Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa
File:                     9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (raw, json)
Hash identifier:          xnBTgZgKcT/ckvkR025VfmbRMRDm1gAIO/fOxIRSEIM=
Subject key identifier:   BB:11:96:A9:3B:91:B6:51:44:D6:03:F7:18:E5:B7:C5:88:43:4E:7A
Certificate issuer:       /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial:       0E8B
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:27:34 +0000
ROA not before:           Thu 28 Aug 2025 18:08:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     134148
IP address blocks:        103.5.242.0/23 maxlen: 24
                          2401:c7c0:21a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3723 (0xe8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
        Validity
            Not Before: Aug 28 18:08:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a468f6-8636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:0b:f8:78:35:45:9b:c4:a4:a6:d4:1c:1c:
                    eb:0f:f2:80:8f:db:66:ab:ee:68:54:80:d6:d2:c3:
                    a7:ab:4c:ab:0b:29:45:dc:b7:d8:13:49:28:56:6b:
                    f7:d7:3b:d9:aa:b5:fe:62:cc:d7:1a:38:47:75:5f:
                    fb:6a:0b:4d:60:c8:15:91:c5:b1:d5:9d:82:be:14:
                    67:87:f3:c3:12:82:44:3d:e9:d6:b1:0a:70:1c:23:
                    82:40:9a:83:82:81:34:3f:31:17:89:fe:90:1d:7d:
                    e8:fa:c5:8a:57:35:ea:6e:d0:08:16:7e:12:8d:a6:
                    d4:3a:fe:62:8c:13:06:8b:49:c5:ae:d2:b6:5f:df:
                    60:50:e9:91:02:3c:20:65:ea:62:27:ca:1b:1f:76:
                    1e:3a:d2:da:db:98:b5:42:cc:0b:54:fa:9d:7f:0d:
                    55:d3:7a:c7:e1:f7:07:28:0d:35:bc:7c:c6:33:55:
                    b6:2f:6f:9a:05:cf:50:d7:b2:0c:f6:c4:16:c1:ce:
                    44:2c:b9:cf:48:ad:ae:ed:26:41:7d:8a:af:aa:95:
                    b4:3f:34:2a:c1:13:5c:22:08:a4:dd:65:69:b7:ec:
                    2a:6f:08:f3:7d:5b:b2:b1:72:98:c9:f8:9a:12:37:
                    8c:2e:d7:44:bc:56:7e:d5:50:7b:1b:44:c8:cd:52:
                    0a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:11:96:A9:3B:91:B6:51:44:D6:03:F7:18:E5:B7:C5:88:43:4E:7A
            X509v3 Authority Key Identifier:
                keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.242.0/23
                IPv6:
                  2401:c7c0:21a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:ce:f3:7a:19:bf:f5:b1:71:4d:b4:87:ee:9d:a0:0c:12:50:
         d3:6f:75:76:26:44:25:cb:8d:8a:c4:ba:62:6e:8e:ae:50:20:
         d6:2c:db:e2:44:26:7f:a1:38:89:94:89:a1:1e:fd:21:9c:a9:
         32:6c:59:9a:f0:2b:7c:47:b9:52:8e:9f:49:6f:5e:86:8b:9f:
         2e:a5:9e:81:97:9e:6d:30:a4:5a:97:91:7b:b0:93:e0:66:34:
         a3:a0:66:64:27:3f:e9:16:00:06:7c:15:ce:21:01:35:89:fa:
         9c:f4:5d:e9:05:0c:c3:6f:d2:ea:3a:7f:68:90:77:50:b2:f4:
         a6:f2:e3:3a:6c:25:83:1f:80:d6:1c:e4:4c:69:77:e7:ce:37:
         cd:3c:18:1b:88:0e:1f:2a:de:90:2a:e7:54:bd:bb:1a:57:b3:
         5d:6a:c7:cb:1d:bd:e6:92:ee:22:9b:99:57:de:7a:ba:84:d0:
         9b:74:d9:20:4d:ff:e3:85:20:bd:71:4b:70:7d:a6:ef:18:33:
         0b:dc:f4:82:0c:82:5a:14:25:11:63:02:1c:4c:25:41:79:08:
         62:62:97:cc:b8:a3:10:c6:8b:df:d0:97:ed:97:11:5b:8a:7c:
         46:d8:c1:6b:57:4a:4d:77:63:56:77:cd:27:e1:fd:23:f2:62:
         a1:87:54:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:41 2026 by rpki-client