Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917135E/D6FFDC1ECF0211F19EE34E621F66CEF9/69F0BC64D05711F1A24D15EE0566CEF9.roa
File:                     69F0BC64D05711F1A24D15EE0566CEF9.roa (raw, json)
Hash identifier:          zkJFGTkyqXd7UxRHK5UiksSv4JnMhit61pj/CFPgZFY=
Subject key identifier:   1D:20:74:88:9F:97:F2:FB:08:5B:10:4D:6B:36:89:D7:31:B8:C6:12
Certificate issuer:       /CN=A917135E/serialNumber=C365AC4DCCA651FEECB618A88BC884BF8D7BC7AC
Certificate serial:       08
Authority key identifier: C3:65:AC:4D:CC:A6:51:FE:EC:B6:18:A8:8B:C8:84:BF:8D:7B:C7:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w2WsTcymUf7sthioi8iEv417x6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917135E/D6FFDC1ECF0211F19EE34E621F66CEF9/69F0BC64D05711F1A24D15EE0566CEF9.roa
Signing time:             Sun 25 Oct 2026 09:35:29 +0000
ROA not before:           Sun 25 Oct 2026 09:35:29 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     402298
IP address blocks:        103.104.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917135E/D6FFDC1ECF0211F19EE34E621F66CEF9/w2WsTcymUf7sthioi8iEv417x6w.crl
                          rsync://rpki.apnic.net/member_repository/A917135E/D6FFDC1ECF0211F19EE34E621F66CEF9/w2WsTcymUf7sthioi8iEv417x6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w2WsTcymUf7sthioi8iEv417x6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 09:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917135E, serialNumber=C365AC4DCCA651FEECB618A88BC884BF8D7BC7AC
        Validity
            Not Before: Oct 25 09:35:29 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6addcd60-6295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:6a:b5:c9:54:15:22:92:23:12:a8:9c:34:
                    3e:d7:db:9d:3d:97:78:38:29:54:a2:8a:f2:e3:5a:
                    5d:7e:8e:ee:1f:86:6a:d9:bf:90:03:37:45:a8:21:
                    16:6d:f8:bf:ec:12:46:ed:2e:60:8c:81:32:2e:c8:
                    9a:55:b7:73:2f:c3:32:6f:4b:5e:73:28:ff:2f:4b:
                    b1:7b:f3:e8:1a:9c:10:83:c4:13:bd:52:e1:b1:db:
                    d9:2d:63:41:57:3d:f0:00:90:dd:81:3f:16:1d:ef:
                    34:e1:d6:a7:44:f1:cb:8f:0a:54:41:1d:13:02:c2:
                    b7:0d:23:42:40:b9:08:66:5b:2e:19:34:2f:c2:0a:
                    f6:ef:00:71:73:9a:fe:69:db:93:46:53:d1:8e:51:
                    82:8c:d6:68:dd:86:5c:d7:0a:52:f8:a8:58:92:90:
                    b2:80:ed:8f:5c:bb:26:c0:d5:74:e5:d7:41:41:61:
                    f7:43:b2:df:9c:cb:8f:61:31:36:e4:36:66:e7:95:
                    53:de:53:05:37:48:bb:54:7a:a0:a0:f9:b2:b8:34:
                    22:8b:36:ad:33:bc:fd:54:8d:0e:6e:f5:77:5f:20:
                    45:5d:62:74:40:aa:24:11:db:f4:3e:29:bb:31:db:
                    c0:8c:46:ed:85:d4:24:4f:b2:33:ef:b2:c5:65:61:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:20:74:88:9F:97:F2:FB:08:5B:10:4D:6B:36:89:D7:31:B8:C6:12
            X509v3 Authority Key Identifier:
