Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
File:                     65A65112AFAD11F085B80A52C4F9AE02.roa (raw, json)
Hash identifier:          BUO+M5bjTFtADEP3QWmx7RZUjih71UuWE1YGKpgcaNw=
Subject key identifier:   18:FC:8C:2C:9B:2B:2B:C8:80:E6:CB:0D:E2:9C:20:6A:23:BA:D9:E4
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3D9B
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 15:11:06 +0000
ROA not before:           Thu 06 Aug 2026 15:11:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     131646
IP address blocks:        49.128.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15771 (0x3d9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:11:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a40a-8ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:55:a3:65:74:42:23:b3:33:c2:77:90:23:
                    0d:c0:ad:c3:b8:34:fd:04:7c:14:89:3a:73:f6:89:
                    e2:31:17:40:22:8c:67:63:8a:b9:5a:c4:80:29:de:
                    c0:17:8e:99:91:c8:fc:92:b7:f0:ea:57:95:9d:ff:
                    5f:d0:20:bd:c0:a1:63:03:52:65:ba:7e:df:1a:da:
                    e1:e0:d0:6e:bd:d2:96:f6:2c:5f:65:92:87:de:b9:
                    15:af:4c:ca:97:25:b5:80:71:ac:b5:79:91:ff:d6:
                    e7:e1:70:05:4a:59:2d:96:3c:5b:f2:55:76:35:61:
                    f7:06:0a:4f:e6:98:e8:79:60:52:eb:b3:de:9d:1d:
                    08:6c:f2:d4:98:77:4f:cf:0a:c7:44:1b:e6:7c:fe:
                    fd:2c:52:82:48:91:2c:89:c2:88:eb:e5:7b:4e:de:
                    d4:67:05:e4:c1:d7:51:86:10:a4:89:11:5a:f4:77:
                    8a:36:f8:89:7a:74:62:e3:79:55:a3:63:52:91:9f:
                    35:5f:bf:28:a5:c2:80:f9:70:bb:b8:63:57:3c:7f:
                    6d:ed:1f:b6:4c:2f:be:32:96:c0:6d:5e:46:57:53:
                    80:d4:f3:c1:68:c8:54:dd:ac:68:6d:61:fa:8d:76:
                    20:7a:1d:e8:81:7d:56:1e:45:c4:09:be:30:a7:e4:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FC:8C:2C:9B:2B:2B:C8:80:E6:CB:0D:E2:9C:20:6A:23:BA:D9:E4
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:7a:e0:ec:1c:39:54:24:49:fa:e1:8f:97:63:be:39:cf:8f:
         7c:a0:d9:56:f6:4f:64:95:99:31:35:c7:09:d7:1b:80:5d:3e:
         30:99:48:23:7f:9b:99:a0:6c:d2:cc:f2:9d:37:51:d0:8b:5f:
         7a:92:fc:a2:4c:b4:e8:fc:17:87:16:06:a3:5e:a0:b5:3f:00:
         5c:21:3f:e1:0d:8a:e6:71:f6:6b:6c:05:05:c4:a0:24:44:95:
         5a:82:d4:ba:57:dc:24:75:b2:00:d5:6d:6c:87:1c:c6:ff:49:
         79:83:e1:fb:05:73:59:0a:a3:aa:a7:67:a9:6a:1e:fb:8f:8c:
         68:39:be:2c:6b:e6:c4:45:e2:04:dd:4f:db:e6:22:a9:22:84:
         8f:c9:a8:b4:60:a2:ac:ff:3c:f7:1b:48:3d:b5:28:b5:6e:f3:
         1d:62:49:31:b9:34:57:c2:09:ca:06:44:a0:5f:03:84:3d:24:
         09:3e:be:05:f9:ce:27:46:c8:77:00:0d:ea:fe:e3:8a:08:2b:
         d3:2a:ce:af:a0:81:fc:c6:2c:93:c7:03:aa:49:93:7a:bb:a9:
         89:9c:ae:0c:9f:a4:7c:fc:ee:0f:53:94:c5:94:8d:b0:f5:31:
         c7:44:18:39:75:d9:ab:88:bc:27:45:08:62:b9:dd:a0:08:98:
         4f:2d:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:37:18 2026 by rpki-client