Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/1347CC90B7F711F1A35C1FD36E11F970.roa
File:                     1347CC90B7F711F1A35C1FD36E11F970.roa (raw, json)
Hash identifier:          gPorrO+6sluYjKVVrP739NnOy3reTJAodftByAG0NoY=
Subject key identifier:   2E:E7:98:CB:35:EA:07:8E:AA:90:86:D6:CE:F7:4D:3D:28:E9:A2:E6
Certificate issuer:       /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Certificate serial:       02C0
Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/1347CC90B7F711F1A35C1FD36E11F970.roa
Signing time:             Thu 24 Sep 2026 09:05:23 +0000
ROA not before:           Thu 24 Sep 2026 09:05:23 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     7656
IP address blocks:        103.235.4.0/24 maxlen: 24
                          150.129.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl
                          rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 09:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
        Validity
            Not Before: Sep 24 09:05:23 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ab4e7d3-14dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:54:7e:30:62:f1:cd:57:96:4a:bc:85:c5:
                    6a:15:40:e4:29:bd:42:a8:63:9f:4c:50:9a:79:c8:
                    ef:9b:67:64:0d:85:76:84:be:9e:96:77:cf:55:80:
                    ff:ea:0f:b6:ac:d7:0d:c9:b2:0b:b2:8b:6e:0d:c0:
                    e1:15:a0:c5:f3:95:2d:0d:f7:85:52:96:a3:2e:4e:
                    2d:e2:35:35:b8:1d:6b:cf:fe:66:8d:90:c0:80:20:
                    10:e3:38:b4:5e:6c:5b:4a:5e:43:1c:3e:d9:ae:c8:
                    1b:7f:01:9e:4e:0b:6c:b5:e4:69:81:4d:5d:15:69:
                    df:25:4b:2e:da:31:a3:69:15:60:4f:d4:3f:30:44:
                    db:eb:5f:29:ed:74:a0:53:a3:7b:1d:b5:97:af:7b:
                    b7:65:af:f3:e8:99:63:d5:63:95:a1:2f:d3:4e:8f:
                    78:2e:2a:79:53:ae:7e:61:65:06:f5:36:47:1f:6a:
                    10:57:d7:89:9d:56:25:a8:9e:6e:dc:d6:ea:ae:c7:
                    bf:5a:a6:d8:f3:ec:40:b4:7b:b0:41:74:1c:2e:71:
                    29:aa:8a:e2:30:65:fa:63:da:a8:7c:8b:8b:a2:66:
                    61:07:a2:86:70:07:4d:2b:a0:a0:06:f6:2a:a4:5a:
                    7d:9b:e9:b1:8a:1c:0d:65:f1:dc:97:32:b7:44:e2:
                    a7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E7:98:CB:35:EA:07:8E:AA:90:86:D6:CE:F7:4D:3D:28:E9:A2:E6
            X509v3 Authority Key Identifier:
                keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/1347CC90B7F711F1A35C1FD36E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.4.0/24
                  150.129.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:53:49:6b:8c:30:db:64:87:ab:74:68:b6:9f:03:72:8a:cf:
         1a:66:02:60:04:05:30:0d:ec:fc:4d:40:30:cf:e3:f7:36:40:
         1c:5f:13:46:a0:47:d0:0d:d6:e2:04:c7:15:7c:06:9a:e8:b4:
         69:fe:f4:80:51:7a:d4:a9:98:2a:4f:ce:e2:93:21:6f:80:20:
         aa:ec:45:4c:4a:53:ae:7f:dc:56:0f:57:7e:2c:df:9f:05:7a:
         ae:ab:a4:24:39:3b:a8:f7:df:11:41:73:9f:65:eb:e2:e7:ed:
         b7:b6:57:a9:1e:50:07:bf:b8:14:af:4c:7d:fe:50:aa:bd:31:
         26:64:c0:bc:58:cf:78:c2:2e:77:97:00:8a:58:67:ff:ea:b3:
         f4:41:80:a9:02:d1:2f:f9:fc:0d:be:bd:06:08:23:20:6b:9a:
         22:cb:9e:07:01:21:fe:f6:e4:ff:ef:0e:2f:bf:01:ed:61:f0:
         b4:ae:74:0d:a7:b2:15:96:9b:2a:76:33:12:cd:3f:bd:3b:49:
         48:2b:1c:f6:15:9b:24:c3:9e:aa:c4:8c:88:d7:cd:9d:f2:51:
         82:4e:d2:d3:fa:67:b6:e0:00:1a:88:09:09:1a:f5:5b:bc:c6:
         65:be:f2:83:a3:30:07:8f:07:96:2e:12:68:ae:3d:2a:26:9c:
         30:e9:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:38 2026 by rpki-client