Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
File:                     64D427963D8B11EE80D1E96DC4F9AE02.roa (raw, json)
Hash identifier:          poF5iER85gmZG51MJJTxxsmqAYXARy0knubqmMXJg/4=
Subject key identifier:   99:01:4D:20:24:6D:88:00:69:9D:79:6C:6F:35:C2:39:FB:5D:6A:D2
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       0271
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:52:22 +0000
ROA not before:           Tue 05 Aug 2025 03:11:01 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133534
IP address blocks:        103.234.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Aug  5 03:11:01 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46ec6-7edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:48:72:51:ec:83:01:ae:55:50:b2:02:ba:
                    c6:1f:56:22:2a:71:a2:a6:29:f5:ab:32:a7:e9:df:
                    ea:bb:6c:51:c2:02:c7:c3:bd:e9:13:99:af:39:2e:
                    0d:a1:61:3d:fe:ec:c6:f0:63:00:b0:48:ce:ef:1a:
                    80:54:bc:55:6d:65:27:a4:dc:9e:32:97:58:0d:81:
                    70:dd:d2:ef:22:c7:6e:c3:4b:58:19:e1:33:f2:0c:
                    32:81:c2:a8:85:55:40:3c:37:e3:58:71:3e:6e:ed:
                    2e:fb:39:9e:9e:60:f5:b8:4d:55:1a:00:8b:d4:6f:
                    94:16:fa:da:dc:f5:86:30:51:58:57:54:02:32:52:
                    86:84:41:65:44:ec:e4:0f:6d:fe:60:45:db:a8:5f:
                    a8:82:c5:c4:28:41:a8:e4:c0:e0:ef:f4:c1:87:e6:
                    dc:39:d5:e9:46:f2:18:8e:7c:bc:ef:19:f1:06:4d:
                    bf:cd:b9:a7:05:a4:a0:02:40:9e:ab:0e:92:42:4f:
                    da:5f:f4:19:1b:8e:ee:c9:7f:7f:13:60:11:95:a2:
                    86:a2:d0:f9:c7:b3:4e:eb:60:02:72:d0:25:03:cd:
                    5f:52:10:01:6c:b5:7d:93:77:9b:af:f9:2d:be:aa:
                    5e:ba:3c:6b:30:22:68:af:1d:ef:51:4e:d8:6d:52:
                    27:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:01:4D:20:24:6D:88:00:69:9D:79:6C:6F:35:C2:39:FB:5D:6A:D2
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:23:6c:57:21:43:3b:75:f5:38:91:8a:2d:09:95:67:ac:5b:
         1d:ac:d0:42:0c:22:0e:a2:ea:7d:0f:09:e4:b6:1b:8f:bf:a0:
         c5:ca:1a:a3:cb:27:03:7d:9e:a2:d9:f8:ec:d8:68:63:72:4d:
         92:5f:38:34:a2:5a:10:7f:37:d8:9d:89:98:38:26:da:89:54:
         6a:80:3b:0c:67:78:65:6b:bd:02:17:62:7f:5d:02:95:f4:10:
         36:d6:65:7f:44:d9:27:92:2b:c4:01:e8:94:f0:64:6c:53:65:
         ab:97:1f:42:ab:00:6f:82:6a:bc:7e:40:b1:52:db:55:5f:e5:
         6c:53:d5:10:a5:d1:45:c4:55:eb:ed:af:ca:3c:e9:32:f1:f5:
         fd:35:8f:39:6c:35:69:90:d4:ec:ab:05:27:83:3f:e6:3f:4e:
         17:6b:d9:37:e0:1c:fc:77:c3:07:93:6b:83:88:a5:46:92:d7:
         23:97:f6:ed:c9:7f:3a:8e:58:3d:5d:d0:05:4f:58:2a:6b:53:
         46:52:51:94:be:3d:ae:0d:86:ef:74:dc:ac:3c:27:5c:bc:2c:
         a3:72:6a:52:20:88:24:0b:26:f6:39:2f:12:6c:34:48:de:ea:
         89:ba:59:a8:7b:fc:f6:c6:aa:7d:63:b8:c6:cf:06:98:79:a4:
         1b:b9:f9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:30 2026 by rpki-client