Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa
File:                     A2A3D38A05CE11EA80526530C4F9AE02.roa (raw, json)
Hash identifier:          yH3p3lPH8xU3vzOSWPcb+rrTrhSn1jzm2Bc4yCfrO7g=
Subject key identifier:   47:D4:36:97:4D:18:62:A8:81:85:7B:35:EE:91:43:2D:4A:07:B5:7D
Certificate issuer:       /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Certificate serial:       0D35
Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa
Signing time:             Sat 22 Aug 2026 18:36:19 +0000
ROA not before:           Sat 22 Aug 2026 18:36:19 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137911
IP address blocks:        103.117.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
                          rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
        Validity
            Not Before: Aug 22 18:36:19 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a89ec23-cde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:73:5a:66:d7:b9:2f:e9:01:b3:52:aa:89:
                    53:2e:9b:f6:65:fc:dd:6f:3f:16:d2:31:85:ac:f4:
                    71:58:e1:68:fa:83:bb:35:79:dd:74:4b:68:6d:8b:
                    7f:e2:53:2d:d3:47:69:3d:3b:6d:58:19:10:63:07:
                    b9:fa:70:67:b7:ea:3a:4b:06:79:3a:d8:bb:f5:7d:
                    93:f7:68:d8:c7:93:d9:e4:5d:70:23:9b:d9:c4:5d:
                    75:a4:b1:25:78:a2:50:37:b6:0b:be:3a:5f:49:85:
                    12:d8:29:e3:9d:3b:64:65:05:58:d3:96:6c:f1:27:
                    59:26:2c:e5:f5:7d:e1:ed:69:70:d0:c4:95:ca:cf:
                    09:dc:b5:d6:24:dc:66:f6:11:d7:a5:ce:16:b9:d8:
                    2f:51:48:cf:94:8d:b9:b5:02:ed:32:bb:bc:7d:6f:
                    63:ea:f6:00:72:57:26:03:37:de:b4:36:35:f8:8b:
                    5e:be:84:ed:a8:95:20:4b:9f:5d:0d:b8:63:f4:ef:
                    ae:8a:78:e3:9a:e6:e6:4f:a3:06:89:b5:69:1b:38:
                    68:8a:f9:3b:2d:c3:e8:ad:5f:80:57:04:13:a0:3a:
                    7d:72:24:aa:78:5c:c3:7d:af:4e:10:2d:2d:3c:3a:
                    5c:d3:dd:a1:ba:05:0f:11:f4:4a:d8:94:b7:68:10:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D4:36:97:4D:18:62:A8:81:85:7B:35:EE:91:43:2D:4A:07:B5:7D
            X509v3 Authority Key Identifier:
                keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:18:d5:54:23:84:44:31:53:58:2b:cb:80:cc:5a:c0:95:d3:
         2f:61:4e:ff:0f:3e:56:8d:c6:66:d6:48:ee:06:d1:0e:a6:6f:
         ee:20:c8:91:a1:25:53:92:01:d6:1a:f7:5d:05:e5:6b:92:41:
         93:38:0b:6d:26:f6:88:50:87:75:db:ae:1e:5d:b2:98:ea:fe:
         19:62:83:16:03:4d:3b:20:f0:5c:85:73:73:ee:9b:b0:3d:c4:
         3b:7e:9a:fe:09:e0:fe:bf:8a:78:88:0c:5f:87:54:0d:10:ff:
         7d:9a:67:e4:fc:97:5c:0f:c5:87:ff:d1:75:a2:77:08:0b:f5:
         93:b9:a3:64:65:e6:ac:8f:0f:a9:30:2b:ac:84:47:a7:e1:0e:
         2a:f8:b8:2f:35:7a:c4:0f:3d:8a:27:e7:2b:34:95:03:1a:8a:
         32:66:43:a6:48:b0:72:91:33:be:e3:56:60:99:7b:8e:2e:a4:
         77:5f:67:bc:34:6b:63:f0:ce:f4:cb:11:9b:70:49:35:fc:05:
         a4:fa:21:67:d7:42:a4:34:89:8f:a5:0c:22:60:09:2f:8a:e8:
         32:44:2a:64:cd:69:ec:6c:cd:a5:b2:5a:da:f3:ed:60:a1:2d:
         dc:f6:8d:2a:38:dd:83:2a:2f:41:7c:9f:d5:37:ff:0c:fe:86:
         76:54:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:49:50 2026 by rpki-client