Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/F9EE01A842E211F1B650BCD08E833773.roa
File:                     F9EE01A842E211F1B650BCD08E833773.roa (raw, json)
Hash identifier:          k3W5LhVCwW7y1SCmE8HXWFyviI573wKItGciWn2x3E0=
Subject key identifier:   BB:BC:3C:B9:C5:AB:81:73:B9:7B:2D:6C:07:8B:44:2A:B6:56:AF:89
Certificate issuer:       /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial:       0224
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/F9EE01A842E211F1B650BCD08E833773.roa
Signing time:             Thu 01 Oct 2026 03:52:47 +0000
ROA not before:           Thu 01 Oct 2026 03:52:47 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137975
IP address blocks:        103.119.25.0/24 maxlen: 24
                          103.119.26.0/24 maxlen: 24
                          103.119.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
                          rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
        Validity
            Not Before: Oct  1 03:52:47 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abdd90f-4e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:76:2a:f3:e1:f2:ab:c7:11:45:c3:16:a1:
                    e7:cf:6f:0f:ff:53:c7:ef:b2:44:46:2a:1b:56:2e:
                    1e:c2:ff:9d:d5:28:dd:8b:aa:81:c4:85:92:dd:08:
                    85:05:ac:57:28:27:29:7f:41:1f:37:e8:91:30:02:
                    89:44:e6:48:e7:49:e2:e7:c0:e2:0d:e1:35:d7:d5:
                    2f:bb:70:87:8a:32:59:2d:ec:b6:7b:07:7d:c3:7d:
                    00:43:d0:61:5f:f4:42:95:42:66:6a:8e:b8:1e:e3:
                    40:55:2e:bf:1a:2d:07:69:39:4e:3e:b1:4a:5c:cd:
                    f8:76:b7:ca:0d:6b:e3:18:c0:37:4b:ef:66:13:72:
                    eb:9c:74:99:af:82:17:83:d8:f8:48:e1:d8:e1:32:
                    79:5e:b3:d2:2f:ac:16:aa:7a:e7:5a:14:64:75:ac:
                    c9:01:9b:f8:a3:09:fe:31:09:01:4c:e3:2e:cd:c5:
                    4b:96:4e:59:b9:27:9b:84:2f:36:91:ff:0f:35:d2:
                    98:68:e1:10:f5:b6:0b:42:95:d7:19:83:7b:50:ad:
                    c9:88:dd:d3:71:39:e9:4b:ba:dd:27:a9:38:13:95:
                    23:b7:1e:b2:ee:af:59:b2:96:2a:03:21:70:fd:8c:
                    41:2f:ba:2c:6e:39:17:fe:ea:d3:bd:e6:a2:f7:18:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BC:3C:B9:C5:AB:81:73:B9:7B:2D:6C:07:8B:44:2A:B6:56:AF:89
            X509v3 Authority Key Identifier:
                keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/F9EE01A842E211F1B650BCD08E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.25.0-103.119.27.255

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:7f:7f:0e:43:aa:bd:c4:2f:39:fe:c2:62:57:f9:68:35:
         73:54:a3:03:fa:23:47:45:45:89:29:db:a3:4f:74:b1:84:75:
         e7:48:61:c0:39:91:2e:fe:7f:aa:89:73:ff:0b:41:75:3c:b0:
         f4:79:36:34:88:d3:4c:67:31:e3:80:0a:74:aa:46:97:8e:68:
         d2:56:7c:f5:b4:e0:6c:b3:59:ba:72:30:21:91:27:7a:ab:15:
         9c:e2:94:5d:37:81:d9:30:96:02:2b:e9:58:ca:19:09:ec:e1:
         18:fc:64:c6:f6:5e:f7:a5:6f:f5:de:57:97:e0:e2:5a:38:a8:
         ea:e1:2f:89:32:2d:f7:14:5a:20:4b:d5:0b:ae:48:dd:91:37:
         10:10:b1:93:57:68:fb:f4:3f:aa:68:3e:c3:61:f2:64:00:21:
         a2:d2:30:99:67:a6:b9:bd:db:46:81:45:79:11:04:e9:62:88:
         d3:53:a2:e1:07:b3:8e:93:25:eb:52:86:a7:05:5a:7b:bc:27:
         26:7b:0f:7a:01:6c:c6:a6:fe:62:a1:67:87:cf:60:e4:66:cb:
         96:f8:92:2e:06:3d:a7:55:b7:ea:a4:bc:e5:87:1b:7e:e4:5b:
         54:e2:16:07:b9:3c:96:21:71:c0:6c:d3:d7:68:7b:f7:82:7b:
         b3:18:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:25:02 2026 by rpki-client