Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/B95648BA062211F09E5D020EC4F9AE02.roa
File:                     B95648BA062211F09E5D020EC4F9AE02.roa (raw, json)
Hash identifier:          eMBHsGjYnvCSYyoYwGBHheXVbS5KYOBtM92AOihfg7k=
Subject key identifier:   22:B5:D3:56:72:A9:39:9E:B2:90:F5:40:81:4D:28:84:85:6B:5C:DD
Certificate issuer:       /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Certificate serial:       0666
Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/B95648BA062211F09E5D020EC4F9AE02.roa
Signing time:             Wed 22 Apr 2026 23:28:46 +0000
ROA not before:           Wed 22 Apr 2026 23:28:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4820
IP address blocks:        203.3.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
                          rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9EE, serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
        Validity
            Not Before: Apr 22 23:28:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e959ae-725b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:78:6d:d8:77:55:ce:20:fc:03:aa:9e:26:
                    22:08:dd:ec:31:c0:9a:92:63:1c:69:49:f6:37:36:
                    47:70:2c:88:bd:3d:85:cc:80:d4:fb:f7:7d:8e:08:
                    6f:2f:53:61:ca:01:5b:f2:65:d6:65:c6:8c:aa:d6:
                    de:63:e7:20:78:4f:0f:67:58:fa:bb:35:66:b1:d0:
                    0c:34:5b:56:f0:94:1d:d7:f1:2c:85:d2:eb:e0:88:
                    f1:db:2d:43:1f:95:7b:f1:4f:34:0e:ce:74:e8:8e:
                    b5:00:71:a4:14:36:9a:df:a6:e6:2f:46:be:29:46:
                    f8:94:53:43:4c:25:01:41:f4:98:94:f5:f2:28:4a:
                    77:33:74:f6:56:42:59:72:5d:ca:1a:2a:bb:13:22:
                    8c:45:68:e9:22:04:e9:e3:a2:06:14:92:29:8d:cc:
                    e0:8c:c5:b7:a1:3d:21:bb:79:0e:ee:d2:cd:92:9f:
                    93:5d:db:28:f3:ba:ae:53:20:a3:56:f4:ff:4d:ad:
                    1d:a1:88:45:4c:56:99:3e:3b:45:6a:74:0d:59:cb:
                    74:84:02:a3:d7:0d:ec:a5:99:e8:44:35:41:00:20:
                    3a:11:73:dc:3f:c7:76:d9:d7:9c:b4:c7:33:83:87:
                    97:87:95:38:86:23:3c:71:f4:76:ec:16:43:d2:07:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B5:D3:56:72:A9:39:9E:B2:90:F5:40:81:4D:28:84:85:6B:5C:DD
            X509v3 Authority Key Identifier:
                keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/B95648BA062211F09E5D020EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.3.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:11:c6:62:f2:97:42:a9:7a:d0:79:1a:66:c6:e2:c3:b9:0b:
         4c:df:db:00:24:2a:94:56:93:0e:38:d7:ec:df:03:75:ce:6d:
         84:eb:fe:c5:30:a4:19:a7:51:9f:27:d5:3a:dc:86:da:c1:58:
         72:75:2d:c1:25:9c:c2:2e:06:71:7b:36:b9:6e:93:a8:15:9f:
         1f:5d:e4:72:64:86:dd:5f:03:11:fe:6c:5f:db:51:15:64:eb:
         4b:27:7f:7c:d9:c6:0a:ad:f0:34:5f:a1:84:3a:2c:55:ed:e3:
         ac:39:a8:da:9f:c7:df:44:8f:94:c6:80:4d:d0:d1:8c:e3:9e:
         76:31:d2:ea:1f:e7:fc:39:dc:9e:d7:ad:8c:e8:e9:a7:aa:6a:
         e2:04:7f:d2:6d:1f:c4:74:5d:46:85:b9:6f:bd:5e:00:45:1a:
         91:49:20:17:7e:2b:2c:17:fe:3b:f7:a4:be:1f:69:c6:f4:03:
         d1:91:45:ef:63:d9:74:de:44:aa:e9:b2:fb:f3:f5:a2:df:b5:
         75:78:9f:c3:c1:a6:f0:de:34:f1:33:44:b1:94:3b:04:79:eb:
         70:29:24:d7:92:89:20:b8:cb:6c:22:ea:62:f0:a0:34:e8:3a:
         e3:70:9c:57:f2:32:60:3d:67:83:bf:ae:f0:bf:9a:1e:09:79:
         90:37:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:34 2026 by rpki-client