Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/5F0ACC76962011F09F73D036C4F9AE02.roa
File:                     5F0ACC76962011F09F73D036C4F9AE02.roa (raw, json)
Hash identifier:          zxI7VE3eg0TasmD62sh1djQSdFuNkWLF/C/+dkz7utI=
Subject key identifier:   6D:D9:E7:87:54:62:A1:36:82:B8:33:31:63:15:68:78:E6:5D:1A:92
Certificate issuer:       /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Certificate serial:       0272
Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/5F0ACC76962011F09F73D036C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 02:35:32 +0000
ROA not before:           Tue 03 Mar 2026 02:35:32 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9382
IP address blocks:        203.24.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
                          rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
        Validity
            Not Before: Mar  3 02:35:32 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a648f4-2780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:cf:2a:69:7e:55:1d:ab:81:66:21:c9:d6:
                    a8:9b:57:69:f3:94:d4:04:3f:db:d6:32:c0:c3:31:
                    98:5d:66:42:7a:f5:07:c5:a6:fa:87:67:a0:97:62:
                    7c:5e:a6:af:e3:26:63:0d:d7:68:fa:a6:f3:97:3d:
                    04:10:90:94:72:19:21:4a:da:65:39:bc:26:9b:94:
                    c8:76:32:af:d3:75:11:92:7b:e5:af:99:41:74:30:
                    fa:6f:ec:f4:6b:e4:d3:5d:67:6f:5c:10:25:94:d9:
                    54:71:c3:7c:31:c4:65:a6:b7:60:d3:d2:16:8d:21:
                    76:b0:e4:6d:57:ef:c9:ab:09:c9:2a:06:4f:3c:0b:
                    f3:f7:1f:2b:99:e6:fd:9b:9c:59:7b:74:c9:7b:5f:
                    92:1e:ae:f2:fe:f1:2e:de:87:39:b8:56:a1:c4:62:
                    e0:59:5c:a9:d4:4a:7b:19:65:e1:3f:5c:8e:72:e1:
                    64:43:57:ec:81:a6:64:42:48:c9:19:69:4c:d8:aa:
                    1a:87:af:29:12:84:29:4b:f9:bd:40:a1:02:f5:87:
                    c5:9c:1c:9e:48:71:91:7c:30:a4:c8:3d:40:6e:f2:
                    9f:cf:63:25:49:11:4e:3d:a4:c0:ba:49:cc:84:bf:
                    f4:71:1b:5c:ff:e0:c1:24:4f:22:ba:c3:a5:da:a9:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:E7:87:54:62:A1:36:82:B8:33:31:63:15:68:78:E6:5D:1A:92
            X509v3 Authority Key Identifier:
                keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/5F0ACC76962011F09F73D036C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:65:44:6b:30:6d:0b:e0:5d:43:98:b9:ba:36:a5:05:94:fd:
         3b:0c:d1:a7:15:3a:2f:68:51:cb:4b:f4:c0:5c:df:2b:48:ce:
         89:be:cc:9c:91:71:27:7c:bd:ec:f3:59:b6:48:c8:99:c6:87:
         c7:c7:61:10:23:9b:19:e4:8a:ec:29:32:09:af:fe:94:d5:71:
         4a:bb:67:a3:c6:ee:19:9d:aa:27:1a:ee:67:e4:74:75:bd:79:
         c0:20:33:8f:44:bb:15:d7:30:3f:70:29:09:15:93:a4:66:e3:
         23:b2:c4:ad:17:a4:fd:7d:5f:7c:b2:68:7a:c0:da:4c:05:87:
         f8:c6:e8:0f:ef:b6:8e:88:48:77:c7:99:a8:b5:3d:c6:74:99:
         9c:5d:5b:bb:9d:bd:67:a0:a8:b8:33:b8:f5:e3:f1:84:1b:98:
         c2:d2:f6:5f:ce:b9:3f:44:0f:ed:a1:04:f6:fa:f0:f0:fe:50:
         a6:50:e2:b4:77:69:01:b0:65:50:57:f0:58:5b:1f:59:f5:c1:
         68:c7:a5:65:46:6e:20:a5:9c:b8:38:23:18:d5:9e:59:a5:1f:
         4c:b0:a0:9f:a7:e4:51:e1:0b:ee:8f:3a:a0:71:79:82:84:74:
         dc:6f:43:ca:0c:f6:f7:06:3e:61:1e:c9:1d:70:56:76:0f:3c:
         55:de:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:40 2026 by rpki-client