Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/F30D41529ABF11F1B22CABD14611F970.roa
File:                     F30D41529ABF11F1B22CABD14611F970.roa (raw, json)
Hash identifier:          85pNotyjZ8mxuBhPKNSC6QbezOpRGw5rRNH9Oy4noF8=
Subject key identifier:   FA:9C:1C:0F:34:A0:A9:15:81:0B:85:54:A4:94:B8:B8:CB:07:73:3A
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       073F
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/F30D41529ABF11F1B22CABD14611F970.roa
Signing time:             Tue 18 Aug 2026 07:32:13 +0000
ROA not before:           Tue 18 Aug 2026 07:32:13 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     38296
IP address blocks:        203.185.97.0/24 maxlen: 24
                          203.185.100.0/24 maxlen: 24
                          203.185.129.0/24 maxlen: 24
                          203.185.130.0/23 maxlen: 23
                          203.185.130.0/24 maxlen: 24
                          203.185.131.0/24 maxlen: 24
                          203.185.132.0/22 maxlen: 22
                          203.185.132.0/23 maxlen: 23
                          203.185.132.0/24 maxlen: 24
                          203.185.133.0/24 maxlen: 24
                          203.185.134.0/23 maxlen: 23
                          203.185.134.0/24 maxlen: 24
                          203.185.135.0/24 maxlen: 24
                          203.185.136.0/24 maxlen: 24
                          203.185.137.0/24 maxlen: 24
                          203.185.138.0/24 maxlen: 24
                          203.185.139.0/24 maxlen: 24
                          203.185.140.0/24 maxlen: 24
                          203.185.141.0/24 maxlen: 24
                          203.185.142.0/24 maxlen: 24
                          203.185.143.0/24 maxlen: 24
                          203.185.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Aug 18 07:32:13 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a840a7d-ff9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:2d:84:4e:f4:24:02:08:de:df:d5:48:a7:
                    f7:c1:3b:52:b0:1c:20:40:20:37:32:0c:f5:6c:52:
                    87:ff:96:9f:50:ab:16:af:0c:77:4e:f4:03:5d:54:
                    dd:f7:ab:92:b1:9f:d9:66:27:fe:0f:af:97:2e:00:
                    b0:c2:6c:db:1b:d6:65:14:3d:72:90:60:b4:4e:7e:
                    7d:1f:26:9a:64:b6:e2:ff:9e:8e:f7:f4:31:49:4e:
                    60:e9:9e:a0:f4:be:21:05:05:00:df:e6:6e:60:9c:
                    88:02:f6:80:59:24:a3:85:4a:3b:69:81:1f:c2:98:
                    0d:b4:5d:aa:1e:6a:f8:36:c8:70:5e:7c:51:d8:6b:
                    b4:c1:68:ad:2c:68:10:55:75:c8:bb:9a:7b:44:9d:
                    25:57:79:06:64:5c:20:99:89:63:1e:ae:9d:da:24:
                    f3:64:5d:0d:af:68:6c:ef:b2:2e:2e:2e:9d:27:b3:
                    75:7a:c9:76:90:6f:08:88:de:da:4d:84:6f:84:04:
                    c7:f2:ba:37:0f:d9:ae:d7:2b:69:dc:a4:20:ea:65:
