Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/71DFDF18890111EEB3F2581FC4F9AE02.roa
File:                     71DFDF18890111EEB3F2581FC4F9AE02.roa (raw, json)
Hash identifier:          EqT4x+M1dS0lAoKnprnpqiEWavrDyHejbJDUqIhSKBc=
Subject key identifier:   A1:0F:74:5C:A3:BE:9C:4D:DD:CB:F8:CD:6B:96:7D:3F:EC:71:F1:FA
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       02B0
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/71DFDF18890111EEB3F2581FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:17:00 +0000
ROA not before:           Wed 27 Aug 2025 02:37:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     216050
IP address blocks:        103.230.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Aug 27 02:37:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4748c-fcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:44:fb:a9:b2:47:28:45:5f:8c:f3:5e:76:
                    3f:7c:c0:02:f3:2f:02:b0:fd:a3:b4:27:b9:5f:dc:
                    e2:d5:aa:38:d1:a1:b4:a5:22:5c:b9:52:f8:2a:51:
                    16:fc:d3:58:b9:aa:92:3b:70:b1:1a:eb:59:14:ea:
                    7c:a8:3a:ae:19:88:30:a5:9c:15:ca:fb:5b:29:f1:
                    e3:e7:54:00:1e:60:9c:09:fa:47:11:2f:31:af:dc:
                    07:39:90:19:7b:c5:02:85:38:0c:94:e9:33:4a:a5:
                    96:9e:f4:14:ef:97:76:47:af:55:53:52:8e:8c:90:
                    41:8d:6c:cb:f8:dc:b7:49:23:14:42:e4:d2:0c:16:
                    a1:5c:c3:ed:54:72:d4:50:7a:1d:65:90:97:82:6b:
                    31:3d:7f:24:0d:9c:35:af:cf:bd:d5:4b:89:8f:25:
                    bd:23:86:4f:18:ce:9a:ee:13:6b:e7:0d:8e:5b:13:
                    dd:10:23:7f:4b:e7:c1:93:fe:c6:33:1f:57:90:31:
                    64:62:0a:3b:37:e8:c1:a6:93:41:7b:fe:70:44:cc:
                    19:3b:54:31:53:d1:e9:d8:e1:83:35:b3:83:15:05:
                    b2:35:dd:11:5a:fc:a3:70:23:d3:3a:22:8e:b7:99:
                    01:4a:8a:b4:59:12:bb:81:19:30:e1:54:94:93:64:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0F:74:5C:A3:BE:9C:4D:DD:CB:F8:CD:6B:96:7D:3F:EC:71:F1:FA
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/71DFDF18890111EEB3F2581FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:92:fe:74:a4:dd:95:a1:c9:3f:40:e3:14:9e:e6:ba:df:fb:
         ee:09:4e:f8:1c:8f:c8:af:11:70:13:60:79:e0:bb:a2:04:c9:
         33:f1:41:fa:73:7c:b2:f6:84:9d:57:3e:6b:d6:29:10:36:35:
         ba:9f:58:9b:a0:18:fa:c5:cb:20:20:3f:0f:04:60:0c:43:78:
         31:be:57:81:9d:85:03:c0:66:96:4f:24:e8:42:68:da:48:9d:
         3a:26:eb:d0:17:90:91:40:bc:80:04:b9:17:77:1f:2e:6f:17:
         30:9c:ce:eb:fa:36:e7:a3:73:0c:56:b9:4d:15:de:4d:5b:1f:
         f4:12:d2:d7:85:bd:52:9f:60:c7:40:94:e5:d0:27:56:f3:e9:
         da:b1:cb:2b:98:52:7d:4d:63:10:0d:b8:6c:16:38:7d:40:5a:
         63:91:ce:0e:b9:5c:79:00:e5:ad:64:9c:9a:af:96:04:a7:df:
         a5:38:89:3c:19:3d:84:f6:2e:9e:3b:6e:ef:5e:f4:a0:98:58:
         75:31:cf:71:a0:48:8a:87:03:36:63:76:91:ea:00:83:dd:a2:
         92:f3:7e:8d:25:fb:c7:4a:e2:17:c3:2f:0c:bb:3f:2a:14:d2:
         22:a2:e5:85:83:f5:e2:47:3e:95:14:aa:26:de:c3:24:59:b2:
         36:dc:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:02 2026 by rpki-client