Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4800F752477911F19E56FD3F95833773.roa
File:                     4800F752477911F19E56FD3F95833773.roa (raw, json)
Hash identifier:          qez/cx6tuHV5gAaxhcMUR0lT08Ll3czUeqFReo4sSpc=
Subject key identifier:   E8:EE:3B:DC:F7:F8:F2:F7:12:7E:43:0B:6A:A8:37:20:E8:1A:F2:5D
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       247D
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4800F752477911F19E56FD3F95833773.roa
Signing time:             Sun 16 Aug 2026 16:28:15 +0000
ROA not before:           Sun 16 Aug 2026 16:28:15 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     202595
IP address blocks:        203.82.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9341 (0x247d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Aug 16 16:28:15 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a81e51f-4e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:c4:b1:5f:52:42:bc:72:24:2e:79:58:70:
                    82:a3:38:00:f6:1c:59:65:55:2b:a4:f4:27:e3:26:
                    d6:20:f9:f9:b5:6d:af:3c:54:a2:2e:30:b0:ce:f9:
                    8d:56:80:59:46:0e:86:63:59:63:8a:96:26:a5:a9:
                    71:01:51:e7:e7:f0:48:ff:0e:2e:e9:c6:02:4d:0a:
                    ab:98:65:18:39:a9:3e:f4:47:43:ea:3d:4c:b2:ea:
                    aa:52:e2:bb:66:b7:21:ac:1c:19:ee:34:2e:cc:cf:
                    d0:8c:8d:4e:5d:22:b3:02:9a:46:d1:38:9c:6f:dc:
                    d3:42:27:b7:1c:2e:2d:bc:58:41:62:0a:d1:0f:4b:
                    14:bc:ef:ce:6a:fe:4a:35:02:c9:84:2c:1b:75:15:
                    e9:a5:54:7b:24:74:b3:90:ea:3b:1b:81:01:4a:9d:
                    6e:ff:3b:af:78:13:58:e3:0f:0f:b6:c6:4c:d6:98:
                    91:38:b0:41:8c:75:1c:d1:c7:1e:18:06:b8:d7:06:
                    3d:08:5d:89:af:8a:c8:41:b3:16:ac:6b:84:82:89:
                    bf:60:c7:ab:dd:fd:cd:40:1a:51:e7:13:a3:be:9d:
                    1f:87:b8:49:bd:0a:3c:79:75:e9:3c:65:15:4b:a0:
                    20:7a:22:ce:5f:03:d1:03:ae:c4:8f:fc:8b:d0:99:
                    4e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EE:3B:DC:F7:F8:F2:F7:12:7E:43:0B:6A:A8:37:20:E8:1A:F2:5D
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4800F752477911F19E56FD3F95833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.82.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:3e:a9:47:b1:3d:35:85:fb:44:3c:94:10:d1:98:70:ee:7f:
         6d:d6:d4:ab:f3:a0:c8:93:e7:c2:03:3f:63:68:bb:f1:0a:c8:
         7c:a0:6d:00:c6:cd:c6:3f:77:0b:b6:6e:53:66:65:43:a9:e1:
         28:57:4f:48:64:03:dc:f0:9c:4a:98:1a:b0:88:67:14:a4:c0:
         86:cf:84:c1:18:9a:77:51:f9:20:0e:30:dc:9d:40:8d:b8:c5:
         75:3e:8c:2d:a1:98:30:63:56:8a:3d:f0:8c:7d:65:df:44:af:
         cb:9c:15:03:f5:e1:b6:85:43:c6:02:58:47:d9:e0:22:91:7d:
         b8:13:4f:41:38:97:cf:da:80:a6:32:a5:59:f2:af:19:bd:27:
         5e:28:90:41:eb:b1:94:be:46:22:04:b5:38:6c:8c:ed:9a:de:
         7a:e9:57:be:86:32:5d:fd:f2:db:f4:e8:18:8d:81:cb:f2:4f:
         d4:f1:28:a7:0c:fa:96:f3:8d:b1:b9:0a:84:fd:bf:26:6a:c7:
         0c:c8:63:88:55:f0:82:83:35:50:78:64:ca:15:3d:5a:25:87:
         27:f5:de:8c:91:93:67:73:bd:0a:a0:1f:af:0f:60:7a:a4:98:
         06:8b:b9:17:3b:af:0b:e3:85:db:9d:3d:ab:02:e1:f7:88:85:
         0a:f2:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:17:32 2026 by rpki-client