Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/313371B6ACEC11F1B9AFA1003211F970.roa
File:                     313371B6ACEC11F1B9AFA1003211F970.roa (raw, json)
Hash identifier:          GphprMmxelmWgPcJQLaCEeRSo2v3IjfMlLQ3WootMRQ=
Subject key identifier:   CD:ED:60:27:9A:B1:9A:56:9C:AB:01:6E:73:FB:94:59:39:FF:E3:7F
Certificate issuer:       /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Certificate serial:       0283
Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/313371B6ACEC11F1B9AFA1003211F970.roa
Signing time:             Thu 10 Sep 2026 08:43:06 +0000
ROA not before:           Thu 10 Sep 2026 08:43:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     149173
IP address blocks:        103.53.25.0/24 maxlen: 24
                          103.212.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
                          rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
        Validity
            Not Before: Sep 10 08:43:06 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6aa26d9a-213a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:66:32:cf:d1:a8:9d:a9:dc:64:d4:8a:39:
                    d5:7e:5c:34:15:21:11:57:2a:9c:4b:ef:cf:e7:8f:
                    75:64:27:4e:b5:60:ed:68:eb:7c:d4:4d:4d:72:0d:
                    eb:c0:ed:c8:d7:a4:0f:5c:11:a2:12:a2:03:6d:05:
                    f5:1b:21:9f:da:3d:dd:57:e1:65:6e:21:31:47:5e:
                    e3:70:c6:db:d0:9e:f4:d0:00:3d:f0:80:9c:04:27:
                    17:09:06:e4:56:35:75:86:61:70:b4:21:a3:e5:b1:
                    8b:f2:95:bf:45:ef:58:0d:02:88:9f:1f:d3:00:d7:
                    0e:a4:f4:73:84:93:a8:ec:de:5a:51:2c:03:4c:98:
                    21:d6:3f:b1:f4:86:1e:74:06:95:c1:92:67:f1:d0:
                    74:01:53:bf:3b:f2:2d:52:d3:00:cb:83:62:ea:5d:
                    79:ef:67:80:0f:4d:45:10:5a:5c:66:d5:17:2d:84:
                    2f:4d:f0:b4:e0:95:a4:12:3b:17:bc:c7:ff:86:db:
                    94:d6:c0:37:ff:85:da:3a:a1:1b:55:26:93:39:a2:
                    dc:a8:2a:8e:34:34:3b:06:3a:28:1b:87:9b:99:84:
                    2c:88:cf:9e:7a:59:e4:d8:bf:f1:28:9b:1d:b1:e1:
                    b5:a2:56:c0:9f:e8:fe:b3:b3:46:d1:5e:0d:7a:ce:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:60:27:9A:B1:9A:56:9C:AB:01:6E:73:FB:94:59:39:FF:E3:7F
            X509v3 Authority Key Identifier:
                keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/313371B6ACEC11F1B9AFA1003211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.25.0/24
                  103.212.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:99:2e:ef:1a:98:63:62:8e:d9:6b:07:3f:53:da:51:67:15:
         95:91:6c:8c:6b:2b:84:53:2f:26:a4:16:86:86:f1:88:a9:ac:
         20:4a:2e:cf:79:2a:e1:2a:d4:10:17:29:3f:b0:13:65:9e:dc:
         8d:2a:73:9f:45:53:3d:9b:64:04:f9:db:05:6e:01:a2:4d:de:
         4f:67:12:5c:43:c5:f7:fb:d8:d9:c2:5d:93:15:0f:92:7d:49:
         9f:32:88:f5:a3:90:bc:27:87:b6:5f:ce:77:4b:9c:75:e1:40:
         a1:b3:f8:18:de:51:3b:b2:79:59:5b:9b:8b:33:f4:05:9c:bb:
         6c:49:d7:10:d2:01:20:0d:f9:d9:42:3f:a4:ea:d4:7b:42:05:
         d1:c2:99:5e:d0:6f:2e:5a:d4:bf:7e:3b:c0:c2:1c:8f:65:f5:
         f2:a5:e6:4d:1d:41:68:b9:21:fe:c8:26:c8:50:5d:72:f4:fd:
         ff:d1:43:e4:ad:99:85:99:05:47:17:65:6a:98:43:76:b5:c3:
         91:36:84:e5:7d:2d:c8:f9:c6:d8:ef:b3:28:dc:27:cf:49:74:
         91:e4:7d:65:95:c0:6f:d8:28:27:d6:43:1a:61:b1:b9:b5:24:
         25:7b:07:0c:46:58:e0:d9:6a:3c:2a:b1:fb:43:2c:af:de:6c:
         40:c9:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 16:35:41 2026 by rpki-client