Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2B535080E79B11EFB484D12EC4F9AE02.roa
File:                     2B535080E79B11EFB484D12EC4F9AE02.roa (raw, json)
Hash identifier:          jB1gkfQlC2sj/oNi50HRXfWWRrQz75vbVSujZ4sg63U=
Subject key identifier:   E1:B7:1A:EB:4F:92:0E:7C:98:83:AA:54:64:20:E6:E9:49:BA:29:DB
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2965
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2B535080E79B11EFB484D12EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:10:02 +0000
ROA not before:           Sat 26 Jul 2025 15:54:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     206264
IP address blocks:        103.217.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10597 (0x2965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48f0a-2432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:7a:b7:31:5e:1e:80:c4:b8:c7:ed:4b:ea:
                    1a:3f:19:9d:67:a3:9c:11:64:85:b7:d3:9c:04:f7:
                    af:5e:20:42:d9:50:c0:4a:94:c8:fe:82:0f:ad:3b:
                    cc:c7:81:87:3e:6f:df:3a:65:ef:95:56:fa:d3:d7:
                    74:5f:e9:c7:68:cc:b8:77:0f:14:8b:4e:d7:69:b7:
                    42:33:41:b0:f9:44:54:5d:37:09:63:88:89:b6:20:
                    4d:af:a2:d2:c8:f6:aa:fd:10:aa:9b:ad:29:65:0e:
                    c2:a6:a2:84:a3:e3:9f:10:e1:17:63:99:09:3d:2f:
                    fc:f9:72:54:29:aa:a8:5d:eb:e6:00:27:5a:fb:6f:
                    7b:ae:8e:26:a5:c2:f8:e5:7d:5b:f7:08:bb:7c:f4:
                    ad:0b:82:78:bb:a6:ea:d0:df:92:9d:3d:4c:6c:48:
                    c7:ee:b4:32:8a:3b:6f:89:9e:4c:60:b5:52:70:a8:
                    23:93:78:cb:1a:3c:f7:79:84:29:1d:a5:4e:a7:85:
                    89:56:b3:3d:92:8a:b4:8b:b5:a4:cc:8f:da:d0:40:
                    63:f2:f7:ef:b8:a6:18:c3:50:b9:ae:02:02:cc:93:
                    dd:b4:0a:75:bc:82:37:95:49:67:1e:e0:30:1b:9a:
                    90:54:e3:5b:05:5b:71:17:dc:bb:c4:e6:76:85:67:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B7:1A:EB:4F:92:0E:7C:98:83:AA:54:64:20:E6:E9:49:BA:29:DB
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2B535080E79B11EFB484D12EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:11:22:20:f1:08:5f:d1:6d:e6:95:24:e2:9e:05:52:7a:
         03:e2:d5:6d:3a:25:10:c1:11:80:15:0e:38:c3:3e:23:c1:cd:
         20:99:a3:27:39:8b:b5:a5:ae:c9:c6:90:fb:30:12:27:15:24:
         04:0d:2c:82:c9:5d:aa:18:97:2e:11:1e:5e:f2:71:81:99:85:
         28:a3:8f:de:7e:b7:e5:9e:79:8d:31:0c:d3:b5:be:c9:99:74:
         ef:11:a2:ce:3b:21:8b:7e:9f:63:c1:b0:68:15:39:de:74:2c:
         c2:74:28:3b:36:4e:91:9d:d7:e6:1d:a8:45:ed:a4:15:84:fd:
         c8:b7:7d:36:87:14:e7:0e:cd:66:3e:b1:7c:3f:34:0d:fc:81:
         6f:9a:3c:06:c4:da:60:24:59:96:83:c2:43:49:27:bf:d2:43:
         ea:5f:90:e4:ad:6c:ba:ef:0d:7d:be:f2:6c:93:71:f2:f6:c1:
         00:0c:83:5b:01:84:ee:c7:6d:ef:95:02:ff:1c:5c:5e:3c:6a:
         5f:85:34:de:72:05:cf:3b:39:eb:34:82:0f:ba:62:2a:4a:95:
         9f:c4:8f:d0:65:db:a3:b9:92:5c:77:60:72:f6:c3:80:24:4a:
         ca:10:c3:14:3d:94:52:2d:79:98:6b:94:c5:9b:3e:53:b8:f4:
         c8:1c:60:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:22 2026 by rpki-client