Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4800F752477911F19E56FD3F95833773.roa
File:                     4800F752477911F19E56FD3F95833773.roa (raw, json)
Hash identifier:          nKprgXFIoFtiYaag6EoueAF9e18RWxQbnixS8TTrznA=
Subject key identifier:   8E:C1:87:BA:61:01:11:8A:92:02:95:6A:69:98:52:99:FC:E0:4B:9C
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       243F
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4800F752477911F19E56FD3F95833773.roa
Signing time:             Mon 04 May 2026 05:22:45 +0000
ROA not before:           Mon 04 May 2026 05:22:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     202595
IP address blocks:        203.82.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9279 (0x243f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: May  4 05:22:45 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69f82d25-ed43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:fe:0a:45:14:93:29:7d:3e:65:25:b1:ac:
                    af:b6:13:af:b5:75:30:d5:ab:78:29:e9:3d:60:41:
                    32:e4:17:5a:09:ed:b8:a4:75:8f:1d:04:e6:52:24:
                    18:b9:fe:b3:d2:79:59:70:67:0c:10:d2:f7:8f:ec:
                    13:37:41:90:9b:9f:ea:e0:ad:3d:61:24:70:3b:d1:
                    19:06:7c:f2:35:aa:b5:f7:44:92:5d:73:54:86:e1:
                    c6:01:93:eb:30:0d:cc:6c:70:f7:00:38:bd:7d:9d:
                    6f:ac:fa:72:87:72:8d:0e:bf:28:76:d8:9c:c1:bd:
                    a8:49:88:8a:54:ee:86:0e:90:b1:b6:4b:b0:05:a9:
                    7e:92:d9:d7:fc:e2:88:a6:b1:e4:a6:a1:33:8c:28:
                    e1:8c:26:d1:11:54:34:33:7f:dc:60:47:48:ab:89:
                    fc:2c:66:88:ed:db:34:65:7b:1b:85:4f:76:a4:d8:
                    eb:6f:b6:55:4f:32:5c:eb:a1:91:20:e6:f1:eb:b3:
                    8e:2f:18:e2:1d:db:a9:9d:4f:45:c0:c3:5d:63:ee:
                    eb:f3:c4:97:af:30:d5:e0:d8:03:9a:54:3a:74:92:
                    0b:8f:34:ad:c9:77:fe:d8:9a:0e:c6:ed:4e:4d:86:
                    c7:b5:bf:6d:22:9e:b9:7e:08:ac:3c:79:4a:e4:36:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C1:87:BA:61:01:11:8A:92:02:95:6A:69:98:52:99:FC:E0:4B:9C
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4800F752477911F19E56FD3F95833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.82.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:d4:8e:0a:9f:44:8c:29:08:e9:5f:12:8d:6a:8d:b2:9a:d0:
         46:40:80:4b:29:74:ef:11:06:41:73:3a:57:16:ac:68:ea:bb:
         c1:ae:57:4a:0c:80:13:4f:ba:a7:b4:b4:12:77:83:78:36:2e:
         9d:7f:49:84:a0:fa:3f:8c:b1:4d:0a:be:03:67:7b:a8:33:34:
         b5:f8:91:df:d2:83:dc:52:22:d5:7c:11:78:8e:b1:45:bc:7b:
         0b:81:58:e3:c2:de:d2:8d:3e:03:a7:1e:8d:fe:4a:4c:a6:9b:
         df:57:b2:e1:54:ef:58:2c:42:d8:9a:c5:cc:d8:18:2f:44:61:
         da:37:aa:d7:84:db:5f:9e:fe:b6:e1:b3:8b:67:19:49:f4:c4:
         be:f5:70:67:6a:d5:bb:62:0b:30:a1:a9:79:e3:5f:65:6d:b6:
         bf:e4:88:0e:c0:5b:15:3e:19:91:97:13:2f:f9:04:89:61:32:
         1e:60:fd:1b:4d:e9:a1:f2:02:99:e3:11:73:e5:a2:2e:15:ef:
         02:5e:de:22:63:86:53:b9:49:fe:de:55:5f:de:c8:2e:97:c2:
         30:19:2d:fd:a9:7e:74:ad:0a:6b:d7:6c:64:34:7b:35:76:a4:
         a2:71:84:22:cc:83:cf:1a:02:49:a9:50:f5:71:02:f1:81:ed:
         a1:bc:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 00:40:34 2026 by rpki-client