Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/2FF4108A0C3911EB828BDC25C4F9AE02.roa
File:                     2FF4108A0C3911EB828BDC25C4F9AE02.roa (raw, json)
Hash identifier:          HKGRir2n7i6fdg97EN5g+9sFpLyOtuQtaP0V1gAFbbw=
Subject key identifier:   3B:B2:3E:C0:78:23:55:0E:18:19:08:E6:7F:7A:E9:BF:11:86:1C:EF
Certificate issuer:       /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
Certificate serial:       089A
Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/2FF4108A0C3911EB828BDC25C4F9AE02.roa
Signing time:             Thu 08 Oct 2026 21:40:09 +0000
ROA not before:           Thu 08 Oct 2026 21:40:09 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     55720
IP address blocks:        103.9.51.0/24 maxlen: 24
                          103.81.162.0/24 maxlen: 24
                          103.195.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl
                          rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 20:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
        Validity
            Not Before: Oct  8 21:40:09 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac80db9-f75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:0b:2b:91:bf:26:29:3a:b3:b7:d4:a7:e4:
                    47:49:64:14:9c:a5:3f:a7:cf:8c:c2:db:a4:b9:45:
                    28:ad:33:54:d2:bb:a2:8f:25:fe:61:5f:4b:ba:7e:
                    39:45:58:2b:19:c7:d0:22:80:83:0c:e7:8f:ca:37:
                    ce:17:39:f7:5e:d7:d4:d6:e7:1a:7c:1c:99:68:78:
                    51:f5:f7:08:fd:93:14:86:22:fe:87:92:28:5c:53:
                    4d:ac:da:d1:d7:c0:6d:0e:4d:e4:da:81:b9:83:a5:
                    09:01:7f:30:6c:98:2c:fa:a1:92:17:48:59:2d:2c:
                    d7:32:c2:48:17:cb:40:61:1f:69:f7:a5:0f:ed:12:
                    ef:f6:1c:be:aa:49:d9:0e:9d:5c:d4:69:d3:20:bc:
                    ae:99:dd:ec:30:78:2f:e9:12:15:b6:73:04:ca:d2:
                    0d:23:0e:ee:61:ee:97:45:06:5e:9c:c0:55:09:dd:
                    8d:ef:bd:90:b3:74:a7:92:4e:65:3d:4e:c0:1a:41:
                    93:6c:58:fb:9e:78:fd:e8:ac:f8:6c:5c:06:35:1a:
                    ed:60:ce:0d:a3:e2:0f:29:74:04:66:19:86:0c:df:
                    a7:d1:f4:7e:d2:d5:f2:7e:07:72:be:e5:8e:a7:0a:
                    41:69:c7:98:f7:a1:73:f9:ab:d4:35:9d:a4:33:f0:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:3E:C0:78:23:55:0E:18:19:08:E6:7F:7A:E9:BF:11:86:1C:EF
            X509v3 Authority Key Identifier:
                keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/2FF4108A0C3911EB828BDC25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.51.0/24
                  103.81.162.0/24
                  103.195.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:0b:a0:86:a8:6e:0b:3f:c0:56:2f:56:73:91:22:46:f9:52:
         7f:94:d7:4f:1f:44:79:0a:aa:ed:c5:99:71:13:4f:fb:61:7b:
         06:eb:53:0a:20:46:2b:89:68:75:2a:e1:36:22:a0:b1:32:1b:
         ef:70:75:82:96:f4:a7:62:43:68:76:20:00:c8:04:5f:06:20:
         42:55:12:74:fb:ea:89:a8:49:ea:5c:c9:99:c0:69:93:8e:29:
         ac:10:04:5e:49:f7:9f:8d:93:ad:db:97:93:9c:41:0a:90:fb:
         69:6a:dc:d2:18:e9:b1:9f:f4:b3:c4:a9:b1:c2:5a:26:21:c7:
         42:bf:53:9b:d1:17:5d:47:c2:bd:d6:ba:2f:2c:c6:2a:ba:fb:
         30:8a:a5:c3:91:56:d7:a2:a9:0c:7e:c0:f7:74:a7:0a:3c:20:
         f2:8d:49:73:35:1d:29:b6:4c:27:61:c8:b6:1f:b5:33:c2:2f:
         a9:52:03:2b:dd:88:b1:ec:28:e4:5e:15:2f:34:84:eb:2f:4f:
         70:8d:50:c2:8e:0f:ef:e1:b1:23:e5:98:d6:ce:af:d4:9c:83:
         00:e2:0b:56:f0:47:8f:56:5c:e7:f7:0a:5c:29:22:2a:21:98:
         d4:3f:73:42:11:61:a1:f4:28:7d:62:92:aa:d0:12:cd:17:5d:
         e0:84:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:22:48 2026 by rpki-client