Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa
File:                     B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa (raw, json)
Hash identifier:          wR/gV0bAGkEOc7p9Q73UcbAxejY11n0Ak+N3vWrR/o8=
Subject key identifier:   2A:29:1A:3D:AA:04:21:6A:71:47:22:0A:3D:44:95:FC:8B:50:5E:8F
Certificate issuer:       /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95
Certificate serial:       0587
Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa
Signing time:             Mon 22 Jun 2026 03:09:02 +0000
ROA not before:           Mon 22 Jun 2026 03:09:02 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     963
IP address blocks:        103.84.84.0/22 maxlen: 24
                          202.59.249.0/24 maxlen: 24
                          202.61.97.0/24 maxlen: 24
                          203.33.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl
                          rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415 (0x587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95
        Validity
            Not Before: Jun 22 03:09:02 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a38a74e-e6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:27:40:ee:58:ad:c8:a2:0a:5f:d9:f6:53:
                    68:a5:f4:a9:6d:2b:7c:f8:47:ab:e2:a8:2a:53:41:
                    2c:37:60:c1:25:83:e2:4b:06:2e:1d:a9:1e:7b:93:
                    96:0b:b3:03:4e:a7:fc:d6:de:a0:e6:10:64:ad:01:
                    0b:37:f8:14:32:df:86:8f:ce:ae:c4:b2:6a:fa:42:
                    75:1d:e3:b2:14:e3:10:4c:33:f8:6c:6c:ab:b1:04:
                    cd:f8:12:ea:1c:1e:07:f2:62:68:50:bc:02:88:e8:
                    36:23:6b:66:a5:46:1d:b2:8f:da:55:f0:ae:35:4c:
                    81:c9:df:9f:18:1c:b3:51:24:8f:d6:ee:c5:e9:e8:
                    ba:a2:09:ef:23:1e:e2:91:c9:b9:d8:72:f3:6b:ca:
                    dc:27:53:09:7c:e7:dd:17:30:5c:1a:0e:0c:b8:ff:
                    fd:10:f7:2e:26:16:d5:09:e4:44:9e:52:89:fb:5f:
                    af:ed:28:c3:e3:00:6f:f4:95:9a:e7:cf:83:2f:b5:
                    16:67:5a:69:08:1c:91:83:e3:43:b1:ae:67:f6:2f:
                    41:f1:e5:62:14:01:30:30:61:2e:27:c7:16:cc:0a:
                    a4:8a:52:5b:f8:f5:e6:6d:c3:00:ff:6c:78:a8:40:
                    a6:95:71:24:5c:68:e5:01:65:fc:ef:42:43:d5:f7:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:29:1A:3D:AA:04:21:6A:71:47:22:0A:3D:44:95:FC:8B:50:5E:8F
            X509v3 Authority Key Identifier:
                keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.84.0/22
                  202.59.249.0/24
                  202.61.97.0/24
                  203.33.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d8:7b:14:2e:f0:7f:09:10:b7:59:20:35:9f:e4:e9:22:ad:
         ca:53:7c:95:7a:8a:52:22:7c:07:6e:38:0d:f2:51:cf:18:9e:
         5f:eb:90:b5:b9:37:0c:4e:64:f1:b6:77:77:03:35:a5:ed:48:
         de:d6:9a:64:65:30:7f:0c:1c:0d:29:e8:3c:7d:89:42:ed:5a:
         92:fb:d1:a2:0f:10:ac:97:81:41:6f:e3:21:f4:24:58:60:85:
         93:8b:d0:31:3a:bf:0b:db:e2:af:40:5a:b9:96:63:ba:12:fc:
         1f:c0:13:f7:62:5a:96:da:d7:57:0b:dd:6a:85:41:72:f6:1d:
         2a:70:36:c4:77:54:b8:31:8d:4f:08:24:a7:e2:d0:c0:0f:85:
         ae:58:30:6b:98:79:67:0e:ed:26:84:9a:7a:5b:63:9d:47:29:
         f4:d0:59:04:77:9c:ef:0b:c1:48:63:09:9e:f4:9d:40:78:39:
         56:23:96:bb:59:c7:3d:c7:35:fe:3e:d8:68:7d:dc:af:f7:c3:
         4c:1d:7b:ff:28:3b:86:8c:25:4b:09:4f:55:1d:c9:71:c8:c7:
         5b:75:77:66:5f:46:58:f3:ac:18:4a:00:f1:bd:39:54:06:43:
         01:59:49:9f:8e:e4:31:4d:4c:5b:5e:77:4c:d2:db:62:89:5d:
         36:8a:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:36 2026 by rpki-client