C:8D:1C:06:A5:AA:25:21:62:C4:AC:24:B7:76:8F:03:C9:C2:A7
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/4795022EB68211EA8D895A86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:23:41:6d:cf:04:50:c1:01:6f:c4:25:7f:50:1c:64:b4:dd:
         e1:a9:33:ae:35:57:00:f6:6c:60:c6:e3:74:83:09:c2:92:f8:
         0c:df:b5:1a:89:ab:36:c9:30:ca:4e:5e:2f:85:b1:98:b7:c0:
         19:1b:28:16:96:8a:ea:09:26:85:d3:f5:7e:bf:9c:3d:49:60:
         ff:4b:01:b3:af:c2:ea:36:1a:c3:6f:39:94:8e:34:9d:9c:32:
         4b:84:f0:83:d1:c1:bf:d0:6e:6e:82:59:c8:0b:68:e4:fe:f4:
         14:50:05:6d:85:0a:fe:83:d6:e3:96:3d:f8:0c:70:6c:c9:e5:
         04:62:80:d1:e7:2a:dd:32:72:e3:cb:ed:26:3d:44:53:20:0d:
         36:94:ff:67:76:0d:5e:c7:54:a7:75:49:a0:a3:a0:4e:62:35:
         1e:31:73:4c:33:1e:cd:ca:69:ca:4d:84:a2:62:a7:0d:85:5c:
         ab:80:d1:7c:2e:bb:c6:af:e7:10:ae:f6:77:35:d1:1b:32:0d:
         d1:8f:bf:84:b5:7b:7d:43:5c:93:6a:77:e5:d4:16:fe:ae:23:
         27:59:a8:1a:cd:61:67:4d:48:64:73:a2:2f:50:c1:9b:68:a3:
         66:ef:11:b3:2f:f8:2e:fc:07:11:a6:24:d7:0e:d5:0d:96:7f:
         75:c7:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:31:22 2026 by rpki-client