Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/7BFE665EE17F11EF9536DC48C4F9AE02.roa
File:                     7BFE665EE17F11EF9536DC48C4F9AE02.roa (raw, json)
Hash identifier:          PEc8Q36ZmFJmCyC4ydlSensDrscyZNlNt/tGuMlxL2g=
Subject key identifier:   CB:DD:9D:C5:9C:DC:37:0C:2C:4F:D5:D2:CC:25:CF:73:4D:95:73:F0
Certificate issuer:       /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial:       025A
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/7BFE665EE17F11EF9536DC48C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 02:53:00 +0000
ROA not before:           Sat 29 Aug 2026 02:53:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149765
IP address blocks:        103.238.216.0/24 maxlen: 24
                          103.238.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
                          rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
        Validity
            Not Before: Aug 29 02:53:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a92498c-90de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:e0:8e:33:4f:a7:99:27:96:88:00:5a:28:
                    37:f9:85:3d:70:1f:d2:c1:ca:73:4b:20:d3:e7:a7:
                    2d:07:e4:4a:d6:be:03:02:25:1e:71:09:9e:77:37:
                    ba:66:4d:68:c7:72:0a:49:ed:d7:28:c2:b9:e2:37:
                    21:94:30:5e:47:b1:28:7f:63:5e:46:a1:f3:f3:01:
                    6d:60:b3:86:50:ea:7d:f1:98:a6:24:69:d3:4f:96:
                    59:aa:a6:ab:e6:bc:93:a2:d3:27:e0:c2:c6:13:4a:
                    7f:c8:36:d1:21:fe:10:59:7b:12:7c:9b:c6:81:7c:
                    4e:05:38:3c:d0:36:18:cf:be:86:fe:54:72:27:ab:
                    50:0f:c3:4a:96:4c:80:16:9e:e4:98:9b:8a:0e:71:
                    68:55:70:51:e6:6e:07:f5:d4:27:59:cb:eb:83:9a:
                    ce:04:e0:f0:fe:e8:b0:2b:5d:9b:f7:4b:ef:ea:ee:
                    97:ea:6a:5d:32:88:e2:10:24:9b:a0:05:36:93:6a:
                    70:f9:f0:fc:1c:68:0a:97:4e:a4:aa:83:4f:37:42:
                    1a:58:37:fe:86:0c:00:ce:d2:ab:d8:14:35:fd:e8:
                    b2:ee:1a:2e:84:d4:ff:93:d8:c9:36:49:a8:69:85:
                    5d:5b:39:de:f5:b6:50:17:98:3d:13:dc:d0:35:33:
                    df:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:9D:C5:9C:DC:37:0C:2C:4F:D5:D2:CC:25:CF:73:4D:95:73:F0
            X509v3 Authority Key Identifier:
                keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/7BFE665EE17F11EF9536DC48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:45:ac:64:96:9d:12:7a:14:58:71:48:37:ce:1e:13:3f:97:
         ca:76:5b:16:06:7a:08:cf:4e:2f:72:f8:4e:ec:89:ea:22:14:
         3b:15:75:3c:1f:3d:b0:bf:c6:3d:49:ce:6d:81:05:2e:1e:78:
         8c:8e:85:0c:41:16:c3:af:bd:69:d8:95:38:56:49:5f:42:8e:
         f4:eb:39:a0:e5:1a:99:c6:b4:5e:49:6e:e6:c5:c3:cb:92:19:
         07:9f:a4:0c:cd:da:4d:ca:0e:6c:a0:a1:2e:79:91:b3:9a:6c:
         65:d3:dd:f4:11:ca:a9:27:09:86:17:0a:c1:26:88:26:8f:93:
         38:0f:5b:94:a4:78:c7:f6:7d:78:54:54:e1:44:84:cc:b3:92:
         6b:95:8e:b4:ec:fd:5a:5b:e0:fe:47:5d:d9:4e:29:07:c4:9b:
         b3:37:0f:77:da:42:4b:ef:33:4b:12:e8:e3:76:49:9d:51:3a:
         ae:5c:a4:1e:5d:87:76:57:2e:2e:71:33:60:45:6c:b0:01:8e:
         f7:d0:fd:b5:c7:51:5f:7d:e5:5c:67:f4:33:81:d7:ef:7b:38:
         77:d9:74:b3:57:6b:30:e6:cb:54:84:c6:e1:77:86:31:9b:9b:
         3c:12:cb:73:5a:73:28:9f:23:b0:dc:3b:e9:8b:03:c2:9f:09:
         3c:f0:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:37:51 2026 by rpki-client