Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/9A79B41A633811EE9D258E2EC4F9AE02.roa
File:                     9A79B41A633811EE9D258E2EC4F9AE02.roa (raw, json)
Hash identifier:          2aqoL9qe8tIo9qlQGinuDss/0nrnNaVd49bC6qwXz1M=
Subject key identifier:   94:26:B5:18:A0:AC:39:F5:25:8E:BC:BF:1E:ED:2A:F2:8D:12:9F:50
Certificate issuer:       /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial:       028A
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/9A79B41A633811EE9D258E2EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:17:13 +0000
ROA not before:           Wed 01 Oct 2025 03:30:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     399471
IP address blocks:        103.71.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
                          rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
        Validity
            Not Before: Oct  1 03:30:18 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47499-8ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:41:e2:12:b3:56:22:c7:a2:8d:7e:c7:1a:e0:
                    75:a9:ed:a9:6f:4f:52:44:e5:b2:c5:fc:40:76:76:
                    88:b4:5d:fb:c2:d4:f2:aa:0e:cf:cd:80:89:86:55:
                    77:b2:4b:bf:f0:fb:8c:2a:cc:f9:8f:d7:e9:92:a3:
                    b9:88:b9:0f:65:d3:39:5f:f4:1b:72:8d:e3:f2:cc:
                    3a:b0:64:42:da:57:63:1e:36:c4:e3:3d:0f:31:ce:
                    2f:e0:06:dd:99:a7:f3:75:55:db:a4:55:04:e5:93:
                    4b:a8:bc:51:66:1f:96:84:d1:88:22:83:6e:c1:0a:
                    11:b9:52:08:b4:14:e7:74:06:ae:5e:88:00:39:b3:
                    c5:44:8b:c6:c4:ba:da:89:6d:c5:46:76:c1:f5:80:
                    20:22:b4:94:63:34:b9:2e:d7:73:f1:a7:cc:86:bc:
                    49:e8:c3:3c:df:64:04:8b:78:6a:9f:c2:9e:81:67:
                    ea:4a:14:65:af:7b:b6:36:4d:c7:b9:09:05:35:77:
                    c6:62:0b:64:a7:14:25:1a:8a:72:f1:83:b9:5f:4a:
                    c3:da:aa:bf:92:c0:88:a3:0c:18:ef:93:e2:90:3a:
                    bb:11:44:57:b3:cb:a1:be:40:6b:ab:03:bc:dd:b8:
                    87:a3:52:1e:7d:f7:fa:6f:d6:b9:c0:da:97:36:fa:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:26:B5:18:A0:AC:39:F5:25:8E:BC:BF:1E:ED:2A:F2:8D:12:9F:50
            X509v3 Authority Key Identifier:
                keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/9A79B41A633811EE9D258E2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:fb:0e:0f:e8:86:a2:06:9f:05:96:b2:98:bc:52:de:e4:
         73:7d:32:a4:39:9c:1d:bf:d7:23:1c:50:e1:63:f0:44:36:57:
         82:1b:18:a0:6f:70:a7:46:99:1a:4b:09:91:fd:ff:2b:69:60:
         bd:98:1f:41:3e:43:a3:86:4f:f6:fc:12:85:22:59:6e:23:fa:
         57:3b:a7:70:70:d1:3e:ba:2e:0d:46:44:81:7d:94:2c:11:c0:
         d9:f4:44:8a:c7:26:70:a3:46:40:d0:3c:c9:b1:b2:cc:56:06:
         53:f3:3e:47:88:be:56:d3:d8:e9:24:16:ca:35:9c:b8:6d:1a:
         fe:4c:73:55:4e:2d:11:11:97:b9:ab:77:bf:9b:48:35:e0:52:
         ef:91:dd:ba:02:44:52:8c:e2:2f:11:39:60:3d:8f:6c:ec:9e:
         0d:84:f8:5d:83:1e:91:66:c7:4f:76:13:8e:dd:b0:ab:b2:03:
         3c:bb:76:01:b5:3f:a1:c7:e0:02:f8:9a:fb:e4:6f:7c:a2:0c:
         25:1f:7c:ea:08:49:87:50:e1:fa:4d:52:35:21:b6:bb:6b:84:
         15:8d:e2:a1:ef:b2:52:a3:57:01:dc:5a:84:65:d7:8a:86:85:
         06:2e:98:4c:af:e3:e0:eb:58:eb:5a:c0:66:05:41:17:bc:29:
         1f:26:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:52 2026 by rpki-client