Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/41622F82F82E11F0BC7D9928396F56BC.roa
File:                     41622F82F82E11F0BC7D9928396F56BC.roa (raw, json)
Hash identifier:          5jC5+vB+RNAR1xgd8lYPtE5GXYcgqWVuOUMwuqN2UnY=
Subject key identifier:   C2:E9:D4:CF:A7:2E:46:40:5F:BC:E6:F5:23:F0:8D:D2:14:F0:8E:14
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       0AB6
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/41622F82F82E11F0BC7D9928396F56BC.roa
Signing time:             Thu 08 Oct 2026 20:39:26 +0000
ROA not before:           Thu 08 Oct 2026 20:39:26 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        103.207.164.0/24 maxlen: 24
                          103.207.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 19:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2742 (0xab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Oct  8 20:39:26 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac7ff7e-bc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:92:6d:27:70:a0:e4:f6:26:78:74:62:ab:c4:
                    2b:d6:37:70:e9:9c:ee:2a:eb:f9:05:eb:47:8f:57:
                    27:be:cf:e2:a1:4d:38:5d:7f:68:27:d8:73:c4:63:
                    e2:e6:76:de:75:54:d6:0a:e5:96:c2:3d:7c:ee:3c:
                    bb:f3:75:09:05:cb:8d:16:6b:2a:8f:91:b4:51:9a:
                    7f:4b:f7:2e:1d:cc:ec:9d:d9:60:e8:dc:c7:ba:a2:
                    3f:0e:7a:04:d9:75:29:d8:fa:76:d4:95:b4:d5:c4:
                    bf:7e:11:3b:e6:e0:ea:3c:f5:db:83:45:1b:61:c4:
                    42:e4:5d:48:ab:cf:d7:d6:cb:da:ff:06:2c:f1:d4:
                    52:71:a4:64:08:15:fe:00:37:c2:da:8b:37:08:41:
                    70:bf:f1:6e:c5:6c:f0:6d:4e:b3:a7:29:17:6b:93:
                    9e:4d:3d:e5:bd:d2:ae:18:be:d6:79:01:eb:3f:6b:
                    58:b8:76:c2:dd:3f:37:71:43:4e:8b:9a:11:8c:69:
                    43:da:b5:03:f1:1a:62:46:a7:4f:2b:94:fc:7b:c1:
                    e1:1d:e0:6d:7b:fb:66:a5:1d:ab:f1:4f:8c:00:2b:
                    db:9f:13:de:90:ae:89:3c:6c:e9:3c:67:0e:52:d6:
                    1e:4f:77:cd:7d:59:19:ab:f4:f7:2f:6e:87:a4:a3:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E9:D4:CF:A7:2E:46:40:5F:BC:E6:F5:23:F0:8D:D2:14:F0:8E:14
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/41622F82F82E11F0BC7D9928396F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.164.0/24
                  103.207.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:d2:44:98:9a:ec:bb:74:8a:39:3f:d0:0d:9f:3c:f6:29:
         75:e8:89:d0:13:0a:e7:e5:2d:a1:06:d2:13:01:5b:3a:2d:70:
         60:68:bc:80:dc:77:a9:88:c8:4f:64:b5:40:d3:da:d4:39:8e:
         4c:88:f2:f5:56:4b:c2:5a:42:0a:bd:14:76:8f:17:9a:f5:9b:
         6c:92:15:eb:84:74:26:1d:3f:7b:a7:86:a1:3e:69:0e:92:be:
         9b:69:33:bb:22:1f:e3:72:b5:ee:c4:19:68:e3:a0:43:8e:90:
         54:7a:2f:c2:34:ec:d6:84:6c:c2:02:60:9c:71:be:69:ea:94:
         0f:22:2d:d8:73:0d:ae:69:86:bf:03:62:a3:ba:cc:13:2f:e6:
         fc:eb:49:93:8b:d2:8f:0f:5a:46:ca:5d:dd:28:f3:69:24:ac:
         70:e2:d0:7d:c1:4f:12:cc:bf:90:99:05:c1:b9:ca:46:98:e0:
         db:72:73:e8:69:4b:57:db:7b:0a:c0:7a:ca:f0:86:a8:4f:a8:
         55:a6:97:1d:08:29:3c:f1:1a:25:eb:ea:eb:77:75:5c:b2:f3:
         92:84:9a:e8:96:96:64:5b:11:15:b3:f6:11:48:f2:df:06:56:
         63:10:71:26:7c:83:32:33:e4:97:ab:6b:5a:8d:28:44:b9:63:
         10:05:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 00:02:39 2026 by rpki-client