Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/A34A8636B27811F18471895B3511F970.roa
File:                     A34A8636B27811F18471895B3511F970.roa (raw, json)
Hash identifier:          WdwtqC5CxiEWyoG7dpb6j+JPoHcSbIig5q3LQQjpStc=
Subject key identifier:   3B:E8:30:8C:44:09:31:4C:9A:CF:73:22:D0:88:B6:EA:95:E0:31:9C
Certificate issuer:       /CN=A915974C/serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
Certificate serial:       71
Authority key identifier: E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/A34A8636B27811F18471895B3511F970.roa
Signing time:             Thu 17 Sep 2026 09:17:43 +0000
ROA not before:           Thu 17 Sep 2026 09:17:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     55547
IP address blocks:        103.17.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl
                          rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915974C, serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
        Validity
            Not Before: Sep 17 09:17:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6aabb037-876b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:c5:db:34:5f:8a:3d:f2:e9:e2:63:d5:d1:
                    9f:ee:a7:f5:d3:27:ed:2b:f7:39:3e:f4:09:ec:28:
                    28:02:29:cd:0c:0a:80:ed:3e:5d:e7:03:f7:ac:0e:
                    c8:b3:90:b6:b1:d4:db:00:b6:cd:66:28:1d:da:23:
                    c8:5d:3c:2b:f2:12:35:d7:3b:70:6d:5e:c1:33:fb:
                    3a:65:ca:68:c9:c5:4d:06:dd:eb:fd:dc:85:d6:1e:
                    12:7e:fc:f4:e6:e7:9a:0f:32:bb:7e:e7:24:c0:24:
                    a2:25:f6:d6:7e:9f:02:cc:89:bc:09:b5:53:dc:9a:
                    48:95:c6:b6:d1:0f:b9:17:98:cd:99:2c:33:bb:e4:
                    49:ea:68:76:94:b7:d5:04:be:3e:8f:3b:b8:b2:0c:
                    7b:4f:d3:1d:62:ae:bc:ba:cc:a1:0b:ce:7d:fc:4f:
                    c3:b9:b1:64:8d:9c:8f:d6:9a:87:31:a7:33:29:d8:
                    4c:37:4b:34:98:04:49:0e:13:1a:5e:f8:40:87:da:
                    3b:98:b9:80:fe:7a:3a:58:21:de:66:c7:3f:5d:14:
                    bf:33:8d:32:f1:40:af:0f:90:72:c5:d1:5f:e0:cc:
                    e0:73:9e:de:31:40:ad:6b:70:a1:5f:e1:b9:ad:4e:
                    2b:d5:6a:3b:cb:bf:1d:c6:59:69:9c:ca:6b:e5:17:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E8:30:8C:44:09:31:4C:9A:CF:73:22:D0:88:B6:EA:95:E0:31:9C
            X509v3 Authority Key Identifier:
                keyid:E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/A34A8636B27811F18471895B3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:93:7f:d5:a2:e0:84:9e:56:4c:c7:ad:59:62:41:8b:0b:83:
         b7:fb:b8:d7:86:ed:26:d0:18:e1:73:23:cf:69:0a:b4:82:b4:
         2b:9a:31:11:e0:1c:b4:47:e1:d0:49:c7:5e:13:5f:75:9d:b4:
         f6:44:e5:b6:a9:d6:3b:ea:ae:9b:64:58:4e:28:11:ec:67:16:
         4b:13:e3:30:7f:5e:3b:63:24:a0:d3:a8:33:7c:e6:fb:17:77:
         f9:32:42:f1:cd:35:2c:15:60:4e:3a:96:f7:f4:f6:b4:6d:b2:
         54:56:89:6e:af:c8:7d:79:ed:ec:4e:6b:0b:ba:71:5f:3d:26:
         d3:35:be:21:29:c6:71:0e:9d:10:f4:08:55:92:b0:70:57:d8:
         2c:35:ea:68:47:6f:66:5e:5d:0c:ce:e4:e2:37:08:80:ef:9b:
         06:94:1c:0f:f9:7a:6f:72:e0:99:35:fc:6b:53:3f:14:c8:a5:
         a9:17:d5:9b:b4:84:08:10:47:70:03:be:14:18:17:92:ab:a7:
         bb:e3:38:87:e4:a6:3b:04:f4:aa:bc:16:b3:d9:c3:00:c6:b4:
         81:ac:d3:c2:4d:f9:0c:3c:42:76:83:1f:ac:b9:60:8a:80:cb:
         ae:55:cf:cb:bb:28:de:0d:d6:f4:6a:ad:e4:71:2c:2b:3a:f6:
         b5:5e:26:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:44:58 2026 by rpki-client