Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/873C98E0DE5911ED826BDB39C4F9AE02.roa
File:                     873C98E0DE5911ED826BDB39C4F9AE02.roa (raw, json)
Hash identifier:          2nCCBmzmG2InvvOtDCmpe4jEwoKwgbej2xels7IW/q4=
Subject key identifier:   0D:9C:DF:2E:4F:BC:B4:BD:D4:C0:AD:30:4A:19:0C:1B:1A:D8:15:AD
Certificate issuer:       /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial:       0359
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/873C98E0DE5911ED826BDB39C4F9AE02.roa
Signing time:             Sun 15 Mar 2026 00:34:21 +0000
ROA not before:           Sun 15 Mar 2026 00:34:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        203.201.18.0/24 maxlen: 24
                          203.201.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
                          rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
        Validity
            Not Before: Mar 15 00:34:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b5fe8d-fc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b0:f5:7a:7e:99:08:5b:f8:bb:1b:4c:b5:bf:
                    0d:11:bf:3e:d2:e1:35:86:a3:c2:19:e2:b2:b7:b5:
                    92:48:a4:25:0a:3a:4e:6a:d3:a7:49:5f:c8:7e:73:
                    63:64:4c:c6:20:4c:1f:e1:33:03:0c:42:1f:bc:54:
                    ff:7c:cc:b2:f3:cb:4b:2c:5b:b1:8d:c7:e7:b3:3d:
                    15:34:3e:67:f9:6a:fa:5e:c1:e0:c1:2b:ae:9d:17:
                    a3:41:ad:48:8e:98:78:6a:4a:83:41:48:31:d9:5f:
                    bb:45:c5:60:7e:06:23:7f:c0:f7:2f:06:c9:49:13:
                    87:8e:d9:04:d0:cb:7b:d9:43:6e:64:c2:03:be:a0:
                    44:ca:18:05:67:dc:ad:a8:b5:5e:59:05:c9:f0:99:
                    ab:e0:90:b1:71:cb:c4:36:2c:d8:af:c2:49:d4:dc:
                    41:da:78:fd:a5:39:83:92:70:fa:b0:3b:a3:c8:20:
                    4c:fa:cb:0c:73:8b:4b:a6:a1:41:f1:b6:c6:8e:c3:
                    76:ed:8f:29:cc:da:5e:b8:da:32:5e:6c:0b:cc:02:
                    91:8d:1e:b1:18:35:9a:7a:5c:cb:44:e6:a8:39:bc:
                    cb:6a:3a:d6:a4:24:e8:8d:7e:34:2b:7d:96:62:33:
                    bb:d4:f5:42:11:9e:98:e6:5b:2c:80:fd:53:ae:12:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9C:DF:2E:4F:BC:B4:BD:D4:C0:AD:30:4A:19:0C:1B:1A:D8:15:AD
            X509v3 Authority Key Identifier:
                keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/873C98E0DE5911ED826BDB39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.18.0/24
                  203.201.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:71:9b:4d:6e:e2:cd:51:d1:46:29:6e:77:1a:df:9e:1e:3d:
         03:40:65:ee:ef:74:12:c0:ff:38:84:b0:e4:9c:ed:03:b2:37:
         90:42:e3:cc:6d:b7:94:4b:20:79:91:88:d9:4c:ba:3e:a5:15:
         4a:00:a2:d0:b9:42:ca:22:24:06:3a:12:08:d8:20:69:83:af:
         60:04:1c:bc:2c:16:36:6b:27:05:68:09:01:6d:24:b5:35:c8:
         8d:2c:6c:c2:8b:b8:42:d7:22:cf:fe:d4:fa:57:b4:e9:cb:3f:
         97:e6:3f:f1:46:c7:af:f4:fe:c4:be:22:81:fd:65:a6:ab:d7:
         99:e6:0c:06:6f:72:73:9c:be:c2:88:6c:b2:11:d1:65:15:4b:
         23:83:cf:0d:8e:39:28:78:58:c5:4e:e7:00:db:ab:88:fa:d4:
         3d:dd:f4:ff:a7:66:16:1a:58:46:0c:e8:44:de:29:19:09:cd:
         5c:52:db:be:b0:60:09:10:32:a6:ac:79:81:b2:7e:f0:0b:f7:
         99:eb:1d:d4:88:0c:52:8e:f0:62:0d:e2:7b:15:d6:87:88:a2:
         e8:f5:5e:3f:0e:2c:01:92:84:02:57:18:99:49:38:2f:1a:7b:
         ef:ea:69:32:04:47:b7:85:11:0f:d4:48:1e:b5:4f:67:05:b9:
         0b:71:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:23 2026 by rpki-client