Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/C80B0244CB2F11EEB240B62AC4F9AE02.roa
File:                     C80B0244CB2F11EEB240B62AC4F9AE02.roa (raw, json)
Hash identifier:          /cLK5jexlN6DgUe+xON5ereg8xX5VFWJjQmFvIgHP9A=
Subject key identifier:   B0:96:53:D3:88:3E:57:A0:91:C2:D3:CF:01:D2:A8:E8:6C:15:5B:A6
Certificate issuer:       /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial:       03FA
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/C80B0244CB2F11EEB240B62AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:00:56 +0000
ROA not before:           Mon 21 Apr 2025 00:55:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134424
IP address blocks:        103.185.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
                          rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
        Validity
            Not Before: Apr 21 00:55:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42a78-8c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:87:74:1a:15:67:d7:8c:51:fe:95:34:a2:
                    6e:f6:67:28:10:d6:9e:e4:07:d5:6c:f0:6d:0e:b2:
                    b3:a9:75:90:98:48:07:26:9a:b5:ed:d2:bd:41:39:
                    19:b2:e1:ef:e7:4e:64:0e:61:a7:33:4b:7d:98:ae:
                    0f:a8:59:e2:81:63:51:13:67:ae:ab:cc:18:9c:0d:
                    df:55:09:2a:e7:b8:b2:3b:b9:5d:28:18:7e:64:4c:
                    d9:c9:76:8e:47:64:c9:bd:a9:21:bc:a2:da:7f:30:
                    94:ef:47:f7:9d:b5:53:b1:97:67:87:9a:0a:34:ec:
                    c3:fd:3d:d8:3b:3f:8a:fd:67:97:61:29:46:11:e1:
                    37:27:2d:20:8a:22:91:4a:55:36:4a:cf:4c:79:0c:
                    d8:21:5e:d1:71:9a:90:a9:34:c7:aa:6b:b6:29:1f:
                    92:11:2c:e0:15:74:26:de:de:98:c1:04:37:05:dd:
                    2d:b8:71:9d:c3:2d:ac:24:1c:5c:cd:7e:3c:ec:08:
                    d9:ae:54:1b:b4:23:96:86:c3:3f:ed:7e:ba:ba:92:
                    b7:11:a2:58:f4:11:74:e3:04:df:ea:9b:6e:30:4f:
                    73:7c:5c:70:59:00:b0:e8:00:0a:96:d2:c4:1a:6b:
                    f5:a3:7d:6d:9a:cc:f4:77:4b:e0:4c:56:7c:6c:3e:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:96:53:D3:88:3E:57:A0:91:C2:D3:CF:01:D2:A8:E8:6C:15:5B:A6
            X509v3 Authority Key Identifier:
                keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/C80B0244CB2F11EEB240B62AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:7d:bf:24:7f:7f:7c:e4:72:63:b3:93:df:85:01:74:01:44:
         f1:89:f4:38:46:f6:d2:fd:8b:ac:f3:84:07:fa:b0:c5:ae:a4:
         7b:90:5d:76:25:99:42:37:10:db:e8:b5:1e:6b:95:1c:4b:12:
         f6:4a:5a:70:6b:62:61:d9:2a:4f:ab:5b:0d:2b:40:17:ae:42:
         1c:2b:b9:20:18:93:1c:ae:df:99:58:27:fb:5e:56:92:a4:77:
         56:05:7c:c4:56:59:25:a0:80:53:4f:b2:11:02:d9:8e:61:26:
         b9:db:00:e2:f2:20:67:b4:18:3c:6d:d6:49:4a:d2:a6:d4:89:
         5b:40:ee:af:1b:19:a6:4b:a6:3a:9a:95:40:ef:5f:49:1c:5a:
         75:34:13:85:08:1c:71:71:f5:30:a7:c2:58:5d:e0:f5:4c:22:
         3a:cc:d1:3b:3a:ac:75:97:6b:c5:e7:10:92:82:35:d9:01:e9:
         01:a9:f1:14:66:b9:42:bc:17:ae:21:1b:b7:b4:74:3b:01:98:
         db:1a:50:db:e5:19:cf:77:55:e9:3a:9c:c1:d8:94:4a:14:ca:
         6b:e4:32:cd:88:71:8e:90:d8:77:fe:8a:95:85:38:e0:0f:54:
         18:69:32:85:6b:9f:82:b1:53:3c:c5:bc:2a:f4:79:22:a2:be:
         04:d1:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:14 2026 by rpki-client