Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/410BAD2095F011EFA9137C67C4F9AE02.roa
File:                     410BAD2095F011EFA9137C67C4F9AE02.roa (raw, json)
Hash identifier:          zYt9aMZ+O8CRpxULcPzMchvE4WlyLPK1U5WVZqzWIF0=
Subject key identifier:   C0:1E:A3:89:64:8E:81:A3:AE:55:77:82:6C:1A:B3:20:0B:32:30:5F
Certificate issuer:       /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial:       0C07
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/410BAD2095F011EFA9137C67C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 19:37:59 +0000
ROA not before:           Thu 30 Jul 2026 19:37:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135564
IP address blocks:        103.66.24.0/23 maxlen: 24
                          103.125.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
        Validity
            Not Before: Jul 30 19:37:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6ba816-39b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:6a:8f:f6:ee:3c:69:5a:15:7d:8d:dc:37:
                    8c:98:2f:d4:9b:87:2e:52:12:44:08:1f:e2:ff:6a:
                    e6:c4:5f:04:d3:29:e8:5d:90:d3:2c:33:88:29:b3:
                    ee:0c:fe:45:dc:a9:dc:07:8c:65:4d:43:24:6a:fe:
                    03:3c:90:f7:54:c2:79:6e:3f:78:f3:eb:6e:b4:19:
                    b4:3f:53:bf:0c:d6:f5:d4:02:a7:50:4b:08:a0:29:
                    22:b6:5d:da:ad:29:05:da:0b:a1:2c:c4:b2:9e:e7:
                    e7:71:a5:68:2f:f0:7a:0e:97:d9:9a:ea:46:ac:76:
                    b0:a8:df:81:07:0e:0e:8c:99:e6:ee:37:fb:80:de:
                    59:0c:9b:50:82:c8:ef:b4:ca:20:27:62:de:ec:3a:
                    c3:74:2a:37:b1:dd:1e:aa:31:7a:22:39:d4:aa:9b:
                    c4:49:ef:23:c0:d4:d3:a5:f8:42:59:4e:01:25:2c:
                    8e:24:21:77:a8:3d:32:a6:bb:7b:92:b9:d1:49:00:
                    b7:2a:ac:38:ce:12:35:a2:2b:43:c7:b5:d9:00:b9:
                    a7:bf:48:0f:c6:cd:59:56:75:56:45:57:23:ba:f8:
                    0f:70:64:b3:c8:cd:fc:02:db:4a:08:59:58:4d:f5:
                    48:7d:28:cc:77:62:99:f4:94:e8:fa:e1:7c:c0:6c:
                    11:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:A3:89:64:8E:81:A3:AE:55:77:82:6C:1A:B3:20:0B:32:30:5F
            X509v3 Authority Key Identifier:
                keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/410BAD2095F011EFA9137C67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.24.0/23
                  103.125.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:6b:80:7f:8a:d9:2a:67:84:92:2e:9f:a3:62:07:99:61:08:
         18:74:ed:7b:52:d8:77:35:e5:22:5d:80:67:77:30:04:9e:e7:
         9b:98:79:46:42:ee:b6:32:70:2b:42:c5:86:93:f4:ea:7a:a3:
         b7:6a:36:27:86:95:44:9b:c2:fd:22:66:35:83:7f:66:bb:69:
         79:1e:c1:96:b8:87:8b:95:30:04:e8:3b:7f:6a:01:98:60:67:
         63:bf:00:fd:09:35:b8:17:e4:fd:2d:2b:42:3a:6f:07:e9:00:
         92:08:f9:86:74:d2:a9:c4:a5:57:a0:06:da:a7:00:72:33:d7:
         9b:30:c5:4f:d8:5e:5c:63:d1:4a:83:01:22:f0:42:7a:a5:20:
         02:9d:be:7b:c5:06:fc:19:c6:7a:6d:9a:47:58:a2:dd:64:8f:
         20:eb:cb:c4:83:97:6f:0e:79:87:9f:4f:83:63:da:04:12:75:
         ab:96:e3:43:bc:94:91:25:ed:b5:04:34:98:a7:f2:7e:bc:80:
         e4:b6:47:24:b0:d4:9e:a5:ea:e8:1c:fe:ed:14:5c:47:7a:bd:
         87:27:7d:35:49:ad:cf:0b:8c:30:ce:3a:ed:62:17:f7:01:fd:
         9e:d5:26:b8:1e:d0:bb:52:89:01:1c:d8:0d:4b:bd:40:1f:50:
         33:65:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:59:23 2026 by rpki-client