Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/643F1F08B72F11ED85F55F23C4F9AE02.roa
File:                     643F1F08B72F11ED85F55F23C4F9AE02.roa (raw, json)
Hash identifier:          9aPuAfrv6U9JgTzd4m4UnxApaKEUV0ZT7nFSzZfe2yQ=
Subject key identifier:   5F:F4:5E:5F:AA:6C:1C:62:62:27:94:CE:83:F6:23:CE:9B:41:EE:02
Certificate issuer:       /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Certificate serial:       0291
Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/643F1F08B72F11ED85F55F23C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 03:30:03 +0000
ROA not before:           Thu 09 Jul 2026 03:30:03 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     18259
IP address blocks:        202.178.96.0/20 maxlen: 24
                          2401:4640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
                          rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
        Validity
            Not Before: Jul  9 03:30:03 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a4f15bb-2476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:be:1b:1e:5b:08:97:2b:e2:02:c4:44:d1:
                    8f:3c:01:25:a1:e1:b3:14:2c:9f:9d:a8:f6:37:c3:
                    bd:b8:59:d5:7e:4d:56:55:df:d1:63:cc:a8:69:a2:
                    f5:d3:b9:d4:1f:70:36:c4:fd:46:b9:5d:ec:6c:48:
                    62:7b:ed:75:69:e3:ac:4e:18:a5:34:bd:f1:c6:6b:
                    40:df:db:15:d7:84:19:d2:03:85:af:19:fc:8e:ee:
                    e2:cb:99:9b:a5:31:16:fb:5c:71:2d:d5:9d:f1:8e:
                    e4:93:5f:8c:85:3b:9e:69:6f:7d:11:02:7e:5c:ed:
                    5f:38:6a:bc:89:92:01:59:37:46:9c:fb:3e:38:8a:
                    28:25:fe:e8:c2:fb:90:6a:83:70:5b:5f:1c:1f:27:
                    b6:7e:75:36:c1:aa:6d:3c:54:26:a7:3e:11:fd:42:
                    5b:ec:26:c2:f4:59:d2:2d:f7:26:4d:91:70:23:45:
                    46:c7:15:f1:d7:d0:79:9b:ee:11:54:8b:37:e3:f0:
                    01:28:34:0f:2c:c6:e5:02:15:1f:12:88:de:c7:2f:
                    76:38:43:c8:b4:78:36:19:4a:66:d2:d9:23:35:7d:
                    6b:04:14:b1:df:7c:8a:aa:30:33:47:73:37:49:72:
                    10:bd:e2:ff:fe:74:4e:74:d8:3a:7c:65:d5:03:48:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F4:5E:5F:AA:6C:1C:62:62:27:94:CE:83:F6:23:CE:9B:41:EE:02
            X509v3 Authority Key Identifier:
                keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/643F1F08B72F11ED85F55F23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.178.96.0/20
                IPv6:
                  2401:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:43:35:03:16:c6:cf:09:7f:a9:6a:03:5a:d0:4e:4e:b9:88:
         b0:15:72:c2:f7:d4:df:ab:1a:ec:0d:87:c7:0b:23:03:89:89:
         ff:65:be:0b:bd:32:5c:fc:d6:cd:ed:4b:40:5c:dc:34:c0:5c:
         a5:95:aa:8c:fa:28:e7:aa:6f:4e:b4:e6:ae:a6:59:38:ac:fd:
         af:2f:23:7a:aa:54:17:66:55:4f:05:60:ee:41:ea:d9:d0:c6:
         0e:9c:c9:64:31:cb:3e:c6:bf:59:5b:95:74:05:52:a0:e8:d2:
         99:d3:cb:65:77:06:04:39:29:35:49:d6:60:7b:0f:77:e3:49:
         69:ad:6b:fb:3d:82:dd:fd:23:e1:f4:15:a6:12:5d:18:c9:9c:
         91:13:2c:19:4d:68:00:a4:a0:3e:38:42:1b:10:41:ae:72:43:
         7f:7d:b6:8f:cf:f2:35:27:01:9e:2f:ab:7d:0a:c5:1f:ea:77:
         95:f3:90:9b:ec:3e:29:91:c5:e2:9b:55:94:7b:80:a3:65:e3:
         c0:ad:71:17:47:42:b0:c6:d1:d7:3c:11:c6:34:97:b7:0b:be:
         c4:4b:a9:85:68:68:89:c0:f2:57:a6:9a:35:42:79:dc:ff:58:
         16:08:de:3a:44:3a:14:ca:e3:51:4c:31:58:86:41:40:46:b9:
         fc:e0:c7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:08 2026 by rpki-client