Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/92B2469A90D411F09BC0A564C4F9AE02.roa
File:                     92B2469A90D411F09BC0A564C4F9AE02.roa (raw, json)
Hash identifier:          BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=
Subject key identifier:   82:04:2D:35:0D:37:4C:E0:93:EA:D3:A2:7F:DE:15:C0:CB:F6:D1:1A
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       0A33
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/92B2469A90D411F09BC0A564C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:19:17 +0000
ROA not before:           Sat 18 Oct 2025 21:30:19 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        103.207.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2611 (0xa33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Oct 18 21:30:19 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48324-6d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:e8:86:46:0f:b8:ea:93:b4:a9:ba:0d:e3:
                    16:5a:e4:79:70:9b:20:0b:86:0c:a1:ca:74:89:ed:
                    80:d2:4c:cb:59:3f:57:2a:67:2c:65:8c:ec:94:a1:
                    eb:a4:de:07:ec:22:62:0d:8e:73:fd:cc:13:b7:4f:
                    c5:34:22:77:d1:d4:66:15:ba:f4:25:8f:53:8a:d9:
                    64:91:0c:1e:f4:e3:38:d6:83:64:8f:77:7d:52:ec:
                    4d:1f:bd:a6:6c:91:06:7b:06:7a:f8:81:43:0b:2a:
                    10:9b:53:08:81:7e:a3:2b:70:f5:37:a3:48:3b:ff:
                    9c:97:00:1f:76:2a:6a:1e:64:63:f6:d0:0c:76:87:
                    bf:08:9b:1a:6f:64:9f:30:ea:c0:6f:06:b0:8e:44:
                    d2:b7:07:1a:e2:6d:d3:6b:5e:6a:1e:59:7c:13:97:
                    81:9d:c2:c2:14:a5:4a:56:17:51:88:99:69:34:89:
                    55:8e:e3:a1:22:0c:4f:7b:19:03:ef:56:d6:84:41:
                    0d:d2:d6:66:ae:56:eb:19:b3:cb:a1:af:b5:0c:24:
                    9b:fb:8d:f4:c6:2f:9c:85:f8:ca:e8:bb:ab:0c:5c:
                    80:51:e6:6f:d7:e5:39:7c:c0:96:f1:22:87:56:ec:
                    ca:c8:fe:dc:df:b6:c9:b8:8f:12:97:e0:ed:6a:b1:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:04:2D:35:0D:37:4C:E0:93:EA:D3:A2:7F:DE:15:C0:CB:F6:D1:1A
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/92B2469A90D411F09BC0A564C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:66:0c:8c:78:62:48:bc:21:2d:c4:e0:8d:a8:63:de:7e:
         3a:da:8a:81:58:6c:17:59:b1:68:72:11:25:41:dc:fb:53:b9:
         b4:d2:03:be:58:20:fa:60:a7:1d:dc:ff:c6:45:f9:f7:a9:26:
         22:8b:11:b5:fd:b0:46:e4:74:f6:04:52:73:c6:33:66:eb:8b:
         d2:39:44:16:d6:5e:b3:ae:3e:e2:25:eb:05:3b:57:bf:68:33:
         fa:86:75:d7:77:43:93:a5:23:e8:09:4e:f1:e1:81:fd:97:49:
         0c:26:7b:1e:99:d4:39:ee:d9:f6:18:e5:f4:4f:87:88:10:18:
         67:36:c4:a5:2f:04:c1:dd:20:b7:32:04:9c:7e:f4:5f:d3:48:
         18:b0:e3:98:2f:af:d3:c6:04:c7:28:68:a6:06:bd:f9:9e:61:
         97:1a:63:83:18:2f:51:bf:3b:fd:34:21:d0:db:28:17:8f:ce:
         67:ea:6e:0b:ea:8c:8e:89:12:86:af:2b:45:4d:b8:00:32:23:
         28:3f:71:f2:94:a6:c3:2d:26:b7:13:8a:3a:3e:d9:d3:4e:f8:
         e6:2c:19:37:af:b6:66:b0:19:8c:6f:80:ca:ed:71:13:15:95:
         d7:30:34:c6:4f:f0:ea:ec:05:e7:fb:ca:a0:3a:ae:30:a3:1d:
         20:4a:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:21 2026 by rpki-client