Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A29347481B4F11F1A4B595BB243D8C67.roa
File:                     A29347481B4F11F1A4B595BB243D8C67.roa (raw, json)
Hash identifier:          I6Jf0ENz6zH6Dr0nn64AaYVXkWEYmfgxIcYS+vYa8Kc=
Subject key identifier:   A7:E9:8C:48:2F:69:C4:0B:17:29:03:3E:76:2F:67:CE:99:35:29:8B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3DB8
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A29347481B4F11F1A4B595BB243D8C67.roa
Signing time:             Thu 06 Aug 2026 15:12:02 +0000
ROA not before:           Thu 06 Aug 2026 15:12:02 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     215595
IP address blocks:        203.173.100.0/24 maxlen: 24
                          203.173.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15800 (0x3db8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:12:02 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a442-8260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:e9:f4:8d:5c:5e:63:2b:51:52:79:68:6b:
                    b7:03:a2:55:10:4d:e6:da:7d:a2:57:1f:5f:ac:e6:
                    d6:ef:75:ae:f8:7f:3f:e5:08:78:64:b4:b7:8f:13:
                    e8:7d:dc:6a:23:c7:d1:44:b0:59:30:fc:fa:3c:53:
                    a4:77:cf:54:08:df:a1:6c:2b:52:8a:a1:6f:de:75:
                    78:8b:31:4d:a9:7e:cc:ac:b2:53:e1:2b:70:15:fa:
                    0e:49:fc:a1:84:ad:df:c9:95:d1:a9:35:fc:a7:cf:
                    e8:34:dd:30:0b:74:da:8a:76:ae:bb:72:bb:df:46:
                    79:5c:d5:6a:2a:f3:95:91:bc:2f:db:70:8a:8d:a7:
                    1b:eb:c6:59:3e:7c:9c:af:47:d9:c5:6a:d4:3f:9a:
                    ba:ae:0d:6d:b3:f4:42:04:fb:4d:8b:74:18:cb:38:
                    7b:e7:03:19:54:65:c4:6e:b3:38:6f:7a:f9:cd:41:
                    e8:67:f1:0e:a6:35:39:21:01:7a:85:22:6e:29:e2:
                    2e:0f:fa:cc:b2:c8:ef:55:7f:7b:92:0f:97:b2:ba:
                    86:df:81:a1:fb:71:ee:79:f1:87:d2:91:05:8d:ba:
                    6f:0c:8d:03:0a:81:0d:09:26:2b:aa:9b:37:89:4b:
                    7a:c0:65:21:48:e2:c1:2e:e3:19:b2:bf:07:f8:fd:
                    26:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E9:8C:48:2F:69:C4:0B:17:29:03:3E:76:2F:67:CE:99:35:29:8B
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/A29347481B4F11F1A4B595BB243D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:c5:64:c5:c0:7c:f4:02:d6:97:4a:75:2e:03:e8:73:4b:88:
         2b:d5:74:9f:fe:d4:69:e3:4e:19:cb:82:6c:db:0a:35:5d:fa:
         66:30:56:c6:a7:21:79:4a:db:2c:fc:c4:07:44:31:5c:cc:3d:
         b1:19:09:ee:bc:8e:e7:1e:b0:07:39:b6:43:29:83:22:21:6e:
         c2:a0:f3:06:8c:25:e4:7c:6a:db:f5:cc:f4:ee:4c:39:a3:9f:
         11:fc:65:39:75:15:eb:2a:02:51:69:23:0d:5d:37:be:7b:26:
         b5:cf:45:d6:73:29:9d:2e:57:8d:7b:39:a5:0e:ef:10:bc:22:
         4a:cc:da:33:03:35:c5:88:2e:cf:93:99:50:40:d8:a1:2f:e1:
         e3:25:a2:09:cd:7f:73:69:81:6a:95:a3:a0:65:96:b8:1b:e3:
         7f:6f:48:46:b9:7e:13:6a:87:42:d7:a9:d0:a6:d8:bf:b1:36:
         c9:a6:94:cf:c1:ba:ec:ec:63:74:7b:a6:27:66:c6:eb:c7:83:
         a6:38:b0:d9:9f:a2:37:36:70:01:e8:db:fa:18:69:3b:13:b1:
         2c:87:de:4b:13:67:95:43:08:4b:5b:12:5a:e1:01:d2:51:a8:
         f3:10:9a:52:81:ab:b6:c3:dc:70:77:0a:04:25:de:02:1d:50:
         64:21:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:57 2026 by rpki-client