Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/9214C504866B11F1B59AC46559A30FBC.roa
File:                     9214C504866B11F1B59AC46559A30FBC.roa (raw, json)
Hash identifier:          PKpuhb4M98ARjSEMGpUjMgur8F0nIRfmcPaLdM0IzXo=
Subject key identifier:   7E:03:92:BD:BD:1C:CE:55:22:7B:EB:8F:07:E2:7A:DB:51:5E:59:50
Certificate issuer:       /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Certificate serial:       03AF
Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/9214C504866B11F1B59AC46559A30FBC.roa
Signing time:             Thu 03 Sep 2026 00:53:18 +0000
ROA not before:           Thu 03 Sep 2026 00:53:18 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63969
IP address blocks:        103.23.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
                          rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 00:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
        Validity
            Not Before: Sep  3 00:53:18 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98c4fe-69ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8d:b0:b9:a9:92:c1:ab:e9:2f:34:9e:6e:3c:
                    7d:40:53:fa:38:44:3c:a2:16:c3:03:17:36:a7:2c:
                    60:d6:7b:02:7b:38:7a:95:4f:86:4b:84:48:20:a9:
                    6c:0c:6e:b3:44:a3:4e:22:10:7d:0d:4d:9f:0b:29:
                    97:c3:51:77:97:f7:fc:6e:73:6a:13:0f:c4:5a:aa:
                    7c:5e:20:ee:cf:7f:5e:13:b1:0d:56:c0:53:58:ac:
                    c6:6e:53:f7:90:9f:42:57:22:39:ee:57:82:23:ff:
                    9b:09:a8:d5:34:e5:2a:6f:72:6f:c1:f1:75:80:ac:
                    fd:dc:03:00:4e:e3:58:c6:cb:03:9b:f5:d0:ec:7e:
                    05:83:26:22:9c:1d:ec:ae:87:5c:df:a6:c2:7e:f9:
                    45:06:53:a8:67:ad:82:b8:75:ae:24:60:90:4f:1b:
                    55:c1:e1:2a:ac:8b:04:2a:cf:4f:ea:a7:40:3d:ef:
                    f7:43:ae:d4:23:2e:17:d4:f9:c0:c2:38:89:14:78:
                    c0:0c:ce:ec:80:1c:a3:f0:c0:0a:7b:28:ca:32:6d:
                    47:24:64:cc:d4:ee:b5:81:9c:b1:f1:ec:41:af:7b:
                    c1:31:8a:8c:f5:02:c9:05:b3:83:6b:b1:ca:1d:b4:
                    54:ee:6a:dd:ad:17:8d:af:38:40:06:7d:2a:bd:4e:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:03:92:BD:BD:1C:CE:55:22:7B:EB:8F:07:E2:7A:DB:51:5E:59:50
            X509v3 Authority Key Identifier:
                keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/9214C504866B11F1B59AC46559A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:1f:61:bf:17:b3:4f:60:3b:c2:55:c8:ff:a5:97:02:d0:e9:
         82:28:bb:36:d7:7c:d9:2c:ce:aa:a5:2b:24:10:4b:1e:58:62:
         eb:a1:4c:a5:3b:3a:95:ae:72:cb:98:4c:d8:cf:1e:7c:b7:72:
         0d:f1:43:1e:14:b9:71:59:18:15:00:8a:45:6f:59:46:35:ba:
         ea:fc:f1:20:0b:5b:56:4f:06:cb:f6:58:ad:f5:1b:da:7d:95:
         79:56:89:da:24:0e:46:0c:e0:cb:4a:f7:f5:a4:f6:48:e5:7c:
         f9:a9:37:22:ad:f5:b3:8f:e7:aa:08:5b:1e:f0:62:bc:0f:2e:
         66:bc:c6:3a:b6:e6:69:0a:63:23:4b:0b:fb:82:59:d7:78:2f:
         65:18:4f:37:ea:70:ea:b9:d4:9c:25:51:a8:34:89:e0:ad:68:
         97:7a:c1:7f:66:12:f4:8d:99:3e:db:9e:bb:4d:42:32:41:59:
         a8:8b:05:9d:06:a1:62:0a:a5:d0:c0:c4:c0:a8:40:86:96:a7:
         56:c5:1a:2a:b9:46:6c:cf:3f:c4:40:f5:3c:a2:26:34:6a:61:
         3a:ef:9f:a6:15:58:9a:9d:1c:48:07:6e:22:e4:dd:5c:01:0f:
         f3:3f:eb:21:aa:c4:f9:bf:7f:7c:65:0b:65:1f:c2:b0:4d:34:
         03:fd:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:20:56 2026 by rpki-client