Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/A9F50C82B6D211F184098C525611F970.roa
File:                     A9F50C82B6D211F184098C525611F970.roa (raw, json)
Hash identifier:          yRROUNXNyavQcY90UulYP8WUarRI7OnSxkqJ0fft9Xk=
Subject key identifier:   AA:01:A9:A7:8D:B6:44:99:85:8B:11:09:F2:CB:F5:1B:71:09:90:91
Certificate issuer:       /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial:       073F
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/A9F50C82B6D211F184098C525611F970.roa
Signing time:             Tue 22 Sep 2026 22:12:14 +0000
ROA not before:           Tue 22 Sep 2026 22:12:14 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        203.10.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
                          rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
        Validity
            Not Before: Sep 22 22:12:14 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6ab2fd3d-a6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:8d:a2:c4:e2:86:3d:7e:ca:35:e5:ed:88:
                    c1:85:d3:fa:25:a0:b4:bb:a2:e8:91:be:bd:ba:ad:
                    c2:ea:01:63:b5:27:ac:57:a9:b4:56:35:6c:b7:65:
                    e7:5b:5f:82:58:12:b0:83:23:8c:3a:b2:aa:22:d7:
                    07:88:a9:95:3a:e4:dd:6e:46:36:40:0d:8c:cb:69:
                    e4:50:6b:f0:c5:f1:5e:df:82:e0:68:bb:3b:5f:b9:
                    2a:ee:3f:a6:98:64:a6:79:17:de:81:7e:fd:ca:21:
                    a9:e3:cf:72:b1:d0:ae:2e:75:98:34:78:d9:c0:af:
                    99:38:89:8f:26:fd:72:07:d6:41:dc:60:84:68:d0:
                    c1:e4:f0:05:cf:c1:27:c9:c6:28:47:e7:6e:22:22:
                    5d:45:8f:4c:10:5f:c4:62:57:03:9d:9a:16:21:29:
                    41:64:99:91:7f:e5:f7:0e:76:6a:76:c4:b4:71:3c:
                    68:37:68:13:f5:8c:98:c7:85:e7:41:94:94:8c:3e:
                    4c:9d:ba:db:74:3a:cc:35:db:c8:f9:d0:89:2e:96:
                    37:ea:91:20:af:f4:9c:d2:cc:13:04:76:bf:a8:3b:
                    72:ba:6d:d0:72:54:d4:1f:71:74:7f:a0:18:c0:ea:
                    f4:a3:38:a9:13:e1:ee:3f:71:d0:89:dd:f0:cf:d7:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:01:A9:A7:8D:B6:44:99:85:8B:11:09:F2:CB:F5:1B:71:09:90:91
            X509v3 Authority Key Identifier:
                keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/A9F50C82B6D211F184098C525611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:63:3a:f7:eb:84:14:d2:a9:7f:05:dc:23:24:60:c5:ce:
         33:61:80:1a:81:e5:52:66:36:e4:29:a9:a4:6c:a3:96:58:b6:
         76:e0:3d:ad:d7:a8:87:3c:72:4d:29:78:b1:ec:54:e0:5b:e7:
         01:4d:55:b8:e4:84:10:a4:b2:0a:a8:da:04:ea:7c:9a:d0:85:
         6c:32:08:ea:43:0e:81:01:11:e9:8f:e5:d2:63:d8:9d:f2:07:
         0a:b2:0e:68:37:d8:19:68:3e:68:c8:ec:ae:32:52:5f:c0:98:
         ac:3b:01:2e:44:b9:f5:10:b8:7f:78:44:42:54:2c:cb:aa:21:
         e4:e5:61:12:a3:d1:1f:4c:00:9d:c1:f0:d0:c3:61:8a:a4:4a:
         2e:37:45:ee:8b:df:c7:6e:a1:5c:26:6a:1e:f8:a9:ae:bc:9d:
         b9:dc:05:2d:78:9e:8f:76:ab:f5:e6:ec:ca:12:25:30:ef:d6:
         51:e1:74:24:9a:d4:67:b5:1b:e9:2d:11:0d:c8:00:e9:e0:c2:
         94:b0:55:5b:c8:14:a4:b1:ee:f1:0d:d1:de:c4:92:a0:73:9a:
         d7:cb:43:20:31:f4:5f:26:33:47:30:bd:c3:fa:73:45:8f:54:
         76:7a:d3:6a:c7:1b:4a:c7:e9:96:19:ae:ba:13:3f:ee:84:14:
         64:1d:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:06:49 2026 by rpki-client