Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/5D79BDF8486C11EEB3C19A71C4F9AE02.roa
File:                     5D79BDF8486C11EEB3C19A71C4F9AE02.roa (raw, json)
Hash identifier:          z/CeXg1zE451kjdiV+L83Kbr1l7Vh3IeBEWeCzKi+60=
Subject key identifier:   7F:3F:CD:77:02:EE:A8:F3:A3:A0:72:8B:87:BF:CD:42:8C:3D:0E:9C
Certificate issuer:       /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Certificate serial:       01DD
Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/5D79BDF8486C11EEB3C19A71C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:18:51 +0000
ROA not before:           Wed 01 Oct 2025 04:31:40 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151654
IP address blocks:        103.250.122.0/24 maxlen: 24
                          103.250.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
                          rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
        Validity
            Not Before: Oct  1 04:31:40 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4128b-b8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:b7:2b:68:51:15:5e:22:a9:b1:57:b5:b8:
                    d5:f7:ab:f8:5a:ab:a4:e7:89:8e:6e:b3:83:5a:ed:
                    94:d0:d8:a3:1e:fb:8d:b7:b9:cb:3a:29:c1:dc:fc:
                    a4:d0:8a:d2:4a:10:06:30:fc:e9:7e:6e:06:2e:e0:
                    22:36:f2:3b:d3:da:4f:22:e3:12:98:62:53:24:15:
                    43:01:8a:3c:5e:c3:a2:27:a2:c6:c1:ca:26:ce:3d:
                    6e:06:42:4f:d6:22:0b:63:3f:34:5e:06:bd:e7:7e:
                    90:7d:5c:bc:be:08:27:8b:5c:c4:ba:03:6d:ad:3c:
                    97:11:01:71:d1:1a:78:82:c9:4d:61:a0:8b:dc:53:
                    d7:4d:a6:1b:58:30:80:fc:10:1c:04:37:02:bc:66:
                    01:5b:06:35:25:97:33:41:d5:44:74:af:e1:68:97:
                    4e:33:e7:90:79:22:b7:cf:a9:d2:c6:4e:5b:38:c4:
                    89:c5:70:80:00:8d:9f:30:b8:c0:86:55:dd:19:92:
                    ad:7d:33:d3:b8:c2:8a:f6:2c:35:db:c9:62:ed:8d:
                    80:7b:37:e3:3f:3a:59:6d:64:53:07:70:8a:63:2a:
                    ce:af:51:92:b1:02:0d:00:34:7d:7a:26:dc:08:0a:
                    f6:a8:18:71:67:54:ce:03:8c:af:2f:54:c8:a6:6a:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3F:CD:77:02:EE:A8:F3:A3:A0:72:8B:87:BF:CD:42:8C:3D:0E:9C
            X509v3 Authority Key Identifier:
                keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/5D79BDF8486C11EEB3C19A71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:c4:1e:f4:28:83:20:a8:c9:fc:a1:23:1c:c5:f5:89:0f:f1:
         a5:ee:73:b6:cb:9e:6b:21:64:12:4b:88:7c:c5:56:e5:a6:dc:
         57:b1:b1:46:fd:6a:f8:ee:59:5a:17:30:85:52:39:fe:6c:7c:
         d4:d0:18:c5:31:94:b6:3c:41:e1:88:b0:96:d6:28:2a:5d:1d:
         a0:17:8b:cb:34:7d:e5:52:dd:a1:3c:8d:46:e0:da:70:05:65:
         a8:f7:c3:f9:ce:73:65:c3:88:bc:c3:03:dc:b2:a2:b5:7f:d0:
         85:75:0a:98:64:95:24:9b:16:16:79:b6:9f:1e:b3:b1:7c:05:
         bf:01:c8:d7:50:7d:72:77:ca:fe:34:ab:55:ea:79:38:41:b8:
         b0:81:25:ef:d3:38:e8:53:65:de:dc:bf:cb:7b:12:d0:04:e0:
         61:07:ca:88:1e:31:40:4a:cc:af:4f:a1:2f:a4:7e:6d:5c:24:
         66:c4:6d:5c:16:ce:77:e8:3b:d2:23:23:29:da:66:28:ba:5e:
         14:33:48:09:54:9a:6d:5e:42:1b:18:62:c4:52:2e:e2:9a:74:
         dd:65:ff:c1:09:c5:d5:55:38:30:01:90:b1:03:7b:ea:24:2a:
         3c:3e:eb:79:ec:36:ec:56:4d:83:01:4b:b0:b2:5e:a1:77:f3:
         3a:e7:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:54 2026 by rpki-client