Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/25C6FD9CAE0511F187A47F574B11F970.roa
File:                     25C6FD9CAE0511F187A47F574B11F970.roa (raw, json)
Hash identifier:          wjJhmmUUiWYFdBshacAhxjyibepzAQTbTNK9qOb1a0I=
Subject key identifier:   09:35:03:E2:8A:BA:EB:C0:75:AB:F6:56:AE:77:14:1A:80:0A:5D:B8
Certificate issuer:       /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Certificate serial:       0523
Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/25C6FD9CAE0511F187A47F574B11F970.roa
Signing time:             Thu 01 Oct 2026 00:47:19 +0000
ROA not before:           Thu 01 Oct 2026 00:47:19 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     218692
IP address blocks:        103.91.217.0/24 maxlen: 24
                          103.99.208.0/23 maxlen: 24
                          103.99.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl
                          rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
        Validity
            Not Before: Oct  1 00:47:19 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abdad97-48d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:44:7e:9a:3f:b1:76:65:57:59:86:47:09:
                    88:8d:ba:b3:93:78:3c:94:f7:6d:4e:96:27:fd:81:
                    93:b2:d7:12:0b:b5:32:8c:1d:aa:65:c7:dd:aa:e4:
                    bf:94:1a:2f:0c:08:d9:16:ef:e3:50:a1:2f:57:ba:
                    0b:00:d7:24:90:4b:27:06:85:df:56:a7:9d:29:10:
                    f0:fb:6d:77:d6:a7:8a:01:29:06:cb:ca:bd:22:22:
                    9c:36:2a:af:e7:54:fa:00:7e:11:4b:00:3b:8b:2b:
                    20:12:09:20:79:55:63:17:56:ef:d1:68:61:a1:e1:
                    21:f6:87:af:8c:c8:16:03:75:80:da:df:e6:93:3b:
                    be:4b:b6:79:0e:af:1b:1f:1b:3f:47:de:f6:e5:30:
                    05:37:64:4c:7c:c0:4e:3e:91:40:78:0e:ad:f3:f6:
                    08:d9:ee:86:01:47:35:dd:95:f4:6d:bc:94:6d:ac:
                    22:9d:d8:6d:e5:71:29:9f:23:b2:a1:89:ef:29:fe:
                    39:69:be:25:45:cb:da:cc:cf:db:ab:e9:12:bf:f1:
                    42:1a:68:d3:5e:78:ef:af:8d:00:5c:48:d7:87:62:
                    46:0c:34:b8:74:c2:1a:cb:e7:17:b9:a4:f9:db:73:
                    a1:f4:29:43:9e:07:26:af:94:c3:d0:e5:5e:71:f7:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:35:03:E2:8A:BA:EB:C0:75:AB:F6:56:AE:77:14:1A:80:0A:5D:B8
            X509v3 Authority Key Identifier:
                keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/25C6FD9CAE0511F187A47F574B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.217.0/24
                  103.99.208.0-103.99.210.255

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:27:79:31:e9:21:5a:2b:e8:c9:db:7e:67:48:11:b3:1a:
         e1:13:f1:aa:fd:7c:f0:99:4f:06:1c:10:8d:6d:18:b1:10:cb:
         00:aa:f4:90:63:1c:41:29:ea:6b:b1:c3:37:49:ff:da:89:53:
         59:06:99:18:6c:b2:28:12:48:da:90:11:ef:46:50:cb:fd:fe:
         4e:e4:5e:18:c0:ed:dd:96:63:35:e8:6c:f2:01:ed:61:b2:99:
         92:d3:f8:3d:ad:88:d5:20:7b:4c:6a:db:ab:e0:0b:4c:b8:4b:
         88:0f:90:2c:df:ea:f6:ba:6c:23:db:68:eb:b4:b8:59:7f:f9:
         d8:5f:1e:7c:c5:3d:f5:3b:51:37:81:e7:8b:45:8d:67:5a:17:
         d0:5f:a5:04:00:45:b3:08:76:a5:a3:03:4d:af:db:b0:52:08:
         75:44:60:61:7c:b2:c3:47:89:b1:4e:18:c4:f3:52:70:48:f4:
         fa:44:40:0c:8b:7f:a4:ea:1c:e4:cf:9a:3b:dd:79:7c:70:36:
         d7:4b:d5:03:f3:62:f5:0d:52:6c:e4:ae:62:3a:a2:33:fe:23:
         b5:76:3e:75:09:2d:32:d6:50:24:55:a8:b4:9e:cf:21:87:71:
         f3:2e:02:91:7f:72:1b:b4:d3:2c:a2:10:46:6b:c0:2c:1a:e8:
         c0:85:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:50 2026 by rpki-client