Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/26C760F002EA11F0836EF72FC4F9AE02.roa
File:                     26C760F002EA11F0836EF72FC4F9AE02.roa (raw, json)
Hash identifier:          /0dTnWT2FRET+08FVC1mUWomcC2kAcAYkpb9MNNV3d8=
Subject key identifier:   79:40:4C:1D:68:C0:DB:8B:5D:2E:C8:7D:71:F9:E1:DC:AA:E4:87:50
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       018F
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/26C760F002EA11F0836EF72FC4F9AE02.roa
Signing time:             Fri 17 Oct 2025 06:40:07 +0000
ROA not before:           Fri 17 Oct 2025 06:40:07 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151812
IP address blocks:        103.127.222.0/23 maxlen: 23
                          103.127.222.0/24 maxlen: 24
                          103.127.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: Oct 17 06:40:07 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f1e4c6-40cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:15:0f:76:78:b2:d8:19:8e:21:03:0e:dd:
                    73:e0:d1:d7:22:60:68:70:5c:44:8f:35:31:87:de:
                    3c:d3:41:d3:b2:d7:1c:1e:32:66:cb:a0:64:88:e8:
                    01:6e:58:f8:7d:18:42:e8:49:ea:a2:25:aa:59:d7:
                    30:13:db:03:79:93:cc:28:85:c8:66:25:68:da:bd:
                    45:8f:41:a8:f7:98:ed:0d:1d:79:2e:e5:4a:3e:fc:
                    ec:20:99:8b:47:e8:a3:8c:d3:c7:eb:20:e3:81:8b:
                    a7:4c:59:6c:c5:a5:dc:6d:a2:ec:d4:dd:09:24:d5:
                    a6:af:00:e8:5a:55:50:8f:b9:3e:d4:fb:bc:fb:ad:
                    e6:a9:1d:4a:48:1b:81:22:b8:ea:f5:04:4f:e0:a0:
                    11:67:7d:1d:08:e7:f0:25:fe:9b:57:01:91:92:34:
                    5e:65:41:54:98:ba:b1:7b:c7:14:65:37:e6:28:bf:
                    ed:8b:67:50:68:94:47:c9:ac:b5:36:57:b7:52:e5:
                    72:b4:48:93:a2:96:df:61:62:2d:4c:e6:d3:bd:7f:
                    86:2c:bf:5e:65:58:b0:92:e6:2e:dd:24:f7:4c:c5:
                    0b:52:23:02:6e:1d:2a:4c:90:c4:c2:c3:a3:6d:f4:
                    cd:9c:c0:eb:1d:fe:7d:66:ce:af:0a:6a:86:9f:78:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:40:4C:1D:68:C0:DB:8B:5D:2E:C8:7D:71:F9:E1:DC:AA:E4:87:50
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/26C760F002EA11F0836EF72FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:47:f1:ad:1f:57:0a:54:75:b4:e0:a8:1f:51:8c:46:bc:
         48:7d:73:28:b1:25:0f:b4:16:ac:24:aa:83:92:cb:f6:df:c7:
         52:1b:b9:ba:04:26:bf:c0:98:23:28:24:72:22:5d:a7:fe:95:
         36:f4:bf:21:24:9a:42:47:2a:d2:48:99:ca:11:a5:6d:56:e2:
         3e:ad:62:6b:cb:ff:af:8b:02:d9:c9:d8:38:26:88:7e:61:df:
         b1:97:39:ab:9a:1d:fe:36:0d:a3:a2:e3:91:c2:9b:0d:37:a0:
         d1:e2:0e:eb:df:b6:a3:13:3a:cf:8a:97:c9:2f:56:75:cb:d5:
         6e:21:e1:02:ef:3e:5f:c1:86:95:bb:89:ce:3d:17:48:8d:3e:
         55:9e:cd:c7:cb:1f:9c:57:0b:c5:68:8c:ee:3a:f6:09:58:be:
         59:d9:7f:3f:6f:40:c8:73:51:40:96:df:e5:79:30:06:64:f9:
         41:6c:ba:29:19:fd:2a:05:c9:3c:82:a2:22:bd:91:e8:6d:c7:
         a1:7f:27:f2:06:59:8c:19:b0:da:70:45:80:cd:bc:d3:30:e8:
         26:68:c0:7c:56:44:1b:ba:3b:94:43:63:c2:dc:d2:6f:48:91:
         df:1a:87:6f:1c:f9:96:ca:d3:8c:b1:bd:88:c2:e1:4c:04:73:
         c2:40:2e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:57 2025 by rpki-client