Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa
File:                     0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (raw, json)
Hash identifier:          iXUcdsv3ddU69YIhWzDFLhl35LQs6AD3EeqPaisI2Hw=
Subject key identifier:   F6:AD:41:54:D2:B6:F9:51:5B:A7:73:1F:AD:68:1E:9B:A6:62:E0:26
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       0971
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:32:51 +0000
ROA not before:           Fri 22 Aug 2025 21:00:40 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149010
IP address blocks:        103.253.24.0/24 maxlen: 24
                          103.253.25.0/24 maxlen: 24
                          103.253.26.0/24 maxlen: 24
                          103.253.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417 (0x971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Aug 22 21:00:40 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a46a33-9ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:05:bb:e9:51:1f:ce:96:6f:2f:f3:48:25:
                    cb:35:27:82:e6:db:f8:07:9d:9c:7e:26:bc:7f:33:
                    56:1b:93:8f:cb:ff:89:f4:43:8c:20:3a:89:78:83:
                    d8:65:70:47:ff:52:65:04:c2:53:77:8d:5a:85:97:
                    dd:22:01:e1:1b:ed:8f:64:b8:e8:21:ca:40:ad:69:
                    27:47:14:ec:1a:f2:d3:f6:25:e5:04:61:f5:4f:d1:
                    1d:c2:7c:45:d3:e3:92:29:86:06:bc:50:6c:6a:37:
                    62:05:92:8e:1f:cf:25:48:e9:ba:7d:2b:61:cb:bb:
                    dd:e4:7f:45:94:23:48:e2:eb:cb:35:11:5f:5c:bd:
                    27:d1:55:55:fb:04:c4:51:e5:48:ad:39:6f:f3:1c:
                    88:1b:e3:e4:bc:6d:15:83:37:59:a8:7b:69:10:73:
                    b3:2d:3b:e7:f4:55:1e:c0:77:f4:fb:86:87:61:ec:
                    4f:b4:bd:da:2f:12:69:ae:d3:a2:a2:cb:ef:35:7e:
                    e8:37:71:41:c0:1c:f2:e2:f2:4b:cc:73:7a:5f:fe:
                    04:77:70:60:ba:fb:81:c9:3f:75:01:5a:02:80:56:
                    e3:b6:3d:6a:59:38:e9:11:d8:eb:29:cb:60:4a:a2:
                    88:4b:24:54:f1:db:e6:83:c9:73:b7:2f:45:b4:68:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AD:41:54:D2:B6:F9:51:5B:A7:73:1F:AD:68:1E:9B:A6:62:E0:26
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:0d:34:d3:7b:3b:33:fe:13:a2:8c:14:7b:e8:d9:6a:ea:f6:
         cd:0b:f4:d4:bf:21:cc:b8:71:4a:b8:b4:fe:be:bb:ad:99:ba:
         5b:a8:67:69:b4:d6:7c:f5:61:d7:ed:49:00:4d:4f:38:c7:f5:
         4c:af:39:8d:35:50:39:25:5f:d1:9d:f9:97:e4:cc:41:5e:2b:
         9a:f6:dc:7d:19:ef:37:16:c8:d6:5b:8c:97:72:7c:87:63:a7:
         6d:76:91:59:fa:ac:29:f9:22:78:ef:7e:fb:35:b7:61:5f:71:
         27:a6:c4:c7:cf:4d:58:bb:e5:20:66:16:0b:e8:95:2c:d9:e1:
         37:2c:eb:98:f4:86:6c:c7:11:ad:46:9b:63:2f:9e:e6:80:f5:
         59:6f:0d:f3:d9:37:5b:54:2b:79:66:b0:13:36:48:60:58:44:
         e2:33:73:d3:00:e5:10:8a:3c:61:ba:92:d4:ea:4f:5e:11:54:
         7a:22:d6:2f:c0:91:08:fa:af:a6:5d:15:88:7d:48:36:94:e2:
         d7:de:e2:07:46:b3:42:43:9f:1c:7f:8d:5e:91:13:df:a1:8b:
         27:63:13:49:f7:9a:84:d9:1b:a5:0f:4a:fc:7e:c5:da:0f:97:
         38:d2:ff:c4:80:77:e2:ef:03:a5:c6:09:ee:5d:8d:69:32:69:
         34:01:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:52 2026 by rpki-client