Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/2A578744C77A11F1909FC0023A11F970.roa
File:                     2A578744C77A11F1909FC0023A11F970.roa (raw, json)
Hash identifier:          CSyrWiR6qdyTW5M6Fo9V/b1OVdHdtQ562fShbCGxJCc=
Subject key identifier:   51:C9:27:87:31:FB:EC:84:EB:15:D6:20:5F:E1:3A:D4:A5:1F:41:A0
Certificate issuer:       /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial:       017B
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/2A578744C77A11F1909FC0023A11F970.roa
Signing time:             Wed 14 Oct 2026 02:51:34 +0000
ROA not before:           Wed 14 Oct 2026 02:51:34 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138643
IP address blocks:        103.49.42.0/24 maxlen: 24
                          103.49.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
                          rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 06:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Validity
            Not Before: Oct 14 02:51:34 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6aceee35-2a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:e7:af:da:56:55:d8:11:4f:d6:02:25:09:
                    29:cf:2c:2a:88:13:92:d5:b4:a4:a0:d8:34:f4:42:
                    fb:83:6e:2e:bb:6d:b9:cc:a1:bd:95:8e:78:84:4f:
                    68:ba:7b:73:91:f4:b5:80:94:31:df:cc:35:d2:08:
                    83:8d:9b:80:9f:47:94:6d:b1:9f:f6:4a:01:44:51:
                    d3:73:38:82:73:cd:c8:44:e4:eb:06:2a:de:fe:97:
                    ab:fa:ac:7a:06:f5:f9:54:6d:9f:24:9b:b6:80:9c:
                    a8:59:00:1a:47:36:4d:f5:4a:8d:69:81:13:0d:77:
                    d7:78:40:99:a2:0c:66:71:89:cf:4a:53:38:cd:e5:
                    54:96:b9:9d:9c:ec:eb:23:5e:34:15:7d:52:15:ee:
                    4f:87:36:72:22:39:bb:24:3e:0d:8b:ad:a2:b4:f4:
                    33:f6:1b:b1:e1:98:1c:c3:85:eb:73:51:2b:75:6f:
                    f8:69:88:ec:03:7d:e4:6d:c4:b1:38:01:cd:77:f9:
                    c6:3e:df:c0:dc:1a:a9:a3:b4:2c:8b:e3:15:12:a5:
                    7b:30:96:19:d6:19:fe:69:26:d8:16:09:55:b2:08:
                    b2:50:66:cc:35:09:14:03:07:d5:1e:9f:ba:fa:fd:
                    b9:88:13:05:e0:cc:61:e5:9b:8a:3d:64:e2:f1:6e:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C9:27:87:31:FB:EC:84:EB:15:D6:20:5F:E1:3A:D4:A5:1F:41:A0
            X509v3 Authority Key Identifier:
                keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/2A578744C77A11F1909FC0023A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:cd:7c:c3:cb:dc:d5:7c:8c:14:c0:18:aa:f3:68:e5:1f:45:
         f9:4d:77:44:77:33:81:48:71:66:8c:23:f3:8a:4a:6b:88:1f:
         8c:59:26:c8:2e:6c:56:ff:00:df:74:35:96:a1:0a:a8:93:9b:
         63:6c:7f:fb:41:06:3d:a2:e5:80:50:05:5c:8a:76:16:2b:d9:
         fd:e3:87:90:30:39:44:90:90:3b:99:fe:5f:88:a0:aa:ef:2d:
         03:cb:0e:1d:60:b8:8c:b8:04:24:fe:78:58:9e:36:1a:aa:94:
         94:79:7d:c1:d7:17:37:15:71:e9:17:68:a7:d2:12:17:76:fd:
         02:57:1f:32:31:ed:9c:9a:80:f0:12:94:bb:46:f2:1d:fa:fd:
         da:06:4a:c3:66:03:7a:ff:7e:d2:cf:06:83:4b:0c:80:c8:7c:
         2f:28:22:c6:2e:b8:b2:d7:59:fc:b7:de:39:f1:99:5b:90:83:
         9d:89:00:1f:47:d1:19:45:8b:5d:e3:c4:05:d5:f3:9b:ab:06:
         44:54:a7:5f:fc:b2:52:0c:0c:9a:79:4b:82:35:6b:89:33:1d:
         da:34:dd:3b:24:a0:42:a3:33:b5:9b:0c:7b:59:66:6f:fe:0c:
         72:c0:72:ed:a4:cf:2c:bf:7d:e0:be:f1:66:fd:43:72:be:b4:
         9b:89:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:06:28 2026 by rpki-client