Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/1B54858065B711EE93D6ED6DC4F9AE02.roa
File:                     1B54858065B711EE93D6ED6DC4F9AE02.roa (raw, json)
Hash identifier:          fsfmLYQjCYyXbWH64txVnYTeAdLVUPvTMFUvd9WCSAg=
Subject key identifier:   35:21:D3:C9:29:11:7B:F4:35:F8:83:B0:6A:EC:8A:41:C7:78:20:05
Certificate issuer:       /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial:       0D54
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/1B54858065B711EE93D6ED6DC4F9AE02.roa
Signing time:             Mon 24 Aug 2026 18:36:05 +0000
ROA not before:           Mon 24 Aug 2026 18:36:05 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137449
IP address blocks:        103.114.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
                          rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 18:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3412 (0xd54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
        Validity
            Not Before: Aug 24 18:36:05 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a8c8f14-39f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:d6:1e:e3:a8:7e:bc:d3:42:47:be:ee:a1:
                    7d:f2:0c:a3:c4:a0:41:70:76:55:80:9f:2e:58:b7:
                    fc:94:1b:59:a0:a5:ce:81:0f:d6:3a:5e:93:5f:f2:
                    f0:ba:de:0e:b9:17:6b:19:88:2a:26:ca:48:24:42:
                    8b:3d:eb:06:94:ac:b9:90:36:dd:cc:84:3a:07:ce:
                    a5:fd:c0:6b:db:e1:72:59:b0:cc:62:a2:5e:d7:6b:
                    b1:4a:26:4b:f2:0b:b5:c4:df:03:57:ed:60:ca:91:
                    f6:37:18:d9:dd:88:35:8f:01:3c:dc:21:dd:e1:62:
                    90:ee:20:b3:c8:fa:f1:3b:83:8f:38:1a:a2:cf:30:
                    0b:7e:a7:a0:fd:f3:9f:3c:e2:1a:81:de:1f:6b:74:
                    64:e2:7d:a8:3b:3d:e8:90:76:66:7d:e7:32:cc:2e:
                    da:d5:b2:12:44:33:2a:22:4e:0d:26:7a:ca:de:d8:
                    15:99:24:5c:31:5d:39:8e:10:98:2d:6c:0d:b6:e6:
                    68:5b:1c:8e:04:64:99:24:a1:65:99:19:00:c1:02:
                    e7:69:ba:94:d9:8a:21:3e:3d:84:ed:9f:86:b6:12:
                    04:47:2f:57:85:f6:d5:1e:89:67:fd:41:60:a9:5a:
                    b8:68:2c:ef:a4:b8:25:1c:c7:35:e9:51:9f:5a:0f:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:21:D3:C9:29:11:7B:F4:35:F8:83:B0:6A:EC:8A:41:C7:78:20:05
            X509v3 Authority Key Identifier:
                keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/1B54858065B711EE93D6ED6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:57:a1:54:ed:4c:4a:d2:b9:b4:f0:55:68:fc:f7:7e:86:76:
         f6:3f:05:cc:00:cf:74:5c:5d:2d:a6:30:90:a6:ce:b9:5e:57:
         03:02:b2:24:59:ec:6f:43:70:f3:8e:9d:2e:07:4f:42:c7:e9:
         40:45:65:60:54:f6:8b:31:a8:0a:63:98:22:96:93:e7:38:25:
         b3:ab:c4:80:d1:bf:8d:2e:07:45:ae:35:d3:0c:ec:41:5f:22:
         d9:0f:00:16:e8:92:fb:c3:80:f7:c3:a6:b9:69:7c:84:b7:9c:
         c0:0d:ac:e8:1d:02:57:a2:ea:09:c2:de:be:ce:59:03:49:10:
         11:a1:a9:a2:09:1b:ab:1d:30:fb:10:5d:47:2a:ba:bf:1d:7b:
         e0:8e:f9:29:b0:cf:3d:18:15:69:46:15:01:df:12:73:c6:95:
         c2:17:62:06:12:a8:c8:b1:57:d9:ea:62:08:de:88:f5:f4:f4:
         7f:7f:9d:cb:15:5d:ac:e5:f3:95:4a:6a:b8:80:e6:b0:e8:d3:
         3e:2d:25:b9:d0:0f:cb:ec:97:09:7b:d2:6b:87:6e:cf:74:d3:
         9f:7b:66:2e:7f:eb:06:24:74:15:8a:e7:5a:c1:fb:de:fb:b3:
         da:14:be:91:d9:c8:b3:a8:77:d9:eb:c9:d8:c5:5b:17:e1:4a:
         e0:96:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:55:46 2026 by rpki-client