Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
File:                     2BA0624C078511ED87041524C4F9AE02.roa (raw, json)
Hash identifier:          0jbGDYo7DDfv4MFk7YXPgz8jJvCIX6bzZUVL+H0jKpo=
Subject key identifier:   E5:F7:55:C2:CD:B8:9D:10:38:39:B1:0F:DA:8B:5D:0B:92:0C:F2:D8
Certificate issuer:       /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial:       0D26
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
Signing time:             Mon 20 Jul 2026 19:19:32 +0000
ROA not before:           Mon 20 Jul 2026 19:19:32 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     140229
IP address blocks:        103.115.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
                          rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3366 (0xd26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
        Validity
            Not Before: Jul 20 19:19:32 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5e74c4-9369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:7c:b4:d8:b2:ea:6c:d3:03:c8:0f:a7:38:
                    a6:cc:a9:6b:99:7a:f6:a3:b4:69:a6:20:03:38:e6:
                    f8:88:f2:6b:a1:fc:c2:1c:ab:5c:06:27:65:20:7d:
                    8c:39:79:c1:a1:0c:7e:0b:46:f4:73:ba:79:a2:50:
                    13:1d:2b:aa:f5:a6:87:6d:25:52:68:d3:b8:e8:97:
                    d0:26:eb:bd:8d:52:8c:b0:dc:09:cc:49:bc:21:f8:
                    79:e7:6f:87:15:1b:da:b6:9c:8f:49:8a:44:d5:ec:
                    c4:43:7a:71:3e:c9:77:ab:98:0b:b7:e4:a0:7d:f7:
                    ab:df:df:d5:78:c6:2a:0c:96:a2:05:c6:ee:cd:ad:
                    e7:22:51:df:d3:ec:16:63:46:27:cb:d6:6e:e3:f7:
                    87:51:1e:2e:47:8b:f1:25:fb:b6:0a:95:b4:bf:f4:
                    8d:45:51:b5:9e:54:d1:82:24:a6:d7:c7:72:a0:76:
                    d5:7e:7e:18:f4:25:33:f0:45:71:1e:b6:cd:13:35:
                    e4:3d:1d:92:0a:09:f0:46:51:02:0d:d3:0b:a3:a6:
                    40:66:b5:32:cd:e0:73:20:66:6b:19:1f:dd:0b:e0:
                    58:b2:e9:64:64:e0:85:28:1a:39:04:4b:f4:ad:34:
                    93:9e:99:24:cd:f4:81:06:10:73:82:7f:d7:f9:fe:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F7:55:C2:CD:B8:9D:10:38:39:B1:0F:DA:8B:5D:0B:92:0C:F2:D8
            X509v3 Authority Key Identifier:
                keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:12:30:fb:d6:de:70:ab:5c:41:4a:6d:ce:b0:6f:fc:12:5c:
         91:43:61:39:86:51:96:12:88:50:0e:75:c5:40:e2:93:a9:aa:
         3c:cc:ef:d0:57:ee:af:a4:7e:2b:c7:cc:cd:71:50:fd:6a:8e:
         e1:ba:f6:c9:49:13:6e:97:2b:d6:a1:a1:e7:0c:08:70:e5:0b:
         03:9d:15:bb:09:94:31:8a:60:8d:5b:3d:88:b0:94:2c:87:32:
         9d:e8:27:39:1c:35:32:aa:4e:43:59:69:b0:dd:c7:86:3f:5b:
         d4:f8:75:b5:2f:ec:f9:47:e5:19:75:00:ba:f8:d8:27:fd:d2:
         f8:e2:3f:e3:5c:48:52:89:a4:af:f3:ef:91:00:b7:25:2d:53:
         76:41:de:ee:20:8c:4c:2f:0a:33:77:9d:cc:07:e0:6c:d4:c8:
         f5:2f:4e:d8:a1:89:4c:45:42:23:20:10:f0:b3:29:21:20:bd:
         26:7b:96:f6:9d:26:83:69:81:6a:cf:80:77:cf:91:62:0e:48:
         7d:8f:54:28:5b:74:d1:27:30:81:0e:05:3e:04:29:a9:87:42:
         cb:4c:97:94:11:e9:94:9a:c8:58:8d:e6:80:78:1d:a8:db:36:
         ea:03:cf:67:3e:c2:48:69:1b:4f:21:58:a2:bd:a5:53:f8:3a:
         dc:67:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:21 2026 by rpki-client