Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/F2CC3FB6AC5A11F1945B3E894711F970.roa
File:                     F2CC3FB6AC5A11F1945B3E894711F970.roa (raw, json)
Hash identifier:          fOItdik6vtxYgosTC2RuuMa1JaHzIaMudzCvyl8gM+0=
Subject key identifier:   6D:A8:FA:9A:EE:F8:9F:69:B9:9A:FA:F1:4C:9C:D2:90:EB:81:40:61
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       0611
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/F2CC3FB6AC5A11F1945B3E894711F970.roa
Signing time:             Wed 09 Sep 2026 14:30:05 +0000
ROA not before:           Wed 09 Sep 2026 14:30:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     146943
IP address blocks:        103.97.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 14:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553 (0x611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Sep  9 14:30:05 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6aa16d6d-7bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:a0:24:3f:d0:31:7c:37:fc:0a:79:09:19:
                    7c:23:5a:ee:a3:8e:df:4c:64:51:e8:24:43:8b:1e:
                    d0:d1:13:46:19:43:5a:9d:c0:bd:2e:dc:ad:14:e0:
                    57:1c:ee:4c:39:f7:06:72:91:7d:5f:57:bd:dc:e3:
                    34:a7:24:45:ca:75:34:8a:e1:7a:96:c8:f4:5d:e4:
                    eb:9e:53:93:2c:dc:25:5a:52:fa:bd:f0:86:ca:b1:
                    a4:e5:6a:a7:87:10:6c:1c:42:c0:f3:a3:9e:c0:7a:
                    9a:e7:fd:8a:0f:c9:ae:8a:91:20:2b:ff:a6:0e:4d:
                    fd:dc:f6:22:6f:c3:f7:6b:30:37:35:67:64:72:ce:
                    d2:88:3b:d1:15:8c:ae:f6:dc:01:58:94:ca:86:a6:
                    56:2b:10:05:b6:a5:2c:52:26:6f:77:6a:c1:6d:e6:
                    26:f5:98:0a:38:ac:16:ec:9a:fa:07:66:72:0c:72:
                    86:dd:f6:74:37:8a:92:d0:a8:1f:81:aa:35:78:d2:
                    27:f7:b1:ca:70:e3:78:14:d1:c2:9a:da:74:ae:bc:
                    10:86:0a:6c:9f:c1:04:b1:bf:90:ea:f3:33:24:49:
                    a2:77:f2:62:1d:b7:13:58:d6:34:9a:46:f1:72:8a:
                    a9:f0:37:43:e6:39:0e:47:0e:d1:99:4d:29:c7:ac:
                    0d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A8:FA:9A:EE:F8:9F:69:B9:9A:FA:F1:4C:9C:D2:90:EB:81:40:61
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/F2CC3FB6AC5A11F1945B3E894711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:6e:f5:6c:ae:36:bb:38:3e:fa:21:89:5a:8d:7d:cf:40:
         04:e8:e0:77:da:f6:1d:be:f4:d1:23:6e:94:9d:5b:e8:70:a6:
         bf:c2:33:1e:e6:00:cb:da:d3:6e:ed:d9:7d:78:b0:f8:7d:bc:
         cc:03:f9:fd:bf:79:d3:a7:fa:63:06:f8:f5:4d:2d:a9:4b:27:
         bb:e1:2f:96:a7:da:f5:36:ec:28:de:5d:57:b7:27:a2:1e:a2:
         e5:1f:ed:4d:7f:9c:3f:a2:9f:e3:87:93:84:79:7f:7e:31:af:
         06:44:57:d3:52:f5:c3:1e:49:5b:40:88:60:e9:eb:43:a9:81:
         ec:7b:df:60:af:c1:43:ec:2a:ed:40:ba:19:c4:c7:04:15:78:
         dc:e6:a0:8c:df:cb:65:29:74:80:e9:6b:97:30:30:86:d0:91:
         70:0b:bc:27:d9:43:b6:5b:86:8b:0d:34:60:7b:8d:08:49:a5:
         4e:ac:47:d4:31:0e:6d:85:36:0d:d9:ae:3b:d2:cf:ec:d7:21:
         c6:16:f9:da:7e:3a:bb:31:7c:ca:8f:06:8c:52:fe:2c:48:8c:
         5e:88:f2:1f:ba:c1:fb:1a:93:f7:39:d2:76:fb:0f:bd:31:98:
         39:7f:5a:54:bf:e8:c0:9e:67:c3:82:3c:94:e4:71:b8:c8:84:
         9b:3e:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:38:31 2026 by rpki-client