                    07:68:d5:4b:cb:bd:b5:48:28:01:4d:80:f4:d2:83:
                    eb:64:85:f5:a0:77:91:06:1b:0b:a7:48:95:cb:da:
                    a5:25:b8:1c:4d:07:33:6f:b8:58:bf:96:dd:21:cd:
                    97:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9C:1C:0F:34:A0:A9:15:81:0B:85:54:A4:94:B8:B8:CB:07:73:3A
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/F30D41529ABF11F1B22CABD14611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.185.97.0/24
                  203.185.100.0/24
                  203.185.129.0-203.185.145.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:93:74:42:4f:3a:4c:af:fb:b0:7d:61:cd:a3:1a:f6:22:4e:
         27:c9:9b:0f:27:1d:d5:50:28:30:1f:19:aa:ac:06:f0:71:1d:
         3b:d9:a1:08:97:0e:d3:04:a9:bb:2b:2c:3c:0c:d0:ca:97:37:
         63:c8:5f:a1:07:94:c7:99:68:d0:43:91:45:a1:5b:69:3b:17:
         ba:44:19:c6:ca:e0:64:9a:d3:33:46:16:10:a0:5d:77:2b:b0:
         89:4e:eb:92:c1:65:21:6c:69:9e:8c:46:4b:da:69:1a:99:02:
         0f:cd:1a:14:c8:85:bf:03:4f:bc:f2:ce:a2:ca:aa:86:6e:98:
         c3:7e:87:01:b4:cd:40:08:77:d8:80:3a:a8:13:c2:83:63:cc:
         8e:ba:54:af:35:7e:4b:0a:54:da:fd:cd:02:1d:f4:17:68:aa:
         13:0f:c6:da:e2:85:f3:21:3a:77:ea:4a:aa:fe:6a:6b:eb:38:
         f8:a4:11:c3:1b:15:bb:a0:2c:91:6e:d8:12:e0:5c:52:df:85:
         01:25:e9:a2:da:a9:d4:2e:bf:2f:b2:44:76:bb:23:66:e2:db:
         e4:5f:23:5d:ed:69:f6:a3:64:7c:f7:b1:04:d9:1e:a8:c9:ba:
         22:08:9f:0a:f3:68:85:25:20:92:ac:43:75:e7:ce:99:12:74:
         27:3f:32:70
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICBz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjYwODE4MDczMjEzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg0MGE3ZC1mZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlcthE70JAII3t/VSKf3wTtSsBwgQCA3Mgz1bFKH/5afUKsWrwx3TvQDXVTd
96uSsZ/ZZif+D6+XLgCwwmzbG9ZlFD1ykGC0Tn59HyaaZLbi/56O9/QxSU5g6Z6g
9L4hBQUA3+ZuYJyIAvaAWSSjhUo7aYEfwpgNtF2qHmr4NshwXnxR2Gu0wWitLGgQ
VXXIu5p7RJ0lV3kGZFwgmYljHq6d2iTzZF0Nr2hs77IuLi6dJ7N1esl2kG8IiN7a
TYRvhATH8ro3D9mu1ytp3KQg6mUHaNVLy721SCgBTYD00oPrZIX1oHeRBhsLp0iV
y9qlJbgcTQczb7hYv5bdIc2XNQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFPqcHA80
oKkVgQuFVKSUuLjLB3M6MB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwQTgvNzBDMkVCN0FBMTk2MTFFQjgyMDBDRjA5QzRGOUFFMDIvRjMwRDQxNTI5
QUJGMTFGMUIyMkNBQkQxNDYxMUY5NzAucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaAwQAy7lhAwQAy7lkMAwDBADLuYEDBAHLuZAwDQYJKoZIhvcNAQELBQAD
ggEBAD+TdEJPOkyv+7B9Yc2jGvYiTifJmw8nHdVQKDAfGaqsBvBxHTvZoQiXDtME
qbsrLDwM0MqXN2PIX6EHlMeZaNBDkUWhW2k7F7pEGcbK4GSa0zNGFhCgXXcrsIlO
65LBZSFsaZ6MRkvaaRqZAg/NGhTIhb8DT7zyzqLKqoZumMN+hwG0zUAId9iAOqgT
woNjzI66VK81fksKVNr9zQId9BdoqhMPxtrihfMhOnfqSqr+amvrOPikEcMbFbug
LJFu2BLgXFLfhQEl6aLaqdQuvy+yRHa7I2bi2+RfI13tafajZHz3sQTZHqjJuiII
nwrzaIUlIJKsQ3XnzpkSdCc/MnA=
-----END CERTIFICATE-----
Generated at Sat Sep 19 07:35:21 2026 by rpki-client