Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/117300B62CDB11EDB2E1DD0DC4F9AE02.roa
File:                     117300B62CDB11EDB2E1DD0DC4F9AE02.roa (raw, json)
Hash identifier:          WQuRt9VYbZhxWCPHuufg9gzeIbcATs55Tqnjl5B+9os=
Subject key identifier:   17:E4:81:20:66:1D:E6:F0:61:80:C1:1F:57:C1:AD:7C:81:27:D1:36
Certificate issuer:       /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial:       032F
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/117300B62CDB11EDB2E1DD0DC4F9AE02.roa
Signing time:             Sat 03 Oct 2026 01:49:43 +0000
ROA not before:           Sat 03 Oct 2026 01:49:43 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     150299
IP address blocks:        103.214.178.0/23 maxlen: 23
                          103.214.178.0/24 maxlen: 24
                          103.214.179.0/24 maxlen: 24
                          2001:df1:3b40::/48 maxlen: 48
                          2001:df1:3b40::/51 maxlen: 51
                          2001:df1:3b40:2000::/51 maxlen: 51
                          2001:df1:3b40:4000::/51 maxlen: 51
                          2001:df1:3b40:6000::/51 maxlen: 51
                          2001:df1:3b40:8000::/51 maxlen: 51
                          2001:df1:3b40:a000::/51 maxlen: 51
                          2001:df1:3b40:c000::/51 maxlen: 51
                          2001:df1:3b40:e000::/51 maxlen: 51
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
                          rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
        Validity
            Not Before: Oct  3 01:49:43 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac05f37-8e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:20:96:63:0f:b2:a4:52:7b:65:14:f9:09:
                    74:a8:90:00:48:c8:f3:1e:9b:f3:43:77:83:6d:6c:
                    be:68:f9:9c:73:84:f9:91:27:e1:1c:b5:a8:20:fe:
                    b8:57:c1:10:5f:08:40:55:ca:ad:eb:52:c4:46:f9:
                    cd:55:40:54:1a:72:a1:da:b4:2b:d5:03:26:28:05:
                    d5:96:f2:0d:fd:bf:76:96:bb:66:15:e6:f7:1a:e5:
                    de:37:8f:9e:16:e9:0f:29:7b:c3:92:1e:d9:11:ba:
                    06:e9:14:74:f0:2c:71:ef:0c:62:d5:48:3d:3c:b0:
                    36:fe:59:9c:f3:ce:81:61:2c:85:02:74:a1:ce:a4:
                    a7:ad:f6:4c:0d:56:97:4f:68:a8:9e:57:4c:77:86:
                    ee:29:77:ce:c3:60:85:f6:f8:b1:56:c0:6b:24:bb:
                    fc:4c:fe:a9:22:f7:fb:77:0d:cb:85:19:a8:ac:d2:
                    a8:de:eb:2a:30:49:1c:23:e3:4a:ea:e6:87:a4:6b:
                    27:47:38:6b:54:0b:20:4e:ea:78:4b:b4:42:c6:43:
                    91:32:72:ec:3c:6d:af:13:6c:a7:74:d8:5c:f3:c5:
                    dc:d4:ad:ee:31:a6:c0:28:7a:94:7a:2d:59:4c:f7:
                    21:f8:4e:e1:7d:48:c8:ce:46:90:28:3e:46:0d:cf:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E4:81:20:66:1D:E6:F0:61:80:C1:1F:57:C1:AD:7C:81:27:D1:36
            X509v3 Authority Key Identifier:
                keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/117300B62CDB11EDB2E1DD0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.178.0/23
                IPv6:
                  2001:df1:3b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:ce:a1:19:64:c4:ef:a1:80:9f:0b:4e:84:95:37:72:4b:
         78:6c:4e:4b:1a:a1:10:df:26:8f:be:b1:db:b2:e6:59:59:00:
         69:c9:ff:49:03:12:a6:0b:b0:5c:37:55:b1:39:12:15:31:fa:
         0c:9f:2f:7a:b5:df:0d:91:c8:d9:aa:0b:11:27:ce:64:f4:e7:
         f6:bb:4f:5d:c6:f7:45:c9:21:db:99:90:7d:ab:08:9e:87:dc:
         e5:8e:54:63:22:4a:ba:4c:bb:09:2b:6f:35:e9:03:4d:5a:73:
         0a:38:3f:0f:1f:ca:fd:27:b1:21:5b:61:9c:2e:52:3b:02:35:
         4a:48:c0:a9:cd:12:92:09:b4:88:46:67:48:72:9a:1f:95:24:
         c4:9b:64:d2:b7:a1:7f:05:b3:dc:94:24:dd:df:62:3f:81:c9:
         3a:63:ad:3c:98:c2:1d:b5:b3:89:af:26:00:9f:4d:0b:b5:c1:
         f4:99:51:85:26:12:17:a0:4b:9d:bc:d3:57:94:ed:9f:a6:7f:
         ad:e6:ba:f1:15:31:3d:9e:27:24:9e:2a:af:ff:ad:a2:4e:db:
         da:bf:63:b5:21:80:31:29:1a:6f:43:a9:e7:d4:6c:b1:0c:f9:
         53:11:29:b0:77:64:c3:41:14:ed:0c:db:48:fa:3c:17:c7:9a:
         2d:fc:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:49:10 2026 by rpki-client