Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/B983A684E01811ED8385DA62C4F9AE02.roa
File:                     B983A684E01811ED8385DA62C4F9AE02.roa (raw, json)
Hash identifier:          svMZS7DV5TwUD82GBLvLWWlNJprDspcc73VDjKYI3GY=
Subject key identifier:   2E:74:33:A8:B2:61:48:7C:C9:93:5C:DA:4E:F7:21:5A:49:B0:54:AF
Certificate issuer:       /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
Certificate serial:       027A
Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/B983A684E01811ED8385DA62C4F9AE02.roa
Signing time:             Fri 21 Aug 2026 02:52:25 +0000
ROA not before:           Fri 21 Aug 2026 02:52:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     24437
IP address blocks:        203.24.97.0/24 maxlen: 24
                          2405:3c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl
                          rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 02:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
        Validity
            Not Before: Aug 21 02:52:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a87bd69-2147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:ef:a1:94:23:ea:2f:6a:0f:c0:80:41:0f:
                    b2:94:0b:31:e4:d8:0e:63:18:75:63:70:86:d8:0b:
                    11:e3:dc:ec:25:b9:93:ca:f2:d9:5f:b8:33:5a:01:
                    bb:91:a6:63:a4:87:21:33:e2:72:d1:bf:9f:2f:c2:
                    42:8a:69:28:2c:9f:83:b4:58:91:52:93:0a:7c:fc:
                    c8:07:b7:ac:c9:2b:6e:97:88:3d:2c:14:13:20:c5:
                    c4:72:25:97:27:bb:3a:a7:39:d9:bf:9c:6c:77:9a:
                    e3:ec:5e:e7:31:f7:8f:78:78:ff:79:72:f9:b6:3f:
                    18:f5:a7:88:36:7b:f3:c3:6d:59:55:cc:a5:fa:ca:
                    2d:43:bb:97:eb:35:8b:b2:da:00:06:bf:a5:e4:0d:
                    2a:c0:0f:66:2d:44:36:9c:9c:20:55:32:55:05:7d:
                    c2:32:50:51:cb:bc:0d:f9:a7:a6:bb:50:9b:2f:ea:
                    e7:d8:06:77:b0:85:c2:7e:5f:ab:86:b5:a1:d4:35:
                    21:51:7d:52:c9:f5:2b:c1:c4:b2:96:b0:f6:36:12:
                    fc:98:bd:0f:e3:a8:3b:30:4c:1f:3f:7a:fb:06:31:
                    4e:30:8c:32:db:66:8a:95:5c:f4:b0:8e:fd:af:34:
                    d6:8f:5d:61:22:9d:7e:f2:0f:04:d4:23:9b:70:ef:
                    d1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:74:33:A8:B2:61:48:7C:C9:93:5C:DA:4E:F7:21:5A:49:B0:54:AF
            X509v3 Authority Key Identifier:
                keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/B983A684E01811ED8385DA62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.97.0/24
                IPv6:
                  2405:3c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:e9:86:e2:b1:2b:05:76:83:55:3e:08:82:bc:0a:21:8d:eb:
         f1:41:06:1d:89:19:a2:aa:24:77:ba:ab:95:53:94:4b:86:5e:
         f9:a7:a5:aa:f0:f8:49:7b:7a:35:f4:cf:11:70:59:0d:ac:ff:
         1a:1d:cb:ef:b6:94:51:cc:89:b9:d0:b0:ab:8b:32:87:2f:d0:
         4e:21:c4:28:5d:83:17:1c:2b:b5:be:4d:d1:3e:22:1d:be:14:
         2f:ad:4e:23:cb:66:bd:f9:9f:ac:79:41:e5:ef:c9:13:4e:27:
         f8:5f:99:0c:27:c2:28:a8:98:0a:3c:87:6d:f8:11:a2:d1:1d:
         d6:76:9f:9c:73:ed:cc:58:bc:f9:ed:61:ff:0a:d7:a0:66:53:
         86:56:dd:bb:c9:1e:22:ab:3b:72:0f:5f:f3:38:8c:ec:e6:5b:
         ec:e3:73:4d:eb:a7:35:3f:b2:76:98:e5:59:d3:46:3e:da:e0:
         69:17:b5:75:95:85:34:64:fb:45:5d:b5:f1:90:1c:e5:dc:f5:
         0a:ba:88:63:2b:28:85:20:9f:6e:67:f7:8c:ba:04:50:97:da:
         1d:d7:42:7e:63:ae:5c:fa:da:8a:93:c4:52:4e:2a:c5:e6:3d:
         eb:50:52:52:5e:04:e4:38:75:66:55:8c:77:d0:9d:a2:33:35:
         14:c2:2e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:40:48 2026 by rpki-client