Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9E60AA30DCB511ECAC801F6EC4F9AE02.roa
File:                     9E60AA30DCB511ECAC801F6EC4F9AE02.roa (raw, json)
Hash identifier:          BIuosdWuF+4ep+QMwFKZ6npqwjzH0+zcNnprYLZ5I98=
Subject key identifier:   90:5F:D2:FC:AC:78:A0:03:C2:26:10:36:06:84:6F:72:A3:1C:AF:AD
Certificate issuer:       /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Certificate serial:       038C
Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9E60AA30DCB511ECAC801F6EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:21:09 +0000
ROA not before:           Sat 17 May 2025 01:36:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     8220
IP address blocks:        193.82.0.0/19 maxlen: 19
                          194.223.140.0/22 maxlen: 22
                          194.223.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 00:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
        Validity
            Not Before: May 17 01:36:55 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59cd5-5a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:49:80:a3:ac:30:2d:d3:26:e4:f3:4b:67:
                    06:e4:ca:a3:1f:e7:fa:1d:0f:eb:28:22:14:a4:f7:
                    e3:f4:02:49:dd:a2:43:eb:44:20:9f:0a:27:b7:69:
                    2f:b6:12:cc:44:75:25:6d:9f:0e:93:4c:6a:a4:ef:
                    ff:2f:46:c6:2b:56:f5:78:02:b3:4c:e1:15:28:6b:
                    39:15:64:02:83:2d:e4:ad:4f:52:06:26:43:a1:f4:
                    49:d9:b0:a0:bd:fe:a2:c6:7c:74:57:d0:3d:b3:81:
                    e3:ce:9d:bd:69:7b:ad:84:cd:fb:e2:a2:e1:45:cf:
                    9a:11:fc:20:00:38:74:18:3f:bc:30:2c:dd:51:45:
                    d9:a3:84:b1:6e:37:4b:ec:f1:b5:fb:53:06:c0:f5:
                    00:30:5a:ca:c0:07:d0:b7:aa:ef:32:0e:b0:b5:cd:
                    d3:a6:db:00:d1:20:60:dc:b6:eb:92:15:f0:da:b3:
                    a0:26:35:4a:f2:71:df:30:8a:95:81:88:20:59:39:
                    66:76:b2:02:17:96:1c:e6:d1:f1:2f:9a:16:1a:c8:
                    6f:d7:21:96:d9:f3:6a:3c:4b:cf:3a:f2:9c:0b:b0:
                    fe:53:62:9a:e8:42:5c:02:a4:ca:e3:fa:f7:6b:1f:
                    27:f1:27:9d:ad:51:4f:ed:cc:d0:76:89:24:74:ec:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5F:D2:FC:AC:78:A0:03:C2:26:10:36:06:84:6F:72:A3:1C:AF:AD
            X509v3 Authority Key Identifier:
                keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9E60AA30DCB511ECAC801F6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.82.0.0/19
                  194.223.140.0-194.223.159.255

    Signature Algorithm: sha256WithRSAEncryption
         8a:46:09:4a:19:13:43:5a:8c:35:c0:90:c2:16:5d:aa:fe:f4:
         ed:c9:1e:e3:03:1f:ed:db:31:2f:ac:a0:81:ac:84:91:7f:d0:
         96:ec:4b:24:79:e3:3f:07:3b:e5:0f:a0:ba:d5:3b:b3:22:51:
         93:27:66:f2:2c:3d:33:da:15:af:71:33:be:cf:97:78:a2:8a:
         97:d5:be:db:69:b7:89:1e:dc:ad:b0:12:02:d5:a1:43:5f:3d:
         79:46:96:0e:6a:51:45:eb:f9:6e:a2:a8:20:f2:6f:15:96:9c:
         15:b2:65:73:1d:be:b1:5f:80:d5:29:a7:be:6c:de:23:9e:6d:
         7c:8c:87:80:1e:09:84:de:6c:d6:a7:09:ba:c2:44:65:17:6f:
         1c:5c:d6:60:a0:a7:76:fa:ed:50:1a:7e:76:fc:d6:0b:18:75:
         fd:b2:c0:84:1f:59:4c:88:1d:eb:f1:88:69:7d:14:ba:bb:0d:
         f3:5b:e3:f3:58:cb:11:4f:2b:89:02:d9:4a:be:f1:e6:ba:bd:
         dd:17:1a:13:bc:2a:40:f4:71:58:c4:2d:d3:94:cd:8f:39:b3:
         6d:c5:2f:1a:48:91:f6:2b:50:d4:e3:ec:93:69:a5:ac:3e:a8:
         01:b7:91:43:fb:0b:b9:cc:23:c4:a5:6d:f3:d2:71:9e:8c:9d:
         dc:6e:c7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:11:59 2026 by rpki-client