Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/79FCD514862B11F19F545A5A85A30FBC.roa
File:                     79FCD514862B11F19F545A5A85A30FBC.roa (raw, json)
Hash identifier:          0lUhr9E0+OD/ipp8YwvzpZUPTlZiljm7z4wnu4JJie8=
Subject key identifier:   CA:38:C5:DC:AB:37:17:F5:5F:AA:69:F6:97:86:B6:8D:78:F6:E7:79
Certificate issuer:       /CN=A9181C22/serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
Certificate serial:       07
Authority key identifier: CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/79FCD514862B11F19F545A5A85A30FBC.roa
Signing time:             Thu 23 Jul 2026 00:14:32 +0000
ROA not before:           Thu 23 Jul 2026 00:14:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9268
IP address blocks:        203.17.73.0/24 maxlen: 24
                          203.18.19.0/24 maxlen: 24
                          203.26.36.0/24 maxlen: 24
                          203.57.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl
                          rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C22, serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
        Validity
            Not Before: Jul 23 00:14:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a615ce7-2732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:e0:7c:75:15:dc:cf:b1:9b:0a:fa:f1:19:
                    3b:e4:59:a6:5b:88:b2:1f:fd:56:92:4c:99:76:8b:
                    3c:c6:37:4e:30:52:83:e4:0b:21:27:ba:30:bf:6f:
                    d9:ff:f4:80:51:0f:7d:d7:bd:c7:7b:cc:d2:32:fc:
                    dd:33:9e:53:bf:b1:f4:39:31:9a:af:f6:64:d4:df:
                    ff:4c:8c:48:21:2f:a7:d1:63:e9:2f:fd:ed:49:50:
                    6a:0d:6b:6d:41:76:89:83:36:fe:5c:76:46:7a:c6:
                    e9:2d:d7:32:39:c0:1b:42:ef:10:7e:c5:0c:1c:b2:
                    0a:c8:4f:a5:3d:af:50:94:7c:4a:ba:57:f3:a8:5b:
                    97:56:26:24:ec:42:ed:65:b7:9d:93:db:3f:af:2c:
                    ff:2a:ee:2a:ed:6a:4e:ee:71:ed:88:7a:41:46:47:
                    c5:6f:e1:cb:a8:d4:f7:d4:2c:f6:49:b2:89:e7:33:
                    71:a6:2d:68:1f:11:48:d5:8b:f1:32:8b:54:7e:9e:
                    0b:91:d1:48:c2:d6:06:46:00:08:09:04:a3:91:f6:
                    eb:ab:c5:c9:f8:db:1d:82:f5:72:7e:4d:ec:3b:ac:
                    7c:a4:39:bd:0f:5c:6e:56:eb:f2:db:1a:9b:20:a2:
                    fd:50:da:65:3c:61:01:15:36:c6:ef:09:96:c7:4d:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:38:C5:DC:AB:37:17:F5:5F:AA:69:F6:97:86:B6:8D:78:F6:E7:79
            X509v3 Authority Key Identifier:
                keyid:CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/79FCD514862B11F19F545A5A85A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.73.0/24
                  203.18.19.0/24
                  203.26.36.0/24
                  203.57.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:48:bc:a9:d3:f8:dc:05:45:cc:d3:21:42:45:dd:82:5a:2d:
         18:64:16:73:72:e0:5f:3e:db:00:a3:36:0d:d4:8f:9e:a0:00:
         f7:ec:63:20:44:2c:76:c7:dd:16:db:4a:4b:c9:e4:08:85:76:
         1f:d9:5a:07:5b:99:d1:29:0c:c1:9d:9c:7b:77:1d:80:09:05:
         d9:b9:bf:b3:7e:76:17:34:f4:4a:06:95:51:c7:3c:3e:22:ff:
         e0:51:62:93:cd:65:44:10:53:e7:b9:97:5f:ff:e3:41:3a:13:
         c5:81:80:2f:7f:66:06:fa:05:8c:d0:55:fc:a6:cb:1a:db:6a:
         2f:c0:19:f2:69:e8:2d:47:cf:a8:de:29:ff:ee:49:78:76:ce:
         07:07:15:f7:c7:74:64:cc:55:34:70:4b:16:8e:b3:80:e5:d4:
         48:59:69:22:5b:2d:e6:3a:1f:5e:77:e9:fa:d0:5b:1f:31:ff:
         0c:1d:5b:21:2b:2f:de:c3:29:a7:eb:cd:0f:c0:92:5e:41:1c:
         12:a8:ad:fd:45:00:ae:f7:9e:35:1d:79:d4:4b:66:75:cd:46:
         51:f8:50:88:8f:e4:b5:10:e9:68:b9:81:d8:ed:ad:6d:bb:75:
         6e:16:4c:bf:28:7e:16:ae:44:88:ff:d2:76:07:87:4e:27:9c:
         ca:c9:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:45 2026 by rpki-client