Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/93270912C5FD11F185F556524111F970.roa
File:                     93270912C5FD11F185F556524111F970.roa (raw, json)
Hash identifier:          0387zbI3mVqUDRF2QjAzC8+HpenZVpC79C/w4ZXX6iE=
Subject key identifier:   06:C0:50:1B:D0:03:5F:D1:64:AD:8F:E7:CE:68:67:D3:56:05:A3:F7
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3EAF
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/93270912C5FD11F185F556524111F970.roa
Signing time:             Mon 12 Oct 2026 05:27:11 +0000
ROA not before:           Mon 12 Oct 2026 05:27:11 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     9858
IP address blocks:        49.11.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16047 (0x3eaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Oct 12 05:27:11 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6acc6faf-9f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:04:73:75:e1:4c:f1:45:00:cb:f7:f0:ff:
                    3f:cb:2c:85:c7:73:c4:46:7c:97:33:81:ef:ac:3a:
                    f4:b0:b5:29:be:91:a7:1f:99:b3:52:2c:b6:e0:db:
                    4e:af:cd:ac:ae:bd:f6:a9:cc:0c:e6:32:db:2c:95:
                    60:e1:d0:26:e5:10:f2:5e:ae:cb:28:ca:7c:9f:d1:
                    c1:ed:92:ba:f4:12:f4:ea:3e:e9:e2:33:a6:09:20:
                    63:d5:66:ba:39:ef:78:2c:aa:59:1e:a3:8e:ea:1d:
                    b0:0a:22:43:06:48:3d:d6:12:d0:7d:5d:d0:98:ae:
                    18:38:f8:59:ae:45:23:98:b2:56:27:49:14:38:ab:
                    5a:88:27:4a:c4:04:aa:09:88:23:c6:7d:09:f7:c3:
                    9e:13:c5:88:53:bc:a1:7d:21:4e:bd:0d:04:07:8d:
                    05:43:48:d9:cc:64:4e:3e:04:ea:f4:a2:8c:cf:8b:
                    6d:2a:4e:c1:21:c4:55:6d:14:92:a6:e1:20:b3:31:
                    bc:a7:a0:8a:a6:23:99:9c:92:86:2f:f8:33:88:44:
                    e9:d1:09:ac:a0:81:85:19:73:28:a8:a6:da:a8:65:
                    d5:92:bd:db:85:88:23:5d:dd:b1:dd:ef:3c:11:41:
                    b7:9b:cb:a5:0e:48:23:40:a1:51:93:4a:7e:15:30:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C0:50:1B:D0:03:5F:D1:64:AD:8F:E7:CE:68:67:D3:56:05:A3:F7
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/93270912C5FD11F185F556524111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.11.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c0:48:4b:e9:1e:50:43:7e:bb:47:33:31:f6:8d:e0:6d:fe:
         32:8c:9b:f0:e3:87:68:d8:da:08:e9:ea:a4:6a:52:14:a4:39:
         4e:14:79:1c:c9:1f:f2:3b:95:a3:12:27:7b:f9:c5:38:6b:92:
         6b:aa:1f:9a:b8:6e:d9:8c:99:0e:0c:b7:cb:12:67:2c:2b:b1:
         65:14:8e:30:c2:90:ee:66:d2:4a:4e:22:10:8f:f5:05:c7:c7:
         bf:cd:da:f4:cf:e9:ab:6e:d5:b4:03:ea:44:da:ed:8a:43:cd:
         3f:a1:39:ad:8d:90:f2:45:ad:6b:08:0e:a7:0d:7e:84:fd:d7:
         b0:93:c1:2d:8d:fa:d7:d6:04:92:51:1d:9b:19:f6:bf:7f:ee:
         6c:7a:79:3f:2b:62:df:91:46:2d:81:5a:26:bb:2f:99:94:7c:
         5c:28:c2:6e:f7:d1:d5:87:42:67:3b:44:a5:05:e9:f5:04:e0:
         a8:0d:72:05:8e:b0:ec:1d:4c:2f:ad:73:34:6c:f7:f9:ec:94:
         93:d3:3e:be:ec:12:25:39:e5:9d:72:79:8b:a4:d4:16:7f:86:
         fa:73:92:76:fe:08:7e:3c:db:46:5e:5d:25:c0:9a:ea:89:05:
         c1:fe:66:0c:b3:9b:c0:ab:44:b8:d3:14:e4:49:7c:e5:b6:73:
         63:98:8d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:18:22 2026 by rpki-client