                keyid:C3:65:AC:4D:CC:A6:51:FE:EC:B6:18:A8:8B:C8:84:BF:8D:7B:C7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917135E/D6FFDC1ECF0211F19EE34E621F66CEF9/w2WsTcymUf7sthioi8iEv417x6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w2WsTcymUf7sthioi8iEv417x6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917135E/D6FFDC1ECF0211F19EE34E621F66CEF9/69F0BC64D05711F1A24D15EE0566CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:14:83:97:60:6e:e2:c5:14:e4:ba:1a:67:45:2b:fa:af:c8:
         b4:bb:c0:19:f9:42:c5:4d:05:71:e4:9a:b3:09:04:84:67:4d:
         92:8f:cf:be:cb:25:4f:16:83:9c:4b:cf:d3:03:22:45:4d:0c:
         62:3e:74:3b:c1:0d:d3:e0:3d:35:8b:06:cf:b4:3c:8a:de:07:
         51:09:be:36:8b:db:69:80:21:5e:26:1e:57:46:31:ad:70:c1:
         a9:08:f1:93:50:ce:3a:8a:7f:dc:cf:c5:5f:09:0a:1e:aa:58:
         c3:38:35:cb:f0:fb:ba:a2:68:8f:e1:cc:67:b6:89:0e:e7:65:
         fa:da:4a:21:95:3d:fa:1d:66:38:4f:45:4c:ef:97:95:8b:08:
         93:a5:be:69:c2:3b:4a:47:5e:5a:2a:23:b9:27:06:3f:f3:48:
         84:4f:60:cc:79:fc:45:d9:c3:39:e6:89:45:7b:85:72:89:02:
         39:4b:4e:3a:f3:45:ef:bf:41:54:b6:c8:18:fd:5f:8d:dc:c3:
         1c:9d:c5:3e:87:38:b7:c7:b7:72:69:90:ed:29:64:7d:d1:cb:
         f7:e3:10:ea:10:e6:01:3d:d3:91:01:fc:37:4b:5f:b3:cc:c3:
         55:2c:96:6e:9c:f3:b7:af:91:b6:a8:ee:db:ad:aa:ce:82:0d:
         f6:44:3d:cb
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MTM1RTExMC8GA1UEBRMoQzM2NUFDNERDQ0E2NTFGRUVDQjYxOEE4OEJDODg0QkY4
RDdCQzdBQzAeFw0yNjEwMjUwOTM1MjlaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZGRjZDYwLTYyOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsmWq1yVQVIpIjEqicND7X2509l3g4KVSiivLjWl1+ju4fhmrZv5ADN0WoIRZt
+L/sEkbtLmCMgTIuyJpVt3MvwzJvS15zKP8vS7F78+ganBCDxBO9UuGx29ktY0FX
PfAAkN2BPxYd7zTh1qdE8cuPClRBHRMCwrcNI0JAuQhmWy4ZNC/CCvbvAHFzmv5p
25NGU9GOUYKM1mjdhlzXClL4qFiSkLKA7Y9cuybA1XTl10FBYfdDst+cy49hMTbk
NmbnlVPeUwU3SLtUeqCg+bK4NCKLNq0zvP1UjQ5u9XdfIEVdYnRAqiQR2/Q+Kbsx
28CMRu2F1CRPsjPvssVlYXGBAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUHSB0iJ+X
8vsIWxBNazaJ1zG4xhIwHwYDVR0jBBgwFoAUw2WsTcymUf7sthioi8iEv417x6ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxMzVFL0Q2RkZEQzFFQ0Yw
MjExRjE5RUUzNEU2MjFGNjZDRUY5L3cyV3NUY3ltVWY3c3RoaW9pOGlFdjQxN3g2
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdzJXc1RjeW1VZjdzdGhpb2k4aUV2NDE3eDZ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTM1RS9ENkZGREMxRUNGMDIxMUYxOUVFMzRFNjIxRjY2Q0VGOS82OUYwQkM2NEQw
NTcxMUYxQTI0RDE1RUUwNTY2Q0VGOS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnaMYwDQYJKoZIhvcNAQELBQADggEBAKQUg5dgbuLFFOS6GmdFK/qv
yLS7wBn5QsVNBXHkmrMJBIRnTZKPz77LJU8Wg5xLz9MDIkVNDGI+dDvBDdPgPTWL
Bs+0PIreB1EJvjaL22mAIV4mHldGMa1wwakI8ZNQzjqKf9zPxV8JCh6qWMM4Ncvw
+7qiaI/hzGe2iQ7nZfraSiGVPfodZjhPRUzvl5WLCJOlvmnCO0pHXloqI7knBj/z
SIRPYMx5/EXZwznmiUV7hXKJAjlLTjrzRe+/QVS2yBj9X43cwxydxT6HOLfHt3Jp
kO0pZH3Ry/fjEOoQ5gE905EB/DdLX7PMw1Uslm6c87evkbao7tutqs6CDfZEPcs=
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:50 2026 by rpki-client