Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/1DC7647CF8D811EEBBE6CE09C4F9AE02.roa
File:                     1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (raw, json)
Hash identifier:          COw7tUNwPISv5dQeBzExqSMEmpZ0xjjv8E9J/gmn/qU=
Subject key identifier:   EE:E4:47:8B:76:09:0F:AB:19:5C:49:E8:37:B4:49:E9:54:89:79:D5
Certificate issuer:       /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Certificate serial:       0189
Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/1DC7647CF8D811EEBBE6CE09C4F9AE02.roa
Signing time:             Mon 27 Apr 2026 04:38:22 +0000
ROA not before:           Mon 27 Apr 2026 04:38:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135337
IP address blocks:        203.134.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
                          rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F
        Validity
            Not Before: Apr 27 04:38:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69eee83e-efcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:a0:8c:4a:18:93:b0:c7:06:89:e9:a8:2e:
                    5d:a5:62:59:7d:36:a9:76:45:48:57:95:09:d0:eb:
                    50:3f:fa:29:24:d1:0b:f9:6e:9a:e3:84:cd:29:c8:
                    e6:1f:d3:79:2f:28:55:39:f4:0c:9c:a7:0e:b8:52:
                    b2:de:5d:d6:9b:9d:bb:4a:60:01:42:52:65:c9:31:
                    4a:7b:31:20:1f:00:de:14:9a:41:56:2f:70:41:15:
                    6c:24:62:a4:26:8c:dc:e8:47:65:76:1b:58:6a:b3:
                    76:14:89:db:3c:42:19:c4:76:a3:56:19:28:03:0c:
                    0e:e8:1b:a9:35:12:42:d5:ca:ef:47:a0:3b:0f:ce:
                    39:3a:4c:76:7b:49:df:53:ae:58:c2:02:69:16:ef:
                    e9:2d:37:b7:76:c0:01:07:6b:32:ec:cd:51:a3:a0:
                    e4:12:3c:fb:19:87:4e:9e:85:9a:d5:f4:b7:77:54:
                    6e:77:74:71:2e:27:44:45:e7:a3:1b:e8:29:d7:69:
                    6f:76:3e:fc:4f:57:e3:66:bd:64:2a:c1:c4:b7:ac:
                    d6:e4:b1:f0:d3:97:f9:95:cd:85:4c:04:ca:8b:b6:
                    54:f3:0f:70:83:d1:4d:43:48:39:92:a2:0a:7b:57:
                    59:5c:8c:b9:45:0d:1c:d8:16:98:04:81:07:c7:fe:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E4:47:8B:76:09:0F:AB:19:5C:49:E8:37:B4:49:E9:54:89:79:D5
            X509v3 Authority Key Identifier:
                keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/1DC7647CF8D811EEBBE6CE09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.134.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:23:e7:ba:42:93:e6:60:c7:a2:07:67:14:88:3c:d2:6d:
         31:fa:23:6c:66:3d:5b:11:0d:f0:94:73:6d:7e:fb:87:c5:23:
         b8:67:ea:cf:86:65:69:44:18:20:c3:79:ea:6f:2b:5f:f5:75:
         0a:b8:3f:99:f3:b4:1e:1e:c2:d1:8f:8c:63:08:ac:c1:36:e1:
         af:d4:fc:f7:5f:8b:4a:71:8f:9f:dd:b0:e1:7b:70:cf:93:a2:
         86:46:b9:df:13:45:77:63:73:9f:96:c9:f8:24:c2:7f:59:25:
         3a:c2:f2:8e:50:7a:48:99:1d:ee:71:6c:ab:f6:d3:1f:18:6b:
         3f:f6:80:55:c2:bd:18:81:a6:3f:9f:35:b4:5b:e3:b2:db:db:
         d3:cd:c1:59:6b:e9:0e:4c:9b:b2:0f:9c:6a:75:29:a4:0b:51:
         66:3c:77:ed:52:58:56:86:91:1a:e9:58:99:df:4f:05:dd:3d:
         9f:6d:13:1c:31:9e:96:54:11:7d:e9:17:33:5b:54:1e:67:22:
         ec:09:5c:03:16:82:a6:3d:83:9d:94:80:74:48:3e:91:74:a0:
         de:02:82:91:36:fc:6c:62:20:85:15:4a:dd:58:03:e5:ff:db:
         ad:88:d9:36:98:3b:29:b6:00:06:a5:cc:af:ce:4c:8a:62:ff:
         7a:d9:9c:71
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx
MTlEODIzMkYwHhcNMjYwNDI3MDQzODIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWVlZTgzZS1lZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnp+gjEoYk7DHBonpqC5dpWJZfTapdkVIV5UJ0OtQP/opJNEL+W6a44TNKcjm
H9N5LyhVOfQMnKcOuFKy3l3Wm527SmABQlJlyTFKezEgHwDeFJpBVi9wQRVsJGKk
Jozc6EdldhtYarN2FInbPEIZxHajVhkoAwwO6BupNRJC1crvR6A7D845Okx2e0nf
U65YwgJpFu/pLTe3dsABB2sy7M1Ro6DkEjz7GYdOnoWa1fS3d1Rud3RxLidEReej
G+gp12lvdj78T1fjZr1kKsHEt6zW5LHw05f5lc2FTATKi7ZU8w9wg9FNQ0g5kqIK
e1dZXIy5RQ0c2BaYBIEHx/7QhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO7kR4t2
CQ+rGVxJ6De0SelUiXnVMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4
QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzI4MkQvMEFDMjJBQzRGOEExMTFFRUIwREVGRTRGQzRGOUFFMDIvMURDNzY0N0NG
OEQ4MTFFRUJCRTZDRTA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBy4b6MA0GCSqGSIb3DQEBCwUAA4IBAQABrSPnukKT5mDHogdnFIg8
0m0x+iNsZj1bEQ3wlHNtfvuHxSO4Z+rPhmVpRBggw3nqbytf9XUKuD+Z87QeHsLR
j4xjCKzBNuGv1Pz3X4tKcY+f3bDhe3DPk6KGRrnfE0V3Y3Oflsn4JMJ/WSU6wvKO
UHpImR3ucWyr9tMfGGs/9oBVwr0YgaY/nzW0W+Oy29vTzcFZa+kOTJuyD5xqdSmk
C1FmPHftUlhWhpEa6ViZ308F3T2fbRMcMZ6WVBF96RczW1QeZyLsCVwDFoKmPYOd
lIB0SD6RdKDeAoKRNvxsYiCFFUrdWAPl/9utiNk2mDsptgAGpcyvzkyKYv962Zxx
-----END CERTIFICATE-----
Generated at Wed May 13 10:14:07 2026 by rpki-client