Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/8327C2403DE011ECAB508171C4F9AE02.roa
File:                     8327C2403DE011ECAB508171C4F9AE02.roa (raw, json)
Hash identifier:          20NUIS0TNgTu8DKgqwpNpcEvk2Wv65+cwgyuIYLYW0k=
Subject key identifier:   74:C9:1C:A4:83:A3:CC:C5:FD:C7:75:45:96:A7:18:E7:C8:A2:32:56
Certificate issuer:       /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Certificate serial:       0522
Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/8327C2403DE011ECAB508171C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:52:22 +0000
ROA not before:           Wed 25 Jun 2025 00:04:54 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132797
IP address blocks:        103.25.229.0/24 maxlen: 24
                          2001:dec::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
                          rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
        Validity
            Not Before: Jun 25 00:04:54 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fe46-e2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:5b:65:75:27:53:bb:3c:0c:6c:67:ab:4e:
                    8c:1f:b8:dc:c6:22:d2:5e:be:ea:a9:b9:82:35:97:
                    31:bf:c4:a8:0c:00:c1:68:74:12:3e:5d:0f:1e:17:
                    f8:f5:f8:1d:e5:64:49:19:b9:dc:48:af:4d:50:d6:
                    74:c7:ff:a2:57:16:ed:02:0f:6d:d6:93:86:3d:8f:
                    93:60:e8:e3:6d:6c:32:97:f3:eb:4f:69:e4:90:3f:
                    c8:17:09:3c:9c:10:67:2e:de:26:43:9a:48:eb:78:
                    ff:2d:5d:45:62:11:14:c7:db:a8:d1:c9:13:bd:bf:
                    99:02:cc:df:f3:4d:7c:ea:96:61:fa:de:0d:de:ce:
                    ce:e2:92:db:42:fd:cc:f7:d0:3f:c6:1f:40:58:ed:
                    d8:56:b0:fb:4e:60:82:66:7e:ec:c0:38:d9:e4:36:
                    f3:3a:cb:66:c1:5b:9e:2c:8e:01:fa:92:63:f7:de:
                    14:38:d9:8d:1f:6a:c7:bc:e6:49:d9:bc:44:62:c1:
                    ac:3a:b3:2d:c8:9f:22:f3:28:fb:0c:ff:fe:a8:f1:
                    a8:f4:f9:d4:62:c8:f6:2c:2c:66:88:e2:eb:5a:4a:
                    00:ac:d7:65:0b:c1:9b:19:fc:65:79:cb:b4:07:35:
                    ec:7a:89:f4:aa:ac:cd:f8:82:f5:07:83:c0:3d:3a:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C9:1C:A4:83:A3:CC:C5:FD:C7:75:45:96:A7:18:E7:C8:A2:32:56
            X509v3 Authority Key Identifier:
                keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/8327C2403DE011ECAB508171C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.229.0/24
                IPv6:
                  2001:dec::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:a8:8d:8c:d6:ad:5b:9a:a9:07:f2:b2:36:93:fb:af:8c:ee:
         64:04:07:91:d6:85:86:64:5f:cc:f3:50:80:4a:ff:49:15:cc:
         e1:97:1a:c2:5a:43:9c:50:b9:0e:11:9b:da:93:4e:94:23:af:
         be:fb:50:11:3a:ce:4d:a4:25:bb:c4:01:9d:98:8b:02:49:8c:
         a5:70:b4:29:a4:4a:3d:65:93:ac:41:d0:cf:d2:00:c2:03:22:
         42:f0:4f:8b:cd:17:d9:3c:f5:79:5c:ef:19:fb:7c:29:a4:82:
         79:55:df:74:f0:c5:ad:d1:fc:01:7a:99:3f:cd:ae:c7:9e:d3:
         b8:94:ed:3a:71:58:16:8a:18:e1:20:d5:d6:40:00:cf:65:f5:
         69:e7:c6:e2:65:ce:22:e7:37:a3:53:1e:3f:f0:73:2d:78:68:
         87:a5:79:6d:19:11:d3:d5:bc:f9:3e:ec:a5:84:6d:13:31:c8:
         c6:87:79:0d:6f:15:c1:e1:22:35:2c:ae:ca:d4:77:dc:71:ea:
         cd:c9:b5:ae:34:47:a4:b1:af:3a:59:ef:c4:db:4a:cc:1c:c9:
         4b:34:cb:a6:ac:d1:25:8c:ad:d8:73:8f:32:5c:12:f8:2d:f7:
         75:12:9a:8b:4c:90:c2:3e:d1:30:2d:3a:6e:3f:c3:31:f5:78:
         fd:73:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:06 2026 by rpki-client