Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/197CE9C2C0C111EE84A55128C4F9AE02.roa
File:                     197CE9C2C0C111EE84A55128C4F9AE02.roa (raw, json)
Hash identifier:          pv+TSjOIdZ7NDrJ4z58kpSpDp3kbno6S26qXS1oFNpk=
Subject key identifier:   92:E6:DC:8B:AA:E1:46:D9:B5:35:B8:AB:89:50:84:20:13:EF:68:06
Certificate issuer:       /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial:       032A
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/197CE9C2C0C111EE84A55128C4F9AE02.roa
Signing time:             Tue 03 Nov 2026 01:49:56 +0000
ROA not before:           Tue 03 Nov 2026 01:49:55 +0000
ROA not after:            Mon 01 Mar 2027 00:00:00 +0000
asID:                     140077
IP address blocks:        103.24.16.0/23 maxlen: 23
                          103.24.16.0/24 maxlen: 24
                          103.24.17.0/24 maxlen: 24
                          2001:df1:6e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
                          rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
        Validity
            Not Before: Nov  3 01:49:55 2026 GMT
            Not After : Mar  1 00:00:00 2027 GMT
        Subject: CN=6ae93dc3-c330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:f2:db:ae:6c:53:d8:77:fa:13:3e:94:0f:
                    93:6c:6c:f2:7f:7c:d0:fa:40:a7:5f:9f:83:e9:e6:
                    29:20:b2:78:9f:a8:c0:00:ea:69:78:5c:ca:5a:dd:
                    fa:08:d1:8c:93:19:d5:fb:14:98:8d:bd:1f:8e:c4:
                    4e:15:e5:37:c0:74:ff:b6:cc:1d:91:80:da:89:06:
                    d9:ff:94:b7:89:f0:6e:bd:cd:f0:fe:b4:3c:9c:e7:
                    21:bc:09:04:e0:ff:46:89:06:f8:1c:3a:2e:0e:24:
                    a1:f4:c9:14:1e:9d:fc:ff:b1:e4:d8:1a:04:6d:a3:
                    60:81:d1:c9:0b:ac:5d:e2:f3:09:a0:6b:e6:9a:29:
                    95:51:78:81:d1:83:5a:3a:e2:b8:e5:0f:10:75:8f:
                    bf:50:94:f5:be:af:21:15:fa:a3:94:a3:77:2d:0f:
                    95:06:da:49:76:95:97:85:01:a4:19:ff:ea:52:53:
                    52:8b:97:5d:6d:4e:30:82:ee:57:53:fd:75:97:3e:
                    a4:9d:a8:0d:0c:d7:20:b2:63:a8:d8:8e:2c:f9:7a:
                    98:c7:5e:70:19:90:84:36:3b:81:5d:31:29:75:5d:
                    66:de:af:06:1a:d4:c9:7e:d5:ac:a8:3e:a9:9f:13:
                    fa:17:be:cb:5a:d8:8d:f9:9d:d5:36:46:fe:53:47:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:DC:8B:AA:E1:46:D9:B5:35:B8:AB:89:50:84:20:13:EF:68:06
            X509v3 Authority Key Identifier:
                keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/197CE9C2C0C111EE84A55128C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.16.0/23
                IPv6:
                  2001:df1:6e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:54:81:f7:a5:47:26:12:ed:6b:19:68:44:50:0b:ce:61:
         6e:fe:53:3c:ff:c6:8c:02:e6:0a:ec:ea:97:c4:3d:e5:9d:e7:
         61:2b:68:15:ad:23:83:70:27:e0:86:48:b1:11:02:39:88:dd:
         98:9b:9a:6c:0c:da:d7:1e:a5:f3:68:2f:80:34:dc:7c:31:88:
         cc:e1:1b:9a:39:54:0b:5f:b1:fb:53:c3:9a:e5:c5:01:ac:1f:
         94:43:ba:2f:8f:1e:a3:71:bb:72:a7:ac:3d:b4:66:32:b0:34:
         82:e2:ba:84:49:65:72:ca:73:bc:85:5d:77:da:50:57:9b:d9:
         fe:3a:01:67:86:ed:c1:a7:39:6b:3a:7e:9f:c8:3d:20:c7:ea:
         ed:f0:03:a6:71:fd:7b:cb:40:7d:74:a2:85:e3:3d:d7:c5:d6:
         d7:23:e8:93:02:33:1a:a2:b4:54:ef:3b:de:f7:45:75:30:6c:
         dc:f9:ad:30:88:b4:b4:f6:ce:13:83:ea:cc:8f:e4:7f:af:07:
         57:26:3a:6c:3d:b0:a2:4a:9f:dc:d6:a8:b2:c3:8d:1a:9c:99:
         6d:c4:25:6b:4b:d2:af:ac:11:9b:03:57:4a:4c:d2:27:10:a4:
         96:d9:fc:2e:88:05:76:6c:83:8b:23:f2:43:cb:fa:35:57:ff:
         3a:94:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:20:15 2026 by rpki-client