Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/18F343922A5711EBB59D6526C4F9AE02.roa
File:                     18F343922A5711EBB59D6526C4F9AE02.roa (raw, json)
Hash identifier:          MfBYIfef5q6axAJciYZD+YSWEevAKozoCGz/YdfVQD8=
Subject key identifier:   FF:C8:0E:88:E4:19:80:C0:7A:54:69:8C:B5:45:E8:D6:2B:7B:DB:92
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       0939
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/18F343922A5711EBB59D6526C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:50:58 +0000
ROA not before:           Thu 12 Jun 2025 20:58:46 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9498
IP address blocks:        106.210.199.0/24 maxlen: 24
                          117.96.0.0/16 maxlen: 16
                          117.96.0.0/17 maxlen: 22
                          117.96.0.0/18 maxlen: 24
                          117.96.64.0/19 maxlen: 24
                          117.96.96.0/20 maxlen: 24
                          117.96.112.0/21 maxlen: 24
                          117.96.120.0/22 maxlen: 24
                          117.97.0.0/16 maxlen: 16
                          117.97.0.0/17 maxlen: 18
                          117.97.0.0/18 maxlen: 24
                          117.97.64.0/19 maxlen: 20
                          117.97.64.0/20 maxlen: 24
                          117.97.80.0/21 maxlen: 21
                          117.97.80.0/22 maxlen: 23
                          117.97.80.0/23 maxlen: 24
                          117.97.82.0/24 maxlen: 24
                          223.224.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 20:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361 (0x939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: Jun 12 20:58:46 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a45252-1f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:b4:fe:90:49:ca:72:62:54:0e:2b:40:59:
                    a6:b5:83:6b:03:d2:aa:0c:d9:3b:ae:19:7e:0c:ae:
                    7b:6c:1e:21:2c:0b:51:d1:ca:da:b9:26:9c:57:a9:
                    d4:d3:e3:35:a9:a4:e0:e5:9f:bb:17:39:5c:7c:4f:
                    c4:8d:4f:d2:c3:68:43:c9:67:e8:f2:32:50:db:93:
                    37:b3:85:da:d1:c0:10:6b:76:c9:0f:2a:51:01:7c:
                    ff:f9:03:84:18:30:89:74:0d:37:b9:ec:13:47:af:
                    59:2f:0b:b4:90:99:93:1f:56:02:3e:f5:cf:c6:ce:
                    43:43:16:de:3f:2f:6d:b3:8b:bc:64:55:d0:0e:08:
                    47:cd:92:d2:01:d6:6f:c0:48:19:03:0c:33:70:42:
                    ed:18:e7:c6:5c:50:c9:b0:80:24:95:71:c5:d6:c7:
                    22:09:ac:f3:9a:3f:54:ca:97:ed:2f:ea:63:f2:ef:
                    c2:30:db:de:7a:dc:58:f2:cb:c9:25:ec:9f:63:85:
                    d9:63:d5:ea:72:3b:8c:a0:e6:6d:95:41:ac:3e:47:
                    38:16:cd:d8:9e:65:1a:09:f6:89:e1:3e:79:1b:64:
                    ba:ff:32:ee:7c:b1:f6:3e:08:a9:6b:0a:1f:5b:13:
                    74:5c:80:1c:f6:45:b7:31:da:3a:29:f8:b9:48:94:
                    b3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C8:0E:88:E4:19:80:C0:7A:54:69:8C:B5:45:E8:D6:2B:7B:DB:92
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/18F343922A5711EBB59D6526C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.210.199.0/24
                  117.96.0.0/15
                  223.224.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:31:c1:45:1e:67:aa:73:81:b4:44:05:09:26:41:8e:ea:69:
         2c:c6:3e:4a:1f:0d:b2:87:a7:c9:f2:12:f0:85:fa:e4:cf:a2:
         44:1d:b6:5a:77:ba:c9:37:ed:f4:ec:f0:da:c0:c3:64:e7:11:
         59:6b:db:df:b0:19:56:1f:cd:c7:f1:20:b5:aa:ab:66:55:63:
         02:ad:6d:dd:11:b2:03:48:11:0e:2a:27:f4:33:5e:6d:46:1b:
         8f:c9:94:95:38:a1:6a:02:64:1f:d5:5d:04:28:ec:ac:a1:f8:
         ed:84:ed:7a:3a:b9:07:1e:36:fd:5f:c9:0f:f3:ab:71:29:7d:
         c4:28:1b:44:0b:e8:f4:6e:20:75:9c:30:84:6d:18:b4:c3:8e:
         bc:35:f1:11:35:ea:48:f1:6a:a2:b4:34:27:61:8e:8e:16:27:
         d3:75:77:c0:78:66:79:59:54:c4:d3:8e:34:24:c3:71:24:9e:
         58:b0:95:2e:13:a1:01:3f:8f:83:46:e1:63:49:aa:f4:fd:a8:
         07:ff:16:23:d7:47:ec:21:b7:30:c9:f3:bc:16:de:e8:3c:cd:
         d3:72:03:5b:40:a1:de:7e:78:25:8b:46:98:db:fa:08:34:9d:
         cd:37:3b:57:c8:21:ed:15:2d:9a:43:88:e7:6a:f3:68:07:76:
         87:e7:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:55:34 2026 by rpki-client