Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/A1861B9A998E11EEBD3C815CC4F9AE02.roa
File:                     A1861B9A998E11EEBD3C815CC4F9AE02.roa (raw, json)
Hash identifier:          +kQXw/qRrPGNahprc8/BS5Xb+p2pvbJfLqZYDeoy+yo=
Subject key identifier:   EF:94:CD:50:77:A4:AB:9C:8E:07:90:56:9C:B2:04:B1:78:F5:6A:1C
Certificate issuer:       /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541
Certificate serial:       01F5
Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/A1861B9A998E11EEBD3C815CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 11:29:44 +0000
ROA not before:           Tue 23 Dec 2025 02:22:35 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136479
IP address blocks:        103.255.204.0/24 maxlen: 24
                          103.255.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl
                          rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110724, serialNumber=81FF85ECAECC53DB74530860714559B7E5184541
        Validity
            Not Before: Dec 23 02:22:35 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a574a8-40f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e5:a0:d0:01:ea:3f:e8:ad:92:40:65:e8:3a:
                    ce:8d:d9:e3:2e:06:a4:e2:98:69:0f:9f:c6:44:bb:
                    33:7b:20:e5:f7:dc:d8:a7:af:73:a6:fb:35:22:22:
                    d6:c7:9e:06:65:01:1f:43:ce:94:f9:ef:42:b4:4e:
                    2f:2d:d1:6f:d8:ab:73:55:bf:96:53:dc:97:41:4d:
                    87:02:fd:91:6d:f0:33:e3:bc:71:ca:f1:d6:ff:b8:
                    84:9b:34:9c:8c:8d:1b:d8:47:c3:58:7c:90:62:db:
                    95:3e:8e:18:86:9f:e6:fa:e1:56:5f:f8:4a:fe:1b:
                    05:b9:ae:67:20:17:c1:a0:e6:be:49:d9:7f:7d:a6:
                    d6:fb:68:db:1d:dd:c8:0e:ab:c4:a9:41:de:b6:83:
                    5c:70:27:1b:3c:57:51:c0:40:b4:19:e6:53:82:cf:
                    de:31:45:8c:98:53:05:92:c6:a8:2f:77:7e:b6:1d:
                    6b:c1:7f:8f:b9:87:3f:e1:15:68:a1:2b:cd:6a:d4:
                    41:2d:a0:53:f3:37:05:8e:ff:e7:6f:12:55:c0:ac:
                    a7:52:05:62:da:3d:ed:62:38:fc:93:4f:e0:58:34:
                    6d:3d:55:56:ed:31:4d:7b:b4:8a:0c:a6:e6:3d:f4:
                    f6:4f:4a:dc:2d:62:8d:42:09:54:aa:e2:17:1e:ed:
                    4b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:94:CD:50:77:A4:AB:9C:8E:07:90:56:9C:B2:04:B1:78:F5:6A:1C
            X509v3 Authority Key Identifier:
                keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/A1861B9A998E11EEBD3C815CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:81:a7:13:ac:70:7d:d4:1f:07:d4:59:d2:f3:f1:79:e1:a5:
         78:a9:d8:5c:b7:71:14:27:fa:29:5c:56:8e:6e:11:28:05:a8:
         ef:78:c2:8b:64:43:74:ff:4a:75:a3:65:f7:ae:af:a1:87:21:
         e2:a5:fc:d2:d8:0e:52:18:4e:d2:19:00:54:3b:32:a2:78:c7:
         80:f5:15:12:37:a5:1c:20:62:5b:96:b0:d8:03:7d:8a:78:ee:
         ec:8e:0e:f3:1c:db:b3:8f:f5:0b:87:87:2d:94:98:3a:d4:b7:
         ea:7a:5e:17:ef:00:95:6e:33:6f:7f:59:da:50:b4:9d:1b:d8:
         91:e5:d7:82:8b:d9:50:81:ec:29:17:57:9c:0a:9d:22:59:10:
         3d:55:16:d2:54:7b:0c:9a:ad:05:8e:a4:f6:65:b0:4f:0c:b1:
         fd:15:34:37:a4:2a:bb:cf:f8:3f:99:5b:62:f7:f6:8a:cf:d7:
         08:a2:04:1d:9d:1d:62:d2:cd:d2:6b:7d:c5:46:93:0e:b6:de:
         cc:19:e4:9f:09:c4:ed:3a:a2:b8:a3:46:53:43:e0:30:17:71:
         c9:66:09:57:a7:7a:f2:34:51:4e:9a:fa:b4:18:ce:73:17:ea:
         a9:32:39:4e:7c:68:8d:96:1b:36:57:86:72:be:59:49:a8:99:
         98:6b:60:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:17 2026 by rpki-client