Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/974A6E0CE15611EC9E14513DC4F9AE02.roa
File:                     974A6E0CE15611EC9E14513DC4F9AE02.roa (raw, json)
Hash identifier:          eHMo6/uG2FXWAnFP18UI+4BwrcIGnjQ2JZEqfctNLL0=
Subject key identifier:   6D:F4:B1:29:8F:60:05:B5:13:C0:A9:75:58:22:7A:85:3D:F9:7A:23
Certificate issuer:       /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Certificate serial:       0643
Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/974A6E0CE15611EC9E14513DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:37:44 +0000
ROA not before:           Tue 06 May 2025 23:32:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38438
IP address blocks:        203.3.184.0/24 maxlen: 24
                          203.3.185.0/24 maxlen: 24
                          203.55.208.0/24 maxlen: 24
                          203.55.210.0/24 maxlen: 24
                          203.55.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
                          rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9EE, serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
        Validity
            Not Before: May  6 23:32:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a43318-0672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:6c:bc:8a:34:f8:7a:d4:7b:f1:1a:08:94:
                    b6:b3:8b:30:d7:83:3b:51:77:0c:dd:1d:44:81:78:
                    a9:03:e8:64:e4:d3:1f:62:aa:18:e1:5d:97:7b:df:
                    7b:35:c6:e1:80:f6:36:76:90:ba:a9:cf:03:a3:6a:
                    24:80:5d:30:06:44:dc:3f:b3:7e:62:78:b2:fd:8a:
                    cb:e7:cb:33:c6:b7:c3:61:67:36:0b:44:24:f5:b3:
                    d7:72:b6:de:43:94:80:9e:0b:4f:fc:b5:5a:d2:e6:
                    4e:3d:c9:0e:46:d3:8c:6e:6d:57:8f:21:06:32:0c:
                    48:d1:69:d5:74:55:86:11:a6:3b:f5:4c:48:42:8c:
                    70:7e:e2:49:96:04:30:77:c2:8b:86:65:e7:48:d1:
                    c9:46:c2:cf:a7:22:bd:4e:70:75:86:8f:45:a0:99:
                    c2:af:c8:dc:ea:9b:15:77:cc:42:b0:8a:04:0f:88:
                    87:81:47:32:6f:09:ec:17:16:26:ad:71:a8:4b:04:
                    94:86:57:67:13:ab:6f:ad:ce:ea:09:66:8e:1e:4b:
                    b7:3d:be:21:d6:27:43:36:a9:3c:2a:2f:12:b6:5e:
                    6a:69:09:5e:27:c0:c7:98:b5:8f:09:1b:5f:b9:9c:
                    c0:fb:84:e0:90:0a:6d:11:88:f3:9f:61:cb:1a:88:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F4:B1:29:8F:60:05:B5:13:C0:A9:75:58:22:7A:85:3D:F9:7A:23
            X509v3 Authority Key Identifier:
                keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/974A6E0CE15611EC9E14513DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.3.184.0/23
                  203.55.208.0/24
                  203.55.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:5f:54:46:24:b8:24:f4:a8:15:50:44:12:0f:34:6a:46:62:
         94:cc:b5:b0:ef:f9:a7:b8:11:f5:b3:7a:93:8e:34:09:a3:eb:
         72:d5:e1:43:02:2d:09:68:95:01:12:84:c6:1a:34:eb:2c:d5:
         a6:9e:10:53:90:bd:73:d2:16:98:4a:ac:ee:c3:e0:f0:90:60:
         f0:2b:6e:0d:e3:52:a2:b1:83:fb:5e:1c:d4:33:56:79:6a:ac:
         c8:8e:c8:76:70:4c:87:59:1c:d9:1f:2b:10:89:57:d1:62:0b:
         3d:e2:46:5c:1b:82:6b:07:a9:ec:25:78:46:a2:b0:ad:8c:8d:
         91:83:a9:3f:63:7e:d6:d6:c8:55:bd:bc:ea:28:71:db:0b:76:
         5d:b7:16:be:43:48:d6:30:f6:0c:08:49:13:a5:ce:15:59:f6:
         de:11:ab:60:a5:1e:70:c3:b7:8f:24:84:ef:5d:93:d5:9c:06:
         34:25:e7:61:38:03:c2:ba:1c:f0:c2:80:7c:8c:43:02:f6:f5:
         bd:29:54:1e:39:47:b0:26:dc:19:51:17:6f:9e:37:c7:a8:7b:
         6f:52:b7:27:0c:54:7e:46:42:bb:de:e7:b7:37:a7:fe:86:4c:
         2a:8f:54:cb:7d:56:41:88:29:0f:19:6e:c7:6d:85:60:bc:d7:
         b9:ee:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:55 2026 by rpki-client