Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/449C08948D1211EBB9548186C4F9AE02.roa
File:                     449C08948D1211EBB9548186C4F9AE02.roa (raw, json)
Hash identifier:          CkrD7mjSYB1KxMhffEe1r6e55NIjcWqRcIt0BrrvQjw=
Subject key identifier:   CE:E2:97:91:79:51:14:D4:36:D9:82:BD:49:A1:9C:28:5B:96:66:85
Certificate issuer:       /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Certificate serial:       2107
Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/449C08948D1211EBB9548186C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:33:51 +0000
ROA not before:           Wed 14 May 2025 16:05:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132819
IP address blocks:        103.25.198.0/24 maxlen: 24
                          103.25.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 12:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8455 (0x2107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
        Validity
            Not Before: May 14 16:05:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a583af-6ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:cf:48:28:44:16:c0:7b:dd:6e:81:dd:3f:
                    e8:2a:13:65:14:b5:24:3c:b8:00:c9:3f:2c:e7:c2:
                    89:35:26:6e:bd:6e:04:f0:96:f1:ae:9c:6c:d1:71:
                    1e:a9:5f:5a:1b:eb:4b:27:11:38:94:35:56:61:bf:
                    16:54:7b:ae:a7:f1:e1:91:e9:88:41:b6:e5:6b:88:
                    79:eb:32:60:60:e2:40:d6:d2:11:46:73:21:0e:75:
                    8d:c3:1b:53:38:06:09:8f:e1:34:8a:83:f4:f7:13:
                    8f:df:bc:06:64:03:ec:34:05:7b:20:ed:49:45:26:
                    9d:4c:01:4d:d7:22:e5:cd:c8:b2:95:1d:16:b8:60:
                    0a:fe:7f:84:43:eb:ac:27:74:fa:26:9b:c3:42:44:
                    fc:09:ea:9b:95:01:e9:f5:7e:a4:70:1f:91:7a:0c:
                    ed:01:74:8b:41:ce:7c:d6:ea:02:b6:16:0f:2e:7c:
                    dd:47:08:f0:c7:5b:ff:31:98:f4:f7:92:f2:6a:2a:
                    74:92:8a:b3:5d:1a:c7:0d:04:da:86:9f:4e:f8:e2:
                    96:51:a9:28:a0:b9:c5:53:ef:4b:d0:bd:d2:1e:41:
                    4c:24:9f:8e:e1:e6:65:3c:3a:3d:75:2b:e0:0e:fe:
                    93:bc:94:ed:8c:f3:81:9f:d1:2b:7b:1e:d5:4f:f6:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E2:97:91:79:51:14:D4:36:D9:82:BD:49:A1:9C:28:5B:96:66:85
            X509v3 Authority Key Identifier:
                keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/449C08948D1211EBB9548186C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:58:95:3a:32:fc:10:91:c5:05:83:1b:a6:36:4e:df:05:f0:
         4b:01:57:bd:20:0c:e2:28:c9:d2:fd:a8:97:89:43:cc:85:08:
         1e:fb:b8:f5:a7:29:49:6c:a2:9d:15:01:7d:80:94:a2:be:9f:
         94:b1:18:ac:c4:56:45:8a:47:ea:a9:c6:b3:e8:2a:6d:6d:e4:
         8d:41:c6:13:7c:b5:74:8d:b7:ca:2e:bb:1f:20:a6:59:7b:f6:
         43:3b:8c:79:fb:6c:5d:d3:02:01:f2:d7:6b:27:91:80:02:aa:
         88:90:19:30:76:53:7a:e1:c1:b6:f9:3d:11:4a:8f:28:5b:23:
         ea:e3:02:66:63:3e:47:2e:8c:57:f4:e2:89:e2:c6:26:43:bb:
         5d:e1:c0:b6:f2:20:93:95:6d:b2:f2:85:89:77:9f:a0:e8:68:
         b6:17:07:ab:17:15:80:18:82:33:58:9d:e5:60:62:51:03:8f:
         68:c0:09:ad:63:f8:d2:dc:2a:3c:9a:eb:bb:c0:cc:0d:9e:f7:
         d2:f8:fb:52:c9:11:56:76:6d:f1:16:99:3b:a4:c5:00:78:0f:
         95:09:b0:d2:cb:25:a0:01:11:5a:e4:08:6d:6c:62:06:11:b1:
         5f:3f:22:c2:63:8b:3d:8d:b2:7b:67:fa:65:90:85:49:a7:e8:
         c7:f9:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:52 2026 by rpki-client