Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9BDF5D70366311EEB376DC3AC4F9AE02.roa
File:                     9BDF5D70366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          qfIgVPe/LxXZegiY3OPJ2qs6ZgHHnZ2Bm9mQCgyt9nk=
Subject key identifier:   0E:17:2A:5E:4C:2D:57:1B:D1:24:6A:02:1D:7F:29:9C:7A:63:28:F5
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       02BA
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9BDF5D70366311EEB376DC3AC4F9AE02.roa
Signing time:             Mon 22 Jun 2026 06:32:54 +0000
ROA not before:           Mon 22 Jun 2026 06:32:54 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45806
IP address blocks:        83.118.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 22 06:32:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a38d716-a4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:03:86:fa:2f:98:46:63:3b:f7:aa:a2:c3:4c:
                    13:bf:69:e4:0c:2a:1f:60:48:6c:10:26:c4:ca:ab:
                    8f:1b:ab:b6:7b:a8:63:3e:a3:09:d7:f1:c4:28:03:
                    60:a1:c3:00:c3:96:4e:40:b0:f8:83:c8:ba:2e:0e:
                    6e:fc:15:7f:e8:ac:13:22:4e:4a:71:82:8b:04:18:
                    56:ee:72:52:71:ef:a2:19:a0:dc:85:41:1b:1f:f3:
                    3b:93:37:47:6a:a9:c0:b5:e0:0b:73:40:35:61:e0:
                    f2:8c:7b:bc:90:4c:35:0b:24:1a:51:5c:f7:bc:f5:
                    a8:5e:3e:09:50:28:61:6f:20:d9:c1:35:eb:ba:54:
                    11:af:cf:5d:ed:38:e6:1e:25:4c:91:64:a6:0a:b2:
                    a8:17:21:54:ec:72:a1:9a:06:bc:05:13:b2:75:ac:
                    5e:f7:b1:1d:1d:86:78:e6:fa:64:0a:ac:2e:84:22:
                    b4:8b:51:f8:6c:78:b2:99:5a:db:00:8b:ca:ab:58:
                    45:11:ad:72:a1:8d:b5:01:8d:b5:b0:29:72:10:dd:
                    4d:24:10:e1:1d:75:8a:b2:35:f5:53:10:37:36:b9:
                    15:36:90:b3:c7:1e:60:85:d7:46:61:c3:7c:64:69:
                    2e:8d:e3:4c:67:2b:7e:5c:e2:32:1a:26:18:69:9b:
                    a1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:17:2A:5E:4C:2D:57:1B:D1:24:6A:02:1D:7F:29:9C:7A:63:28:F5
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9BDF5D70366311EEB376DC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4f:32:fd:d0:3c:06:59:b7:da:a1:c7:5f:30:82:26:30:db:
         a5:12:41:23:42:e0:93:85:91:ca:d4:10:c2:97:2d:52:56:27:
         c3:0c:cd:3f:65:1e:b4:48:1b:dd:fe:58:9d:74:d8:4f:e3:29:
         fa:b5:1e:8b:fb:32:4d:d3:25:16:61:96:94:d4:9f:7d:e7:d7:
         32:b7:28:50:7a:41:af:1c:69:c7:a5:d6:d7:1a:80:d1:7d:3d:
         12:97:de:5e:e9:d8:24:7f:c8:67:46:1f:5b:60:13:4f:76:33:
         39:b3:fa:4a:81:1b:b1:63:33:af:53:c5:b6:6f:eb:ac:82:e0:
         95:14:81:83:50:bf:cc:dd:39:a7:ea:22:b2:00:de:f8:b6:b9:
         f4:8c:78:e2:02:76:26:af:de:05:8f:38:3d:12:7c:41:39:fa:
         c5:0b:8e:10:ac:d0:55:68:41:64:58:81:f9:06:a8:e7:1f:3e:
         99:e9:d7:55:46:a3:82:cf:1e:c6:0c:59:6d:a7:f3:80:ac:75:
         a6:2f:22:b0:3f:2d:c4:6f:30:c4:75:09:fa:54:80:e3:b1:03:
         9a:ed:11:f4:60:f3:a0:6f:34:3d:aa:76:e4:ad:68:45:2d:e7:
         1f:03:b4:29:8c:e9:5f:6e:ac:99:71:b5:57:ee:cf:58:b6:a6:
         41:98:b7:83
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF
NEMzMkM5MzQwHhcNMjYwNjIyMDYzMjU0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM4ZDcxNi1hNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6QOG+i+YRmM796qiw0wTv2nkDCofYEhsECbEyquPG6u2e6hjPqMJ1/HEKANg
ocMAw5ZOQLD4g8i6Lg5u/BV/6KwTIk5KcYKLBBhW7nJSce+iGaDchUEbH/M7kzdH
aqnAteALc0A1YeDyjHu8kEw1CyQaUVz3vPWoXj4JUChhbyDZwTXrulQRr89d7Tjm
HiVMkWSmCrKoFyFU7HKhmga8BROydaxe97EdHYZ45vpkCqwuhCK0i1H4bHiymVrb
AIvKq1hFEa1yoY21AY21sClyEN1NJBDhHXWKsjX1UxA3NrkVNpCzxx5ghddGYcN8
ZGkujeNMZyt+XOIyGiYYaZuhOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA4XKl5M
LVcb0SRqAh1/KZx6Yyj1MB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNkRFM0NFN0MzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvOUJERjVENzAz
NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAU3ZhMA0GCSqGSIb3DQEBCwUAA4IBAQBmTzL90DwGWbfaocdfMIIm
MNulEkEjQuCThZHK1BDCly1SVifDDM0/ZR60SBvd/liddNhP4yn6tR6L+zJN0yUW
YZaU1J9959cytyhQekGvHGnHpdbXGoDRfT0Sl95e6dgkf8hnRh9bYBNPdjM5s/pK
gRuxYzOvU8W2b+usguCVFIGDUL/M3Tmn6iKyAN74trn0jHjiAnYmr94Fjzg9EnxB
OfrFC44QrNBVaEFkWIH5BqjnHz6Z6ddVRqOCzx7GDFltp/OArHWmLyKwPy3EbzDE
dQn6VIDjsQOa7RH0YPOgbzQ9qnbkrWhFLecfA7QpjOlfbqyZcbVX7s9YtqZBmLeD
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:45 2026 by rpki-client