Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa
File:                     971C7F142B3711F0BDDC4B6CC4F9AE02.roa (raw, json)
Hash identifier:          9JMW1Axqaeza0Zg1QKYRRnVPCSleCSkAm3i0mgEuY3s=
Subject key identifier:   AA:8D:8A:B9:30:E4:BD:C5:9E:45:B7:14:9E:96:0B:9E:4B:89:26:16
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3BA6
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:24:17 +0000
ROA not before:           Thu 20 Aug 2026 16:24:17 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45305
IP address blocks:        202.47.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15270 (0x3ba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:24:17 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a31-c95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:95:59:a6:03:b8:3f:dc:9b:d9:fd:49:1b:
                    1e:a5:16:36:3d:e8:e3:ae:5f:1c:22:69:1f:5a:2a:
                    5b:86:d3:67:58:af:46:10:47:59:7a:94:9e:9b:3e:
                    92:9a:41:e6:8e:6d:e1:35:0f:ac:3e:ac:31:15:80:
                    01:c8:80:3e:e0:0b:ad:bf:af:5b:97:17:cb:12:8c:
                    04:8d:76:b7:ab:db:ae:a2:3c:f3:78:c7:76:4e:fb:
                    8b:45:83:97:4b:89:80:0c:9c:e4:8e:1f:66:31:9a:
                    d1:a9:05:d8:93:34:ae:ef:0f:88:27:3f:cc:fc:e2:
                    24:36:31:b2:a8:f5:fe:9c:8c:1c:b1:e5:d5:87:b2:
                    08:37:6d:32:8d:98:63:8b:ec:5a:f6:c6:16:49:2d:
                    45:89:ee:c3:bf:f8:6c:9a:bc:2b:ae:39:d6:48:47:
                    01:dd:31:06:90:28:dd:4e:f3:27:ed:d4:47:63:e3:
                    35:c5:0d:5b:c2:1a:21:59:d7:42:17:d7:45:61:29:
                    42:3c:51:45:62:6f:43:c9:7d:51:91:07:b7:cc:75:
                    94:12:de:de:f6:6f:01:a2:35:a8:3b:ba:c7:11:63:
                    46:93:df:57:05:14:25:5a:84:ce:34:e6:52:e0:51:
                    8d:bb:ed:b4:4a:6b:48:32:99:74:02:53:fc:43:1e:
                    be:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8D:8A:B9:30:E4:BD:C5:9E:45:B7:14:9E:96:0B:9E:4B:89:26:16
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:b4:28:f1:6f:92:e5:95:5d:2d:fb:dd:1b:53:70:dd:9f:46:
         29:e7:52:41:c8:07:4d:cf:81:84:94:7f:bf:0e:6b:41:ee:02:
         59:c1:82:25:15:00:13:64:c3:d5:48:6a:f9:35:d6:08:1c:1d:
         dd:f3:84:d6:6d:58:09:0b:29:bd:96:12:fb:ce:f7:24:82:d7:
         f0:83:21:17:b7:63:66:92:38:b7:2a:13:1b:f5:81:49:1a:f7:
         54:de:a2:b6:d8:09:d1:c7:60:0f:bd:a1:c7:d2:71:25:20:03:
         90:35:94:a3:50:9f:fa:ac:72:b6:b4:7b:19:60:a0:2f:ba:81:
         ce:5f:01:13:22:ac:80:1e:f3:2a:c2:f3:0e:76:ea:af:93:0f:
         e5:7f:df:7d:91:2d:ff:46:7a:58:c7:85:0f:67:d0:00:8d:e6:
         b8:4f:87:c3:f0:74:9f:62:12:14:02:e0:44:86:ea:4c:4d:2b:
         c1:c2:6b:00:0d:2e:e1:d4:a5:37:b8:2c:fb:d7:99:77:5e:2e:
         b3:65:8b:06:75:9c:99:87:e9:f3:ff:1e:54:61:ee:f4:b0:99:
         ba:18:63:a8:13:59:0d:22:da:04:8a:26:69:81:91:09:63:8e:
         63:66:32:58:fc:58:7d:08:90:7f:f8:62:4d:49:fd:47:a2:8f:
         5a:a1:e8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:04 2026 by rpki-client