Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/8977E636920211F1A2698D205E11F970.roa
File:                     8977E636920211F1A2698D205E11F970.roa (raw, json)
Hash identifier:          3eJTC2jfzPpwkH7VciNnlLOn+MVAn1jhTqs6n6Rzetk=
Subject key identifier:   74:EA:29:D6:0C:11:23:6B:A4:3C:20:8A:7B:54:E6:64:AF:BA:44:02
Certificate issuer:       /CN=A918E756/serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
Certificate serial:       1C
Authority key identifier: 54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/8977E636920211F1A2698D205E11F970.roa
Signing time:             Mon 21 Sep 2026 08:59:55 +0000
ROA not before:           Mon 21 Sep 2026 08:59:55 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     55729
IP address blocks:        103.250.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl
                          rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E756, serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
        Validity
            Not Before: Sep 21 08:59:55 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab0f20b-40e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:18:0c:0b:67:a2:22:0a:3f:ec:e8:2e:a4:
                    73:74:4b:7a:a2:6b:e6:40:c9:b2:a5:a2:05:bb:82:
                    43:75:f0:35:e1:07:ee:2a:8a:d1:18:db:ed:5a:46:
                    76:ba:86:c7:df:a8:d8:56:79:c1:c0:6b:55:32:a2:
                    b3:c2:cd:8b:af:17:f7:23:e6:c6:c9:94:16:19:0d:
                    22:ba:02:3f:5c:d2:33:ac:c0:72:b4:f8:f6:90:29:
                    65:96:05:cd:54:38:fe:a0:b7:d1:47:7c:9b:4f:83:
                    6b:e2:4b:8b:74:ff:38:c9:49:a7:dc:f2:3e:88:4f:
                    e2:58:9d:c6:6b:a8:5e:ba:3f:b3:47:f2:a1:ed:38:
                    e6:f8:e3:95:ad:ba:f3:2a:9e:b4:38:11:4d:f7:d3:
                    48:b5:c5:05:ee:e1:c6:05:d5:93:aa:3e:e4:c1:c4:
                    2c:b8:76:a7:8c:63:2f:11:55:2d:d1:46:b9:ef:2c:
                    57:01:68:96:44:05:8e:b7:ec:e8:5e:16:35:8e:8c:
                    56:2c:0e:ca:77:25:64:95:bf:66:d9:0b:4e:4a:b0:
                    be:28:5a:1a:e2:b9:41:6d:3a:cf:51:87:df:84:55:
                    cf:2c:69:8e:c8:83:53:7b:76:b7:a3:9f:c8:25:2c:
                    f4:c3:30:46:53:95:f2:d8:d1:f8:da:61:34:44:14:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EA:29:D6:0C:11:23:6B:A4:3C:20:8A:7B:54:E6:64:AF:BA:44:02
            X509v3 Authority Key Identifier:
                keyid:54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/8977E636920211F1A2698D205E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:96:e8:08:6a:43:e3:64:ee:9a:90:e2:12:ba:f1:a5:82:df:
         69:e4:08:79:1f:16:e1:ff:19:4c:b0:33:07:6e:24:ac:49:00:
         69:1b:57:2e:07:97:34:46:39:fe:2c:6e:ee:db:7a:44:c4:39:
         c9:d8:d9:03:4a:33:43:f4:af:9d:3d:0c:26:f0:ac:84:d7:ec:
         41:9d:6d:39:36:98:46:2f:00:17:2a:73:5b:eb:23:b6:53:23:
         5a:08:62:2d:d9:3b:55:df:cf:82:2c:82:6e:6a:77:6c:5a:91:
         77:79:35:c3:86:1c:d8:1e:e2:45:55:9f:1e:cf:88:b7:8d:5c:
         d5:eb:40:db:f1:13:3f:85:a1:3a:1e:e8:93:28:ed:7c:1e:80:
         c0:e1:8e:fb:d0:7d:3f:9a:94:08:1a:37:63:2c:c6:d6:bc:8b:
         59:48:ba:9d:5b:29:79:64:86:c1:3b:fa:ef:32:73:04:c5:4d:
         de:09:42:13:46:8e:12:9f:f4:4d:c3:a7:66:1b:28:2c:42:80:
         b2:95:47:bf:fc:b4:e5:49:a4:e6:36:e9:c7:de:77:e8:cb:f7:
         29:5c:5f:d3:6b:cb:88:0e:b9:bc:1a:57:82:b8:ab:d6:9e:03:
         92:c3:78:de:1f:c0:a9:47:32:1c:42:3c:22:2c:d1:1b:e1:a4:
         13:81:2b:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:36:55 2026 by rpki-client