Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa
File:                     D97AC950ABDD11EDAE837666C4F9AE02.roa (raw, json)
Hash identifier:          jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=
Subject key identifier:   65:5C:DE:9F:2B:09:44:79:E7:44:36:88:4D:E1:79:2B:B2:32:52:09
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05A5
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa
Signing time:             Tue 07 Jul 2026 01:27:36 +0000
ROA not before:           Tue 07 Jul 2026 01:27:36 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     17819
IP address blocks:        203.32.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Jul 2026 01:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445 (0x5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jul  7 01:27:36 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4c5608-bf13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:96:01:dd:13:b2:bf:28:f7:ba:7b:06:22:
                    34:62:4b:bb:c5:12:6a:0c:b5:f0:87:ba:55:b8:de:
                    71:be:26:e3:aa:22:30:ce:da:d9:81:c9:8e:2a:a8:
                    35:00:cc:26:8b:b3:dd:44:4d:0b:2a:51:af:05:8a:
                    65:96:5d:63:fa:7b:39:b3:75:9b:34:d3:5f:c1:b7:
                    de:62:50:fa:a5:85:8c:05:77:97:1f:2d:b8:03:cc:
                    d7:dc:71:94:b1:2a:26:8a:d6:2f:27:93:88:dd:af:
                    38:68:a0:3d:38:1b:38:42:1d:f4:b0:07:8e:05:75:
                    00:86:3d:41:31:84:83:51:8c:f8:5c:20:f4:b8:13:
                    c8:d1:bf:c3:e3:44:29:55:15:53:1a:80:46:ef:05:
                    76:8c:52:bf:33:84:41:a0:2f:6d:00:04:f7:6f:ec:
                    3e:90:7a:65:8e:b6:86:44:92:31:5d:1e:b6:e8:1b:
                    e6:b2:dc:8b:f6:04:9e:21:4a:88:d2:0a:10:f1:95:
                    9c:dd:3e:f5:8f:c5:00:d0:b3:f4:57:f4:2d:69:f2:
                    2a:fb:c7:8a:19:04:a0:20:b7:b3:41:31:e6:7f:f0:
                    53:88:24:fe:fd:fe:89:e0:00:fa:db:24:6f:67:7a:
                    db:09:e8:04:34:9f:13:66:15:57:26:89:c5:df:5b:
                    78:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5C:DE:9F:2B:09:44:79:E7:44:36:88:4D:E1:79:2B:B2:32:52:09
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a3:2f:a7:e0:70:57:ca:1a:a4:b7:74:4a:82:1b:be:c1:b4:
         bf:4a:12:62:5b:a4:4b:17:76:0a:b6:8c:c9:52:ce:38:e6:04:
         97:29:96:09:e3:43:a0:13:cf:8c:08:34:af:9b:4b:1a:41:f0:
         8e:93:e6:5d:21:93:46:f4:67:69:63:5c:dc:3f:11:d6:0c:92:
         f6:26:87:5f:0b:98:85:5f:ea:85:f7:a9:88:13:08:9d:c9:3d:
         44:23:1d:74:1b:a9:91:77:da:15:7c:57:aa:b3:88:19:32:a4:
         71:74:74:c9:60:bc:f9:bc:ab:14:da:bf:b5:9a:20:d0:04:d2:
         5e:81:73:47:2c:5c:34:06:aa:c2:de:61:29:37:37:39:92:22:
         5f:ad:1a:6e:42:9d:5f:fe:9d:a8:24:e8:81:58:3d:34:94:9f:
         af:ed:f4:cd:61:97:76:02:1c:15:20:54:58:5b:4c:50:76:f8:
         a4:0a:0b:8b:f7:6c:4d:5e:87:61:c2:7d:3a:b0:13:43:ff:dd:
         ec:6b:95:96:d4:aa:a8:c5:83:f0:17:94:3c:5f:7c:85:17:61:
         94:69:b5:8f:6b:59:80:a4:e3:6d:25:40:4d:94:c6:f6:60:a8:
         61:67:9e:e5:9e:9f:b1:42:7f:56:ea:d7:19:5f:4a:c1:29:7f:
         22:19:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 10:51:48 2026 by rpki-client