Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/7BFE665EE17F11EF9536DC48C4F9AE02.roa
File:                     7BFE665EE17F11EF9536DC48C4F9AE02.roa (raw, json)
Hash identifier:          lbzUGxCxVXNgaorxa3WAftNPLQlIRU8KXF9/ol/bmFU=
Subject key identifier:   1E:64:5C:30:73:06:A8:52:7C:C4:64:39:45:76:E2:F3:E0:05:36:1C
Certificate issuer:       /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial:       01FA
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/7BFE665EE17F11EF9536DC48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:21:28 +0000
ROA not before:           Wed 27 Aug 2025 04:08:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149765
IP address blocks:        103.238.216.0/24 maxlen: 24
                          103.238.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
                          rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
        Validity
            Not Before: Aug 27 04:08:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a43d58-306a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:a2:1f:61:41:37:94:84:37:6b:0a:ba:c8:
                    b1:f3:09:a5:e6:1d:20:f0:74:1e:9b:fe:bb:42:1c:
                    57:aa:6f:4b:fd:ef:64:f2:2b:8d:7a:d5:f3:dd:80:
                    c8:f3:57:59:ba:74:9e:e6:64:30:90:82:44:15:23:
                    2a:5e:94:92:40:30:af:13:6a:ea:5a:de:24:fb:c3:
                    a3:f4:6c:b0:59:de:1c:fd:0a:c6:23:c8:1d:8d:fe:
                    e8:ca:3c:a5:d7:56:71:d1:41:95:dd:80:b1:d4:72:
                    77:8f:ab:11:3b:e3:d4:e5:90:5d:d6:f6:b9:9a:24:
                    59:b6:62:4d:eb:36:fa:2c:53:07:74:33:db:62:a1:
                    59:d8:9f:78:29:95:3e:1a:4e:5c:c4:db:78:50:df:
                    1f:0d:72:23:4d:a6:81:a1:0c:44:a0:e1:0d:46:01:
                    bc:54:99:1e:fa:0f:64:d7:a4:19:21:c1:26:bc:bf:
                    99:9f:bc:4c:ab:a6:82:f3:ff:55:cd:ab:aa:26:7b:
                    e7:a7:68:a7:79:4e:87:d6:02:15:16:e2:a6:64:14:
                    3a:ed:f2:93:f0:28:7e:35:69:f5:50:d7:72:2a:a9:
                    f2:79:cf:7d:e0:47:19:9d:0f:fe:39:e7:bb:c8:f5:
                    6f:fa:e8:c4:db:9d:bd:31:1f:75:81:e1:5b:43:db:
                    0d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:64:5C:30:73:06:A8:52:7C:C4:64:39:45:76:E2:F3:E0:05:36:1C
            X509v3 Authority Key Identifier:
                keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/7BFE665EE17F11EF9536DC48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:2c:cd:2b:d5:14:b3:f5:2f:ef:37:3c:1d:72:44:53:07:c6:
         c8:77:02:1a:be:28:c1:d9:f1:9c:23:00:ff:c8:2a:ea:e9:c7:
         20:64:bd:6e:cf:49:0e:b9:d7:2d:a0:cb:aa:f8:a6:00:09:37:
         c7:04:5d:e7:0e:d4:21:f6:15:91:8b:5c:fd:5d:45:61:d3:ee:
         ff:85:06:38:a4:fd:f4:23:cc:30:61:92:8b:d2:17:ec:d6:dc:
         84:28:7b:68:a5:16:e7:e1:d0:68:66:29:72:4c:ce:19:bc:76:
         88:50:31:d2:1d:9d:60:fe:18:bf:13:ee:87:7d:cd:55:9a:22:
         1d:d5:71:27:65:91:1a:87:fe:4d:38:fa:fd:ff:75:8d:e4:03:
         0c:15:9b:64:c3:34:3c:a1:8d:27:7f:8e:52:6b:36:72:56:6b:
         d9:83:70:2f:f9:1d:c4:94:13:cc:e5:ef:69:83:1d:b6:ff:6e:
         e0:9d:e6:58:c4:dd:f2:20:8d:7e:bb:42:79:5d:7d:d1:0e:f7:
         ca:60:66:61:e3:58:e3:91:83:31:85:ae:00:35:b4:ca:94:53:
         cf:18:e3:f9:32:ae:6a:8d:10:c8:9f:4b:70:9a:00:4e:f5:bc:
         36:26:37:f9:77:71:da:30:ea:4f:c0:e3:4b:f7:8f:a2:d5:1e:
         b3:b5:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:30:44 2026 by rpki-client