Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
File:                     F23AE0AE632D11ED8C102087C4F9AE02.roa (raw, json)
Hash identifier:          qQtQpzpKePrE0RobwOY3K8zJSsDC8DXI0exZ1Gcq51U=
Subject key identifier:   46:6C:C7:1E:E5:7D:BE:B2:3D:16:14:A6:21:B4:AA:E7:B8:C5:B1:8B
Certificate issuer:       /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Certificate serial:       02DE
Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
Signing time:             Wed 09 Sep 2026 01:53:26 +0000
ROA not before:           Wed 09 Sep 2026 01:53:26 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     150302
IP address blocks:        103.217.98.0/24 maxlen: 24
                          103.217.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 01:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
        Validity
            Not Before: Sep  9 01:53:26 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bc16-cb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:28:c8:9d:69:06:1d:d7:c1:dc:b8:22:5d:
                    de:a1:93:22:9a:8e:32:e1:ec:5f:4a:1d:39:d7:d4:
                    6d:89:93:1d:a4:92:54:b9:b8:22:fb:41:fd:26:84:
                    df:2d:5a:c0:7d:23:ad:0a:4b:75:49:6a:ec:40:17:
                    57:e0:15:fc:33:60:f1:2b:df:30:50:bf:4d:de:78:
                    75:fd:40:45:9d:98:4c:7b:14:28:9e:17:a9:64:6f:
                    d1:b7:8d:9a:3c:f3:78:d5:9f:84:13:a2:07:09:1b:
                    a8:51:3a:bb:7e:69:02:ed:c8:0d:97:f7:39:98:ad:
                    5d:65:ea:29:5c:e5:53:96:53:62:2d:7a:4b:df:a3:
                    b8:cc:fb:62:59:16:8c:16:26:cb:3c:45:a7:f2:9a:
                    c9:f0:c1:e3:b2:e5:9e:22:ab:c8:cf:af:29:e6:5b:
                    5b:45:4f:c2:c2:03:12:50:02:02:89:b6:84:11:47:
                    07:d4:4c:55:da:e8:ca:95:0f:18:4f:90:e3:b6:2f:
                    cb:e5:45:eb:aa:f6:3b:a2:a1:d3:fd:d9:6b:35:16:
                    ca:16:11:f8:a4:1b:10:de:cc:b8:96:4b:c1:4e:37:
                    f1:02:b1:93:42:4f:11:66:a6:61:ce:2b:be:8a:1f:
                    7a:73:26:c2:3f:30:0c:82:76:12:d7:f8:a7:d1:8a:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6C:C7:1E:E5:7D:BE:B2:3D:16:14:A6:21:B4:AA:E7:B8:C5:B1:8B
            X509v3 Authority Key Identifier:
                keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:47:d0:2c:45:60:a2:ce:96:ec:3b:66:a8:0d:8e:60:69:08:
         9c:82:94:0c:85:50:4c:36:53:9b:60:88:4a:22:cc:35:5b:33:
         54:59:22:1e:c3:8e:37:35:41:f8:52:1f:c9:a2:a3:51:63:14:
         78:67:b1:c0:d9:d5:d1:be:67:e9:9c:2b:4f:8a:8c:c8:b7:b2:
         b6:9c:4c:31:ed:09:cd:ae:32:ea:77:7b:90:68:fb:1a:15:1d:
         dd:95:cb:54:63:6e:6b:23:cd:34:3b:ec:7a:cd:67:a7:36:5f:
         46:6f:62:a7:f4:04:ad:1f:22:4a:a1:66:43:51:1b:d9:48:5a:
         d1:5c:9d:27:85:1c:5b:1e:86:94:54:54:2d:e0:aa:cf:9f:2b:
         32:68:66:10:9f:d9:54:57:77:ef:38:65:b3:ea:95:d6:ad:a9:
         98:bb:a9:9c:cc:f7:dc:f5:f4:f3:18:c3:75:27:11:e1:7c:0e:
         69:be:fb:cc:e0:7d:39:44:fd:32:e0:d1:df:fb:21:31:77:d6:
         32:d9:ef:f0:ed:1a:04:92:b7:85:56:e6:a5:37:10:56:5f:ee:
         b0:44:8b:0e:ea:8a:53:a4:10:7a:83:c3:59:18:c7:6e:71:6e:
         cd:35:72:44:ef:66:68:a9:d6:34:8c:6a:76:ed:2b:90:28:78:
         59:83:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 22:06:59 2026 by rpki-client