Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/208C60E46C7211F1AC9395217347A888.roa
File:                     208C60E46C7211F1AC9395217347A888.roa (raw, json)
Hash identifier:          5ObUZNUlNvXq+GBQnJ8kShAGXJHUdNizRWalI/RNNvQ=
Subject key identifier:   49:F8:CC:15:F2:F9:D7:AE:4E:DC:D0:D5:D4:95:DE:D9:6C:06:2C:29
Certificate issuer:       /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Certificate serial:       0C1D
Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/208C60E46C7211F1AC9395217347A888.roa
Signing time:             Wed 26 Aug 2026 19:38:54 +0000
ROA not before:           Wed 26 Aug 2026 19:38:54 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134785
IP address blocks:        103.35.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl
                          rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3101 (0xc1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
        Validity
            Not Before: Aug 26 19:38:54 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8f40ce-9336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:c2:00:96:43:8c:ef:7b:d1:67:b3:d6:5f:
                    2a:82:8f:7c:82:6d:7d:ac:d6:52:47:54:fa:68:44:
                    28:23:93:8b:bd:58:95:b2:32:3d:64:8d:f9:fa:b4:
                    fc:94:45:17:d5:b2:40:1c:1c:8f:ad:64:a7:3b:62:
                    c3:bf:23:65:6e:ea:20:43:94:11:72:b4:16:0a:ec:
                    37:fa:99:e5:7e:da:0c:f2:a4:30:9e:5f:3d:bd:b3:
                    19:98:55:8e:39:05:d8:e2:4f:c5:9d:f2:3e:1e:4a:
                    bd:d5:83:03:d2:86:6b:55:50:3c:a1:d7:95:eb:14:
                    b2:4a:63:1f:24:f8:5c:94:38:86:ad:99:76:13:84:
                    28:ac:6f:95:cf:78:e9:da:b0:eb:57:99:cd:28:cf:
                    5d:b4:10:e0:58:b1:8d:e6:b0:9a:95:8e:a3:c0:db:
                    e0:5e:9e:59:13:e0:8e:1a:88:b0:d9:c4:dc:30:f1:
                    80:50:48:4c:2c:c4:cf:ee:18:d8:81:76:d2:11:22:
                    d4:fc:31:70:68:c3:3b:7c:7d:cf:5b:a9:b5:17:bb:
                    f0:ea:cb:34:8f:64:ca:1d:56:73:7f:04:25:69:81:
                    c3:84:12:90:b7:cd:79:d2:18:e7:92:01:92:75:4e:
                    93:0b:fa:ce:c9:38:da:2a:d1:68:c0:66:ad:ad:2e:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:CC:15:F2:F9:D7:AE:4E:DC:D0:D5:D4:95:DE:D9:6C:06:2C:29
            X509v3 Authority Key Identifier:
                keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/208C60E46C7211F1AC9395217347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:14:dd:d0:0b:50:1e:92:7b:fa:a6:93:fa:76:92:4b:37:67:
         86:48:4e:54:d4:28:4d:56:f4:83:73:93:3d:70:8b:32:3b:ec:
         d8:18:34:70:b3:ad:22:8c:78:24:16:31:a0:49:49:ce:38:e1:
         6a:fe:a0:d8:09:6d:c4:bc:ac:a7:45:20:61:c8:e3:e9:a5:8a:
         a9:95:9a:ba:0f:c8:43:58:cd:41:00:af:ad:a2:c6:ce:0e:f4:
         f3:a4:2d:f6:4d:16:53:6e:25:25:d9:73:84:68:43:9c:63:eb:
         3b:bc:39:93:17:8e:0e:9a:db:c6:c4:47:3a:8b:7e:77:26:7b:
         9f:22:20:6b:db:2c:aa:cd:9a:d0:7e:13:5f:4c:c1:16:f7:e6:
         8e:c2:5b:07:ef:13:b1:1f:bf:03:9d:18:02:4d:3b:4d:af:7b:
         d1:46:09:ec:2e:72:fd:a5:bc:d6:b7:cc:dd:d1:ee:f7:4e:b9:
         a2:c3:9a:17:48:63:ab:f2:38:31:eb:5f:f3:d8:f1:67:17:e2:
         a1:11:a9:eb:30:79:6e:d1:8b:5e:0c:81:29:80:7c:6e:18:98:
         4e:da:c9:9b:df:b5:83:cc:4d:45:c6:32:ca:16:78:02:74:05:
         60:6c:e8:2f:4d:a6:62:5b:36:a5:51:62:e7:3b:64:ce:cf:e6:
         46:fb:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:23:58 2026 by rpki-client