Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/97D17BA4194711F18841C18A3C3D8C67.roa
File:                     97D17BA4194711F18841C18A3C3D8C67.roa (raw, json)
Hash identifier:          G9FTcA78z8lYSN5iDw1bEGcVt2QgfZeeUD8w66izcuA=
Subject key identifier:   C1:CF:13:04:84:70:CD:6B:E5:B3:5E:E5:42:B8:EB:78:64:5D:D9:E7
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       03C5
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/97D17BA4194711F18841C18A3C3D8C67.roa
Signing time:             Fri 06 Mar 2026 10:31:11 +0000
ROA not before:           Fri 06 Mar 2026 10:31:11 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     200658
IP address blocks:        103.189.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Mar  6 10:31:11 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69aaacee-cba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:b3:a8:88:29:a1:55:2c:b8:a4:4d:d1:8b:
                    24:ad:30:a6:08:0c:f9:98:4b:60:dd:c6:e7:b5:d7:
                    e5:d3:23:80:10:f3:1d:eb:dd:c8:88:e6:79:4e:7a:
                    d4:4e:df:f1:14:02:96:50:e6:ed:06:ea:cf:79:f4:
                    a0:ab:73:af:a0:ec:62:09:12:26:a0:4b:70:7b:bd:
                    cc:6c:59:bd:3e:af:8c:46:25:7c:55:23:5d:4b:b4:
                    d6:3e:d1:ee:e8:ae:b2:bc:f0:ec:7c:24:6b:54:83:
                    10:34:73:4b:dc:30:bc:4a:82:ed:47:15:9d:d6:3a:
                    25:d4:f9:87:f4:d3:e7:07:d5:51:c9:a2:02:ac:3b:
                    38:a3:9b:05:64:78:a4:66:aa:ec:86:41:82:a1:bf:
                    62:ba:e3:36:38:54:b3:1b:6a:fe:52:0d:01:83:24:
                    57:b4:25:73:16:72:ca:10:df:70:d4:30:2b:02:a0:
                    89:84:af:89:4d:2e:4c:9d:85:05:09:01:fd:bd:7b:
                    ba:f8:7e:21:0c:8f:a4:69:d5:a2:5a:e7:80:12:37:
                    23:2b:d2:58:54:42:33:9b:e6:6c:ec:5a:83:34:de:
                    dd:28:96:28:9c:f3:e2:25:72:6a:dc:61:be:bd:3f:
                    b4:cc:9e:69:c5:de:2b:50:d4:c2:b6:57:5c:8b:78:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CF:13:04:84:70:CD:6B:E5:B3:5E:E5:42:B8:EB:78:64:5D:D9:E7
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/97D17BA4194711F18841C18A3C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:a5:2f:9f:bc:8e:15:bc:d4:a6:a0:f6:68:24:f0:f8:a9:c1:
         6c:41:62:03:4f:64:95:21:4f:2d:26:ef:81:d3:aa:17:c1:45:
         25:7b:0d:94:ae:4e:84:31:bf:f4:e1:25:69:b8:49:b9:f5:03:
         7d:d8:6b:3f:b2:b5:19:ce:24:e0:05:d3:d6:21:f1:f4:d6:29:
         46:8f:d6:2b:b8:ba:74:48:e0:97:96:74:7a:0d:e6:ca:50:5d:
         c9:09:af:ad:ee:f5:fb:a9:d7:d2:c0:5d:fe:45:e5:2e:bd:bf:
         c3:4c:6a:c8:f1:ff:2b:1b:c7:60:8f:e9:80:06:11:c7:7e:d4:
         7e:84:6a:fc:8f:2a:aa:8e:49:05:5e:ef:1b:73:9e:fc:6d:1d:
         ed:5f:58:43:23:14:06:01:c4:c7:2d:9d:ec:7d:ba:12:90:7d:
         f9:b0:e1:d6:a7:69:23:23:c9:81:38:d2:0b:d2:f2:49:6d:70:
         0c:e6:86:4e:98:f4:e7:33:87:1b:20:50:54:42:b5:f6:a5:20:
         1b:e6:3a:5f:b8:a7:2e:47:cb:f9:13:fb:22:3f:c6:ea:ce:81:
         78:ef:5c:4d:fc:65:14:f9:8e:33:3f:81:ff:d4:7e:73:a8:c1:
         4f:ab:5e:b5:e5:6a:a5:a9:ef:01:32:db:3a:92:10:c8:48:2a:
         2e:d3:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 04:44:41 2026 by rpki-client