Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/9D834ED4E48F11F086089575466F56BC.roa
File:                     9D834ED4E48F11F086089575466F56BC.roa (raw, json)
Hash identifier:          uYXsYXDrBNk6VSSwrqQGoWSh6EH5DUS1hCs++s1FB4s=
Subject key identifier:   A5:1B:EF:CC:74:BD:7F:CB:83:29:DC:C2:E7:DF:41:96:DD:61:E7:92
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       06C1
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/9D834ED4E48F11F086089575466F56BC.roa
Signing time:             Tue 22 Sep 2026 22:44:58 +0000
ROA not before:           Tue 22 Sep 2026 22:44:58 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     25846
IP address blocks:        103.172.134.0/24 maxlen: 24
                          103.172.135.0/24 maxlen: 24
                          2407:d340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
                          rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729 (0x6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Sep 22 22:44:58 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab304e9-392e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:e4:77:d0:fb:16:3d:30:25:cc:75:f7:dc:
                    23:6a:fa:77:20:47:9b:99:1f:f7:85:9e:45:ad:d0:
                    25:71:77:85:0d:4c:fd:30:b6:0a:14:72:45:55:37:
                    b1:5d:51:7d:06:00:bb:4e:c2:59:26:73:9c:39:4a:
                    27:7f:14:e6:4c:6f:ae:64:56:1e:5e:1d:a0:f9:de:
                    8d:40:41:2d:1c:28:61:6e:c4:9e:aa:28:c1:62:71:
                    87:90:8f:00:1f:e7:7d:c0:67:dc:2e:e8:e8:a5:2b:
                    1c:b5:7e:78:08:f1:de:d1:63:f9:fe:96:56:31:af:
                    5b:81:25:65:b1:b4:ae:7f:8f:87:64:11:93:81:7b:
                    d0:f8:f1:2d:f2:2f:fa:26:59:5f:45:07:8e:ac:05:
                    eb:3d:00:8b:aa:f4:9f:7f:e8:99:6b:83:e2:b3:f0:
                    9e:b6:7c:83:93:50:d0:75:65:94:16:a2:83:a0:c2:
                    c7:5d:00:db:08:d4:71:35:f1:87:8a:a2:0e:22:3e:
                    b8:0f:9b:1d:02:4f:72:95:78:43:15:1d:b8:70:3a:
                    83:6b:e2:57:9c:76:f1:fd:3f:bc:59:71:43:0c:b1:
                    48:34:c0:fb:a6:53:db:51:90:4f:e2:41:b2:ac:1a:
                    f6:e1:e0:6b:91:b9:f3:a4:bd:ee:b1:a9:97:e9:c5:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1B:EF:CC:74:BD:7F:CB:83:29:DC:C2:E7:DF:41:96:DD:61:E7:92
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/9D834ED4E48F11F086089575466F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.134.0/23
                IPv6:
                  2407:d340::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:f7:06:b3:f0:a4:68:e9:2f:a7:05:75:f5:52:d7:63:5b:d7:
         bc:c5:5c:1b:ce:44:db:b7:a8:4d:12:80:f3:1d:44:2e:4e:5c:
         e0:a6:62:b6:c2:06:d1:92:e7:e0:5d:e1:92:45:6d:2b:cf:30:
         de:c9:d2:94:9c:c9:0f:4c:2e:d4:28:42:80:a0:28:8d:20:15:
         0d:45:5d:b8:df:aa:b8:15:98:b6:f4:96:9b:54:1b:d9:1b:3b:
         7e:62:3c:35:27:20:61:cf:9b:f1:df:d1:47:58:39:3e:6f:38:
         78:0c:4b:c4:8e:1f:ee:86:36:bf:82:ad:23:e7:eb:1f:9b:47:
         fe:ec:6b:fd:31:da:87:41:4a:a0:94:4b:00:60:ef:6a:df:12:
         51:02:57:a4:ff:73:d3:4f:0d:6d:21:fb:e3:d9:f1:6b:55:d4:
         b9:5e:d5:10:36:77:fc:32:a3:ce:8c:44:36:dd:19:fa:2d:30:
         cd:fe:3c:4e:02:df:84:3c:b0:5f:9f:68:21:4b:8d:03:f5:8f:
         49:cc:14:b2:72:53:57:d9:76:be:72:56:98:bf:54:8c:d1:fd:
         fd:14:9f:1d:e4:73:67:da:29:9c:6b:d5:ae:8e:fe:85:21:f9:
         43:50:36:a5:bd:4a:58:f7:59:72:a1:70:d5:53:c7:10:9d:1c:
         fb:92:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:05:37 2026 by rpki-client