Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
File:                     A97B2098C70811ECBAECCC78C4F9AE02.roa (raw, json)
Hash identifier:          2bQYhSZcJ4BtlNj5FI7uxu6AOJTLtYVvnOaTPN177HE=
Subject key identifier:   CF:89:E2:DE:84:60:CF:49:B9:4D:E4:85:61:FD:C1:2A:FF:52:D1:A5
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       04EC
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
Signing time:             Fri 04 Sep 2026 22:44:02 +0000
ROA not before:           Fri 04 Sep 2026 22:44:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        31.69.0.0/17 maxlen: 24
                          31.69.224.0/19 maxlen: 24
                          31.99.144.0/21 maxlen: 24
                          141.163.128.0/20 maxlen: 24
                          141.163.144.0/20 maxlen: 24
                          141.163.160.0/20 maxlen: 24
                          141.163.176.0/20 maxlen: 24
                          141.163.192.0/20 maxlen: 24
                          141.163.208.0/20 maxlen: 24
                          141.163.224.0/20 maxlen: 24
                          141.163.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Sep  4 22:44:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9b49b2-5264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:1b:b4:2a:45:0f:3f:69:03:b8:47:11:3a:
                    c8:84:d5:a9:1f:36:fd:0d:aa:21:86:8c:5f:89:ef:
                    02:d0:0d:2c:bc:72:37:73:14:ac:56:95:04:7e:83:
                    97:ae:36:14:7a:72:5b:ad:be:53:b6:58:8c:a5:e7:
                    3a:35:50:c0:e2:3d:86:e6:b8:1c:10:93:5c:c5:28:
                    b5:78:c5:9f:fb:7e:22:95:69:18:d9:fc:12:0d:b3:
                    d0:db:a3:bd:a7:5b:05:23:f7:f5:b6:7f:d4:e3:ac:
                    9e:19:b4:87:85:b2:e6:60:ed:5c:a1:2f:cd:6b:e1:
                    15:ac:95:5d:e9:98:2b:02:1d:15:4c:46:6f:0e:62:
                    75:53:ce:69:bb:9c:b3:c7:88:1d:1b:e4:97:5c:a2:
                    b7:de:a8:fb:71:96:10:44:1a:02:0b:06:d4:50:46:
                    39:df:e3:73:d2:19:b8:98:c8:03:2b:5d:6d:61:18:
                    e1:d7:81:83:0b:67:16:3a:b2:05:3e:a8:7b:96:88:
                    96:0c:64:cf:dd:73:cd:b1:f6:86:2c:d5:5e:66:80:
                    22:39:b2:0b:d6:de:d7:ad:b8:8c:85:9a:89:b3:67:
                    59:84:57:da:b4:48:42:fc:e1:ba:0f:10:7b:9b:e5:
                    ba:a6:f7:e7:58:ae:45:28:48:d0:e1:30:a4:db:20:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:89:E2:DE:84:60:CF:49:B9:4D:E4:85:61:FD:C1:2A:FF:52:D1:A5
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.69.0.0/17
                  31.69.224.0/19
                  31.99.144.0/21
                  141.163.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:4c:ef:d7:ce:20:b9:ae:f9:9e:1a:0e:0e:40:36:74:88:35:
         c8:13:36:25:85:71:93:0c:b5:05:60:ba:4a:ee:4a:62:4a:b7:
         b4:03:c9:7b:34:e6:9f:01:02:73:d5:9f:10:22:76:52:15:6e:
         ae:63:a0:a3:fe:98:19:4b:d2:82:b2:3e:98:47:51:69:b1:97:
         8b:a0:ca:5e:f3:b0:47:e8:96:8b:fc:6d:20:ec:08:e3:0c:f8:
         8a:0f:c9:df:c3:9d:44:11:fa:9c:ce:b4:90:df:60:6e:01:85:
         6f:f9:e5:ca:46:dc:28:b6:4d:8c:5c:df:92:d7:bf:cc:1e:6d:
         39:28:2d:9c:d4:bc:b9:34:0f:b5:aa:7b:87:22:a3:02:9c:94:
         5d:e1:eb:79:f4:43:fc:e7:f0:aa:16:1d:c0:c0:38:20:8a:90:
         69:ec:bf:3a:95:f1:b7:35:92:8a:92:e6:49:67:3e:e9:2a:bd:
         c9:ee:5b:46:1b:5d:16:4f:b8:88:4e:15:99:00:70:58:bc:1a:
         f5:54:be:4f:f5:1c:99:c7:d1:a0:a2:73:00:4c:f8:28:c2:15:
         43:32:5a:ae:fe:fd:41:a5:d0:9a:66:72:a6:46:7d:14:26:ca:
         4a:ae:06:ef:27:8f:61:c2:80:fa:cc:cb:7f:21:5a:56:6e:29:
         5c:b3:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:34 2026 by rpki-client