Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/C00714349B8411F18334ED1A4411F970.roa
File:                     C00714349B8411F18334ED1A4411F970.roa (raw, json)
Hash identifier:          WvayS8kOXeERf8gs4145wljiF/5B9WMa83/H0yClaxA=
Subject key identifier:   3A:53:EC:14:93:F4:D4:AA:DE:60:04:D2:1C:A8:26:CE:71:B2:F2:55
Certificate issuer:       /CN=A919AF98/serialNumber=04D0F84B1AB6E31319B033BECBC05345FECFF049
Certificate serial:       09
Authority key identifier: 04:D0:F8:4B:1A:B6:E3:13:19:B0:33:BE:CB:C0:53:45:FE:CF:F0:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/C00714349B8411F18334ED1A4411F970.roa
Signing time:             Tue 25 Aug 2026 11:30:53 +0000
ROA not before:           Tue 25 Aug 2026 11:30:53 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154850
IP address blocks:        163.52.52.0/23 maxlen: 24
                          203.55.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl
                          rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AF98, serialNumber=04D0F84B1AB6E31319B033BECBC05345FECFF049
        Validity
            Not Before: Aug 25 11:30:53 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a8d7ced-47ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:02:28:52:57:ef:42:32:b7:9c:b9:9f:c7:
                    23:e5:ba:a9:5c:3e:02:94:cd:a7:ba:7e:ae:68:3b:
                    bd:04:ce:8f:2b:3d:ab:ca:21:d1:60:22:eb:e7:54:
                    90:2f:42:50:cd:ee:19:80:81:0e:42:a2:e8:ed:df:
                    b4:b6:34:6b:ff:f6:3f:25:db:0e:0d:06:c7:81:64:
                    b1:c1:30:14:8d:0f:69:69:38:c9:bc:22:54:55:6c:
                    3f:45:a4:25:6d:5d:64:ad:df:e7:cf:18:5d:98:fa:
                    4b:5b:41:27:8e:27:f2:07:9c:7a:f7:b4:e3:80:0f:
                    c4:d4:ba:60:be:d6:c7:4c:73:fd:2e:74:0f:67:11:
                    ae:91:48:d7:a6:8e:24:89:ff:59:21:8a:d0:a6:a2:
                    0b:26:a6:66:0c:6c:07:2d:46:78:54:72:9d:43:22:
                    80:84:fe:f2:f5:db:da:18:46:d8:da:b1:73:29:a6:
                    b4:12:18:e6:b3:d4:d3:af:4f:c6:b9:24:63:a2:f9:
                    0d:df:56:c2:14:e0:b6:18:82:c1:1e:08:29:29:10:
                    96:5e:9e:6d:3d:7d:cf:18:90:eb:11:6f:21:15:8b:
                    96:34:39:1f:5c:90:55:21:7d:51:02:0a:ab:05:0d:
                    92:f0:fd:2b:94:85:cb:98:5d:5a:73:f1:f2:85:5b:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:53:EC:14:93:F4:D4:AA:DE:60:04:D2:1C:A8:26:CE:71:B2:F2:55
            X509v3 Authority Key Identifier:
                keyid:04:D0:F8:4B:1A:B6:E3:13:19:B0:33:BE:CB:C0:53:45:FE:CF:F0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/C00714349B8411F18334ED1A4411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.52.0/23
                  203.55.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:79:8b:49:0c:e8:70:6a:e4:7b:7d:23:ad:97:a1:95:50:f9:
         05:7a:4f:74:83:22:6a:f4:c7:69:3c:29:1f:b2:99:76:72:8b:
         81:3e:e3:e1:d1:e9:8c:4d:e2:e8:43:5d:da:d5:e0:7a:e8:8e:
         13:64:05:b5:0b:ca:71:95:81:58:74:c3:62:ba:60:33:6e:cf:
         9f:a7:8d:82:ed:95:8b:3e:9e:46:3f:58:27:20:91:a1:91:f3:
         13:a6:6c:d1:53:1a:12:5f:30:9a:a5:1f:ca:cb:2e:2a:56:a6:
         17:ff:82:c9:ad:3f:50:cd:78:ac:4d:4b:bc:ef:68:5b:c6:f1:
         9d:66:7c:a2:be:03:5a:08:1f:de:67:87:66:d0:88:bb:f2:92:
         72:d7:ec:8c:5a:d2:c1:68:bd:57:a0:f7:02:4b:8a:14:2c:9a:
         ba:e7:02:78:9e:ac:d7:1b:3c:37:fb:82:0a:a1:99:f8:02:65:
         a9:a0:94:3d:50:ed:54:e9:81:71:7c:59:d5:0d:27:c7:ed:21:
         15:4c:7b:91:55:69:f8:b4:ec:04:2a:17:76:22:ae:ef:34:eb:
         d3:2d:aa:02:17:ea:8d:a4:ae:44:bf:6a:16:be:28:17:ad:fb:
         df:29:e5:fd:66:20:d1:0d:59:6a:25:2f:c8:91:2d:68:85:87:
         38:2c:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:35:20 2026 by rpki-client