Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/95C64BC0A20C11F1978F0A1A4811F970.roa
File:                     95C64BC0A20C11F1978F0A1A4811F970.roa (raw, json)
Hash identifier:          wL66YNVnRgEwAMiQSYr0PpdCCahvdrdoToc9iJC1nx8=
Subject key identifier:   A5:3E:91:79:58:1E:2B:8B:D0:F9:89:7D:5D:E2:3C:50:9C:F9:56:35
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       0442
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/95C64BC0A20C11F1978F0A1A4811F970.roa
Signing time:             Thu 27 Aug 2026 11:43:56 +0000
ROA not before:           Thu 27 Aug 2026 11:43:56 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133551
IP address blocks:        103.209.76.0/24 maxlen: 24
                          103.209.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 00:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1090 (0x442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Aug 27 11:43:56 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a9022fc-b83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:f7:e7:3a:aa:02:4f:12:97:fc:e2:a9:1e:
                    80:8c:a1:db:14:a5:6f:12:f8:1b:ba:c7:f8:cf:98:
                    3f:f4:cc:60:07:5b:b6:f6:fd:c8:59:e0:16:bc:2a:
                    71:36:4b:bd:58:e2:e3:eb:c3:71:f3:55:d9:38:e1:
                    3a:35:86:b2:f1:de:57:2d:d3:91:ae:fb:9a:c3:f7:
                    18:84:57:42:bd:10:80:ea:b2:f1:d2:88:ac:31:f3:
                    56:e0:95:e9:53:86:90:9c:13:23:28:c5:d2:ce:42:
                    34:53:6a:e1:77:f0:7c:55:86:50:81:49:60:63:ee:
                    d3:b6:d1:01:29:96:53:5a:48:16:1b:6f:b7:3a:04:
                    59:c0:f6:e7:d0:e6:a7:ea:3b:36:b5:0d:7b:6e:61:
                    ca:e9:ce:25:6f:8a:f9:1c:53:30:56:f7:21:13:74:
                    3e:10:3c:08:75:45:ce:37:45:4d:06:05:e3:6f:54:
                    88:08:1a:26:75:81:fe:d3:00:d5:4e:1d:9b:52:0d:
                    3b:86:22:e3:89:59:67:fa:9e:00:0a:e0:c6:85:c7:
                    d9:1c:9f:b3:f7:4c:90:fe:ec:32:22:18:0f:11:9e:
                    b9:8e:bc:eb:2c:2d:5b:ac:65:39:f1:72:9d:cc:93:
                    c8:b2:89:c8:41:73:a2:26:57:1d:d9:be:b3:c7:0f:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3E:91:79:58:1E:2B:8B:D0:F9:89:7D:5D:E2:3C:50:9C:F9:56:35
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/95C64BC0A20C11F1978F0A1A4811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.76.0/24
                  103.209.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:97:cb:df:40:fa:ca:57:bf:9c:26:ff:7d:7b:d8:27:a1:07:
         a6:46:0e:64:54:1f:f6:9a:9b:c7:1e:0c:f6:e8:65:22:39:87:
         b5:c5:5d:15:89:2d:bb:2d:70:cd:2d:2a:69:8b:c6:8e:1a:3a:
         44:fc:c7:75:b8:9a:5b:e3:67:4d:55:6b:6a:13:c7:12:23:61:
         eb:c1:a4:cf:f1:50:b5:45:b6:ea:2b:cd:e3:33:ac:58:a2:db:
         55:d0:a0:d1:d5:8d:5a:28:13:51:7a:18:ae:51:be:0a:ee:eb:
         24:c2:d0:4f:0a:fd:98:15:34:81:a3:b2:40:58:5f:21:87:b1:
         c8:10:a5:20:93:b6:1e:e6:0a:8a:36:4e:9f:f6:73:52:f4:59:
         c9:9e:81:73:cd:e1:2a:e2:75:a0:c1:18:e0:c2:ae:4f:fc:fa:
         bd:79:9b:36:85:c9:42:04:7f:fe:75:43:e0:b5:b5:ac:83:73:
         91:e9:f3:f9:f8:fe:e8:9f:28:7c:dc:a6:41:27:81:aa:19:40:
         c0:ee:bb:56:79:19:fc:b9:99:7a:6a:ce:6d:8f:f5:e7:0c:09:
         4a:8f:d5:f6:42:5b:1a:a9:d4:50:43:0b:f4:fd:bf:55:5b:4e:
         84:50:d6:e4:27:6a:5c:22:35:3f:7a:80:8e:13:07:7a:f5:e9:
         87:b0:e7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:11:30 2026 by rpki-client