Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/0997DA40251811F19187E6B0C0833773.roa
File:                     0997DA40251811F19187E6B0C0833773.roa (raw, json)
Hash identifier:          21nGvUVjYGBILeKSa4tz2Pi25OmDrDa6X97e/MiYr+Q=
Subject key identifier:   10:CD:5E:95:1A:AA:24:43:4E:8C:C1:1A:28:11:BC:69:CF:36:7C:42
Certificate issuer:       /CN=A916A78A/serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Certificate serial:       67
Authority key identifier: A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/0997DA40251811F19187E6B0C0833773.roa
Signing time:             Wed 09 Sep 2026 08:58:15 +0000
ROA not before:           Wed 09 Sep 2026 08:58:15 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        43.246.144.0/24 maxlen: 24
                          103.240.216.0/24 maxlen: 24
                          103.240.217.0/24 maxlen: 24
                          103.240.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
                          rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A78A, serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
        Validity
            Not Before: Sep  9 08:58:15 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa11fa7-c447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:03:e3:8a:51:e3:88:25:74:b4:bc:ff:ef:04:
                    3d:68:e8:d6:59:89:07:cf:92:20:40:ab:e9:09:ab:
                    6b:b0:e7:d7:75:8d:67:04:f2:93:49:ad:69:71:c4:
                    b9:75:55:ac:b1:2f:a7:e7:80:08:bb:c1:45:2d:3b:
                    42:7d:fd:13:52:46:47:70:29:98:97:48:71:18:84:
                    87:df:7a:c4:04:9b:66:24:ae:d2:c1:5c:57:11:21:
                    76:09:ca:5f:f2:8e:e0:11:2f:62:93:5c:d0:67:cd:
                    cb:0b:0b:6e:5d:5b:d3:02:fd:fe:0e:82:b3:6e:52:
                    b6:12:40:99:2b:ad:56:45:e7:94:17:75:4e:5a:57:
                    f1:11:2c:e3:01:e9:a2:6d:17:f0:25:27:a2:1f:80:
                    93:ae:65:e6:9d:da:0f:43:73:50:05:1b:3e:a4:8a:
                    7a:20:fb:9e:04:a6:39:0a:f8:47:92:85:78:7f:99:
                    e7:56:26:38:0c:ac:ef:f0:cb:bb:c2:88:b5:1a:06:
                    4f:d9:5e:d3:f3:26:ec:f6:4d:c5:9f:46:5a:a3:e3:
                    12:bc:ac:22:1d:b9:a4:22:f0:bf:22:51:c3:47:ec:
                    10:58:8d:61:6d:55:12:21:f9:f0:4d:69:45:c1:bc:
                    19:99:c4:48:45:a7:80:ff:73:2f:ba:50:7f:ea:2a:
                    ab:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CD:5E:95:1A:AA:24:43:4E:8C:C1:1A:28:11:BC:69:CF:36:7C:42
            X509v3 Authority Key Identifier:
                keyid:A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/0997DA40251811F19187E6B0C0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.144.0/24
                  103.240.216.0-103.240.218.255

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:31:ad:09:f2:47:80:9b:bc:dd:9c:88:99:df:59:21:a6:
         ef:10:7d:b2:f5:f0:e6:e6:8d:65:bc:6f:46:11:e6:8a:78:e6:
         1c:6f:cb:f1:95:8a:f9:1d:8a:d5:16:63:ad:28:6e:f3:e4:ef:
         8f:99:ba:ba:36:5c:8c:50:55:95:17:8f:92:da:af:87:ab:95:
         82:28:ef:72:81:46:8c:2d:6e:11:d5:f4:da:19:bf:8d:3b:17:
         4e:6a:fe:60:1c:b1:fb:06:31:6e:03:7d:07:06:69:bb:18:79:
         be:bc:60:2d:52:58:40:a3:f3:8e:3a:c1:10:89:fd:3d:86:d0:
         4e:6c:0a:31:57:59:c6:21:8b:35:f9:6f:f8:cd:76:23:58:32:
         82:7d:b4:20:fa:33:97:22:e3:dd:f4:12:61:f3:51:8d:2c:eb:
         fe:7f:da:16:d2:55:68:d2:80:f1:50:f4:2d:c9:83:2e:5d:1e:
         3b:69:cb:36:0a:84:12:da:ab:d0:9a:4d:15:19:08:11:c3:c2:
         71:df:de:7b:48:0d:8a:f5:b4:c7:d9:dd:aa:b2:f9:ef:f4:dd:
         67:e5:75:70:df:a2:73:1d:92:b5:a7:3c:ba:ac:99:d3:3f:11:
         4d:b6:28:01:54:52:99:2f:09:90:37:e3:bd:29:41:88:81:08:
         ab:9d:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:33:14 2026 by rpki-client