Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/959E1E5C438911F199AC3545C7833773.roa
File:                     959E1E5C438911F199AC3545C7833773.roa (raw, json)
Hash identifier:          o/N5wMgvItXdP3V7fouQN7Bkpr2EmsUXoWrtblWz5Ic=
Subject key identifier:   C9:C3:26:0B:5A:8F:C5:CF:74:BA:95:9C:A9:E8:9B:17:CA:0E:43:45
Certificate issuer:       /CN=A9164F6C/serialNumber=20DE918D4F923C02FE23EB916375BBF85B024CD2
Certificate serial:       32
Authority key identifier: 20:DE:91:8D:4F:92:3C:02:FE:23:EB:91:63:75:BB:F8:5B:02:4C:D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/959E1E5C438911F199AC3545C7833773.roa
Signing time:             Fri 17 Jul 2026 05:31:42 +0000
ROA not before:           Fri 17 Jul 2026 05:31:42 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151847
IP address blocks:        204.75.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl
                          rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F6C, serialNumber=20DE918D4F923C02FE23EB916375BBF85B024CD2
        Validity
            Not Before: Jul 17 05:31:42 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a59be3e-3027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b7:5f:a9:a5:ea:68:13:35:d6:6d:a9:0d:80:
                    f9:28:b8:9b:d0:3a:bf:4a:aa:2c:c7:80:ac:3e:2b:
                    fd:57:0b:2c:6f:52:59:2c:0b:73:cf:47:2a:f1:15:
                    4d:f8:76:58:8b:d1:d7:d6:09:44:df:c2:61:ed:7b:
                    57:62:07:fd:28:5a:94:40:a8:04:cb:89:72:4f:a2:
                    c5:29:0a:73:aa:9f:a0:9e:3b:97:34:2a:df:e5:05:
                    cb:b8:fd:59:61:1a:78:af:41:30:09:20:6e:61:87:
                    da:e0:e1:52:a3:5a:5c:05:42:39:47:89:47:4d:23:
                    7a:d0:8b:68:13:a3:01:86:8f:1d:73:3b:49:a9:98:
                    27:a1:8b:40:e3:b1:8c:80:26:16:64:d8:a8:43:8d:
                    4c:62:0f:24:2d:c6:60:bb:6f:25:1a:76:e0:ac:bb:
                    c4:f7:42:31:30:2d:b8:3b:8b:d6:0c:90:a8:a3:28:
                    03:88:22:1d:de:a5:71:ee:1b:c8:1b:cb:5a:a3:83:
                    49:0e:d4:cd:14:1b:ef:95:90:77:92:e2:94:bb:e7:
                    7d:2c:50:00:26:00:4f:46:99:82:d9:00:ba:2b:59:
                    13:43:ae:3f:46:c6:49:fd:6d:c7:5a:7f:ee:15:88:
                    46:71:96:1e:0f:d8:04:72:bc:f7:24:f6:11:a1:a6:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C3:26:0B:5A:8F:C5:CF:74:BA:95:9C:A9:E8:9B:17:CA:0E:43:45
            X509v3 Authority Key Identifier:
                keyid:20:DE:91:8D:4F:92:3C:02:FE:23:EB:91:63:75:BB:F8:5B:02:4C:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/959E1E5C438911F199AC3545C7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.75.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:c7:e6:04:cf:c7:86:19:9c:09:14:ee:9b:96:b3:5e:32:18:
         76:52:78:2b:b9:b9:cb:7f:e2:20:45:32:dd:59:5f:0e:8f:b1:
         3d:4c:d6:8f:be:96:c2:f7:be:1b:42:80:04:81:81:e2:c3:74:
         4c:04:18:12:46:66:2a:4f:e0:3e:59:1b:ee:3c:ad:99:a7:f3:
         82:03:e3:d0:ab:13:4e:e0:c5:96:51:a1:6c:64:e2:7c:cf:c0:
         8c:56:9c:a3:c3:73:f4:bf:83:25:e6:32:1e:3f:27:6e:88:e4:
         67:87:ca:5d:27:09:a0:05:ff:48:9c:d6:40:54:82:96:55:e5:
         6b:a2:5a:54:83:0f:d7:95:82:4d:ed:b8:5e:07:bd:2b:52:17:
         5a:48:a2:36:03:43:c9:26:4b:e2:3f:db:06:4d:29:b6:35:ee:
         29:fd:a2:f5:da:2b:b2:5e:74:16:c5:f1:9e:a2:db:68:29:49:
         05:ec:16:1d:70:1e:d3:3c:c3:f9:39:cc:a1:44:b0:70:23:22:
         3f:84:7e:8d:1c:94:84:8c:86:cd:ab:9d:c4:2b:54:ad:86:d7:
         7e:cf:56:45:11:b5:e8:d7:37:e8:c9:6c:0a:02:c9:1f:71:71:
         8e:22:93:e9:88:45:63:f8:6e:52:b8:f7:55:91:1c:35:3c:31:
         45:ab:4d:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:52 2026 by rpki-client