Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/4B7BB35ABBE011F1B1509A316A11F970.roa
File:                     4B7BB35ABBE011F1B1509A316A11F970.roa (raw, json)
Hash identifier:          mnmEjF7LvnYTy9lFX6jResY23dSEgpZJ0cqqaqIOAsw=
Subject key identifier:   CE:8E:4F:D7:6D:F1:8C:A2:18:1F:87:FF:74:C1:44:5D:E0:3A:CA:DC
Certificate issuer:       /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Certificate serial:       0552
Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/4B7BB35ABBE011F1B1509A316A11F970.roa
Signing time:             Tue 29 Sep 2026 08:32:24 +0000
ROA not before:           Tue 29 Sep 2026 08:32:24 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     400618
IP address blocks:        103.169.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362 (0x552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
        Validity
            Not Before: Sep 29 08:32:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abb7798-6285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:c1:25:5f:97:7f:a2:13:cc:97:7b:d3:12:
                    3c:de:b4:b2:9b:c5:5c:8f:7c:5a:a8:b9:17:98:78:
                    30:47:eb:08:62:05:5a:8e:6a:cc:e1:0d:41:0b:96:
                    ab:60:fd:1f:6f:2d:dd:4f:56:04:20:45:88:6e:9d:
                    42:02:2e:c7:30:7c:db:5d:b4:ae:9e:2e:16:f6:46:
                    0e:e3:da:ce:27:b8:7a:a7:77:da:44:92:2b:da:80:
                    c6:4a:32:e1:10:8c:ff:ef:50:d8:64:04:18:bb:43:
                    92:1c:8e:80:2a:b7:36:d5:29:b1:9c:02:7c:b3:94:
                    1f:60:e6:e6:0e:ba:b4:06:47:21:c2:5d:ab:e5:2f:
                    75:ee:9d:88:64:88:00:b0:83:c8:80:4b:b7:5d:74:
                    1e:8e:cd:01:de:67:99:ad:12:01:c2:43:c4:c6:c4:
                    f6:ea:70:9d:6c:f1:fc:58:c2:4f:db:4e:9d:f4:ae:
                    2c:9a:5d:6d:ab:49:9b:a8:0b:0c:8b:fe:98:0d:14:
                    36:64:9f:9d:06:fe:a4:d3:e9:00:4e:43:1d:4e:7f:
                    d5:b5:b1:33:8c:17:cb:f5:0a:74:1e:78:9c:1e:01:
                    5c:25:ae:a8:91:d4:66:17:33:ba:fd:96:23:9f:26:
                    69:87:52:1a:5e:ff:46:7c:f5:7c:db:61:84:fc:63:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8E:4F:D7:6D:F1:8C:A2:18:1F:87:FF:74:C1:44:5D:E0:3A:CA:DC
            X509v3 Authority Key Identifier:
                keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/4B7BB35ABBE011F1B1509A316A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:40:12:92:26:10:0a:cc:18:cc:d4:de:18:00:9b:bb:0b:24:
         70:c9:07:df:10:b1:4a:c2:20:ba:2f:ae:32:d6:7d:9e:1c:cd:
         57:6a:39:4d:46:5c:b2:f2:b9:70:0b:01:89:79:9b:24:b5:96:
         a8:98:d7:85:b1:84:ef:0d:1a:18:c6:5e:53:65:25:fb:f9:7b:
         8a:92:80:ba:1f:23:2e:1e:a3:6c:03:40:1a:b0:03:b8:28:c9:
         c8:5f:b5:cc:52:bb:e3:1a:72:08:d6:ba:e3:c1:8d:5f:c3:ef:
         94:5e:b8:92:30:d3:0e:d0:a3:19:10:80:3a:2c:8d:bb:28:13:
         1c:6c:25:88:93:20:8c:ff:ab:63:61:c0:d7:2d:b0:93:b3:8c:
         fa:82:a4:92:a7:0d:a0:fe:90:e3:a5:da:b3:bb:94:9a:c1:c3:
         8c:6a:43:ec:ad:b5:e7:f1:c7:76:bc:07:2e:77:99:a9:77:e6:
         1c:cf:90:58:21:74:50:47:1c:3e:0a:77:f6:e9:bc:2e:29:f6:
         66:59:91:db:9e:a9:24:d5:b2:b9:b2:23:a6:87:5b:64:ec:3b:
         6e:ef:0f:29:ca:8b:bc:ac:1c:04:cb:03:ca:0b:7b:99:74:2a:
         40:50:31:30:a7:cf:d7:b4:61:49:2b:04:2f:31:2c:d9:dc:55:
         7b:7c:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:15 2026 by rpki-client