Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/F48C677A94A611F18AF960C06E11F970.roa
File:                     F48C677A94A611F18AF960C06E11F970.roa (raw, json)
Hash identifier:          RiTXH+oE8/EvAfBAsrOw7LlQy+djoD6hDUue74QmBm8=
Subject key identifier:   0A:B7:14:10:AD:27:3E:79:9D:D5:D1:94:39:77:DC:A9:34:32:71:1F
Certificate issuer:       /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial:       A1
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/F48C677A94A611F18AF960C06E11F970.roa
Signing time:             Tue 20 Oct 2026 16:29:07 +0000
ROA not before:           Tue 20 Oct 2026 16:29:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        192.232.42.0/24 maxlen: 24
                          192.232.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
        Validity
            Not Before: Oct 20 16:29:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6ad796d3-be1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:64:4e:ec:90:8a:5a:2e:4d:28:93:e4:9b:
                    d5:ad:86:6a:67:8d:5d:78:f4:5c:5b:5e:c5:92:a0:
                    03:30:6f:d0:b6:01:f1:b2:88:8c:ea:81:71:9b:41:
                    03:2b:b3:b7:3a:c7:17:17:30:28:41:48:c7:59:bb:
                    38:34:b2:b7:96:f2:29:89:02:7c:f8:b7:1c:e9:08:
                    41:4e:2b:71:39:6e:27:a0:bd:b8:21:ee:c2:86:18:
                    13:4c:4c:ea:09:bd:52:ae:d6:e4:c4:9c:f3:08:1b:
                    c9:96:b6:b0:1f:36:69:36:19:d2:9b:02:67:be:3a:
                    2f:e1:6c:1a:eb:1d:44:1a:ef:c1:45:a9:af:64:1e:
                    92:47:e9:ef:19:27:20:1e:29:2b:25:bb:09:fd:4c:
                    8d:89:89:a7:52:ff:10:48:b7:d6:f4:f4:d6:e7:92:
                    b3:9a:85:c7:e4:5c:19:f5:4b:77:d7:52:fc:0b:ee:
                    c5:b2:c6:35:d5:a9:db:ff:dc:57:ac:06:9f:74:66:
                    39:93:b3:13:bc:54:f2:79:66:04:91:06:ba:51:01:
                    48:b6:e9:57:84:12:b7:9f:9e:6f:b2:c3:59:23:46:
                    9b:ee:c9:d4:31:ca:f6:75:31:fa:b8:92:cb:d5:d3:
                    b6:7d:2c:fd:e9:c1:0e:e9:e3:90:6a:a3:cc:b1:23:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B7:14:10:AD:27:3E:79:9D:D5:D1:94:39:77:DC:A9:34:32:71:1F
            X509v3 Authority Key Identifier:
                keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/F48C677A94A611F18AF960C06E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:ef:55:5f:6d:24:db:37:f8:c1:6c:cf:ef:9b:b8:f8:93:0d:
         a3:67:36:c1:bb:91:6a:ac:3e:aa:38:00:fb:ac:1f:39:88:07:
         9b:72:61:79:78:b1:c6:0a:15:12:87:6f:1e:dc:52:78:d5:e5:
         f0:8c:7f:ed:b9:b1:84:aa:94:27:48:5b:66:af:e8:aa:f6:d6:
         fc:9a:3b:22:29:cd:af:8c:33:64:76:09:d6:d9:1b:17:a7:6e:
         33:39:a3:c9:f9:f0:8b:5d:c4:c7:87:fd:4c:e9:92:3b:6d:3a:
         5f:52:d7:03:e1:49:e3:d3:58:90:bf:76:64:da:cd:55:27:fa:
         ed:56:70:f9:9e:79:cc:1e:e4:2c:15:27:c3:90:10:ce:67:b6:
         e1:b3:31:95:a7:f3:f3:54:27:8a:78:dd:74:d8:19:ee:b6:8d:
         dc:ce:bf:d0:ab:37:08:e1:0a:eb:6d:c0:88:c2:d5:7a:fb:dd:
         08:1d:45:6c:e9:80:9c:a6:d4:9f:8d:97:e6:74:71:26:21:52:
         d8:9c:90:08:7b:cb:9d:28:45:08:65:c8:19:12:6b:f5:cd:bc:
         08:a3:33:26:25:a0:85:52:da:c7:2c:b9:b5:26:d7:4b:30:02:
         26:36:e3:69:28:13:05:ec:aa:fc:73:05:fd:31:b5:f9:a7:bc:
         0b:f0:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:50 2026 by rpki-client