Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/52863B4C9DBA11EB83364624C4F9AE02.roa
File:                     52863B4C9DBA11EB83364624C4F9AE02.roa (raw, json)
Hash identifier:          dlzlZoMUm2Cx9g19yLq+yFp31WbZhzVlN+kG3FUpBBA=
Subject key identifier:   C9:9C:F9:2D:2C:55:02:84:8B:39:3B:35:E8:BC:F5:02:09:0C:D4:51
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0D22
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/52863B4C9DBA11EB83364624C4F9AE02.roa
Signing time:             Fri 14 Aug 2026 19:38:46 +0000
ROA not before:           Fri 14 Aug 2026 19:38:46 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9989
IP address blocks:        202.177.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3362 (0xd22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Aug 14 19:38:46 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7f6ec6-af4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7b:a8:21:41:6e:bc:94:5e:95:a8:a2:51:d8:
                    3f:97:b7:ca:73:be:a6:e4:f5:00:5a:69:c2:88:0d:
                    26:cf:04:4d:9b:0a:22:09:b6:77:c8:2a:ea:0b:a2:
                    b4:dd:f5:1a:23:24:b9:37:95:e0:c0:33:6e:52:43:
                    65:4a:d6:db:fa:1c:79:37:a6:3d:0f:c3:c6:1d:f0:
                    13:c2:c5:8e:59:67:a7:26:1d:5e:96:6a:dd:77:22:
                    93:19:9e:08:69:bd:3f:50:8f:71:4f:4a:24:95:b0:
                    d2:af:34:9c:f0:ca:e5:77:ce:75:23:87:74:8a:c1:
                    1f:b9:4b:1d:db:36:9d:1e:78:ad:f6:15:0c:fb:bd:
                    82:d5:c4:db:9f:06:92:d6:1e:21:42:c1:27:e8:d1:
                    07:4d:c8:d3:ab:6d:04:a5:61:5f:fa:08:ef:67:2c:
                    da:d2:d8:a5:fc:08:0e:ea:53:00:b3:4d:63:96:37:
                    b5:d2:40:b5:f2:b1:a2:2e:f7:e7:15:75:dd:7d:5b:
                    59:6f:00:4a:00:c4:3a:f1:fb:a2:e7:03:62:80:35:
                    a0:e1:7b:59:9f:2f:9b:29:b5:16:6e:83:4f:55:ea:
                    d9:dd:b1:47:5c:8b:e6:f3:0b:38:80:1d:eb:5d:1c:
                    07:a1:0c:35:6f:52:7c:2b:23:7b:cd:f1:aa:23:66:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:F9:2D:2C:55:02:84:8B:39:3B:35:E8:BC:F5:02:09:0C:D4:51
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/52863B4C9DBA11EB83364624C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:73:4a:2c:73:a3:fd:a1:e0:a4:2c:9e:93:c8:82:b9:e7:0f:
         99:db:a0:82:0f:d9:03:1c:51:cc:54:65:d5:a2:4c:26:39:c0:
         88:2c:e9:46:0d:d7:40:af:4f:fc:2e:d8:55:7a:ff:b9:22:17:
         89:1e:53:f5:71:8d:2a:f7:b7:da:5a:3e:28:16:a6:a5:32:ce:
         b8:8a:44:42:9a:1f:69:5c:6f:e9:22:0e:c2:59:0f:5f:6b:d1:
         88:20:0d:f9:c3:00:7f:41:2a:d7:bd:98:ac:55:e4:5b:01:ec:
         f0:55:5f:b5:d8:20:21:9e:e3:87:69:44:38:88:fb:2f:29:6b:
         c5:07:a0:b3:05:3a:0c:41:6e:0a:45:f3:44:ee:bb:98:a4:64:
         71:3a:2e:41:2b:71:d5:b3:7e:55:26:c5:5e:22:7a:b4:8b:5e:
         17:dd:79:56:c3:37:f9:fd:31:7d:db:9f:d0:5f:f9:de:d2:d7:
         ba:4e:ba:69:fe:9e:c0:3d:fa:2e:87:5e:e3:e5:08:fd:7f:49:
         51:fc:eb:9c:af:b2:04:c8:02:18:23:ec:3c:e5:45:4f:a9:c0:
         58:7d:61:b1:a6:b4:99:c9:1b:77:62:26:50:43:fb:6f:53:48:
         ef:1e:cf:cf:dc:fa:b3:5b:1c:aa:25:14:ee:a4:86:38:cc:21:
         ee:4a:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:52 2026 by rpki-client