Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/C94C5FD4163911F1B9B26C9A3C3D8C67.roa
File:                     C94C5FD4163911F1B9B26C9A3C3D8C67.roa (raw, json)
Hash identifier:          MYDqaVFwRJB1jmhIu+ie4ItmCnxfdWtMitAnA5vk2cU=
Subject key identifier:   F3:71:30:35:15:63:C5:D0:68:AF:64:D0:95:93:68:44:9D:2B:CE:50
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       029C
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/C94C5FD4163911F1B9B26C9A3C3D8C67.roa
Signing time:             Sat 29 Aug 2026 02:52:26 +0000
ROA not before:           Sat 29 Aug 2026 02:52:26 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     215748
IP address blocks:        103.120.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Aug 29 02:52:26 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a92496a-20c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:db:32:48:bf:81:83:2d:cc:af:02:e3:f7:
                    3d:25:9a:57:1f:aa:f8:34:cc:a7:5c:ce:0a:27:80:
                    c8:63:1d:be:6e:6b:ee:3c:0e:71:78:19:a9:35:66:
                    a6:9f:cb:3a:d1:ac:4a:6c:ca:20:bb:e1:58:d6:77:
                    c0:3a:a3:b1:73:a4:bb:ec:18:2e:d3:a0:74:e6:0d:
                    f6:a1:e0:22:75:0f:84:cb:4b:4d:97:0a:63:fa:80:
                    a1:73:44:1a:c9:dd:eb:d7:0f:19:c5:07:c1:3f:91:
                    1a:f7:36:29:11:46:f4:d4:82:c7:42:c3:f2:78:e9:
                    27:17:48:9f:17:fa:84:14:ef:0b:d3:c0:30:bf:36:
                    fd:d6:2a:81:6d:5a:e5:0b:e8:e7:a5:ea:01:75:f3:
                    fd:bc:76:e3:b1:80:7f:c5:da:9c:f8:7c:fe:23:ef:
                    c7:53:51:b7:40:25:8b:6f:22:d9:e9:4e:34:ee:6c:
                    0f:8c:d4:cc:63:cd:ca:71:a0:11:15:56:12:7a:e1:
                    40:c4:76:53:77:b8:5e:38:c9:3f:1f:c0:de:8f:55:
                    e5:d5:22:a2:42:73:73:58:8e:7d:33:b1:3e:c8:8b:
                    77:2d:93:5a:66:5a:67:0f:45:e7:a3:9a:86:07:d1:
                    95:79:37:f0:15:58:06:0c:de:cf:7a:e3:64:1f:de:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:71:30:35:15:63:C5:D0:68:AF:64:D0:95:93:68:44:9D:2B:CE:50
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/C94C5FD4163911F1B9B26C9A3C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:37:84:6e:d7:18:8d:24:52:21:51:16:f9:34:bd:fd:41:35:
         d7:a9:fb:d4:a1:5f:dd:c7:8c:cc:d1:48:bb:70:0b:fe:1f:f4:
         34:0b:90:b5:cf:61:62:6b:31:b1:bb:58:e9:30:51:bf:2a:c9:
         99:af:b3:3b:a2:23:76:85:80:e8:2f:3b:20:b8:af:50:0f:91:
         e4:b7:c3:ac:af:d4:d4:da:ed:8b:bc:2a:9b:e5:e2:29:44:83:
         7a:7b:86:cf:a9:4a:76:fb:dd:14:4a:c9:45:f2:03:31:61:30:
         0f:c2:57:48:f8:7f:00:71:58:be:42:09:30:9f:af:2e:e7:c1:
         15:07:b5:dd:ff:b5:1e:3d:db:2c:ec:4a:85:ed:18:a7:bb:27:
         66:e5:f9:da:eb:e0:6f:96:6f:b3:4f:fd:86:a6:18:c7:42:5c:
         ab:50:b6:03:5f:0d:ec:8e:b8:ac:91:66:51:74:67:18:38:a7:
         a8:ba:fc:d8:96:9e:d7:4b:c2:15:3f:a1:e5:54:96:51:81:74:
         53:56:f9:2f:78:46:ad:58:94:2c:ac:d4:72:51:19:f2:04:b7:
         fd:b2:ab:35:43:0b:66:96:6c:6d:ff:b4:e9:68:38:70:32:4d:
         80:1b:06:ac:e6:cf:1d:b3:3f:64:34:8b:ea:5b:9c:b0:cd:b4:
         36:14:81:66
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5
NTY1Qzk0RDgwHhcNMjYwODI5MDI1MjI2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkyNDk2YS0yMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufPbMki/gYMtzK8C4/c9JZpXH6r4NMynXM4KJ4DIYx2+bmvuPA5xeBmpNWam
n8s60axKbMogu+FY1nfAOqOxc6S77Bgu06B05g32oeAidQ+Ey0tNlwpj+oChc0Qa
yd3r1w8ZxQfBP5Ea9zYpEUb01ILHQsPyeOknF0ifF/qEFO8L08Awvzb91iqBbVrl
C+jnpeoBdfP9vHbjsYB/xdqc+Hz+I+/HU1G3QCWLbyLZ6U407mwPjNTMY83KcaAR
FVYSeuFAxHZTd7heOMk/H8Dej1Xl1SKiQnNzWI59M7E+yIt3LZNaZlpnD0Xno5qG
B9GVeTfwFVgGDN7PeuNkH973iwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPNxMDUV
Y8XQaK9k0JWTaESdK85QMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB
NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUFFNEQvNTdDMzdFMzgwQTU3MTFFRThDNjM1QTQ2QzRGOUFFMDIvQzk0QzVGRDQx
NjM5MTFGMUI5QjI2QzlBM0MzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3gOMA0GCSqGSIb3DQEBCwUAA4IBAQC+N4Ru1xiNJFIhURb5NL39
QTXXqfvUoV/dx4zM0Ui7cAv+H/Q0C5C1z2FiazGxu1jpMFG/KsmZr7M7oiN2hYDo
LzsguK9QD5Hkt8Osr9TU2u2LvCqb5eIpRIN6e4bPqUp2+90USslF8gMxYTAPwldI
+H8AcVi+Qgkwn68u58EVB7Xd/7UePdss7EqF7Rinuydm5fna6+Bvlm+zT/2GphjH
QlyrULYDXw3sjriskWZRdGcYOKeouvzYlp7XS8IVP6HlVJZRgXRTVvkveEatWJQs
rNRyURnyBLf9sqs1Qwtmlmxt/7TpaDhwMk2AGwas5s8dsz9kNIvqW5ywzbQ2FIFm
-----END CERTIFICATE-----
Generated at Tue Sep 8 22:47:21 2026 by rpki-client