Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/813EDCA4137E11EF9969A86BC4F9AE02.roa
File:                     813EDCA4137E11EF9969A86BC4F9AE02.roa (raw, json)
Hash identifier:          kHmzJQFISwyEUpGULb3zBF2TbRHI+xb67Nl+0z6kL98=
Subject key identifier:   DF:34:34:53:26:6E:A3:80:26:DE:64:FA:29:BC:69:65:43:04:6B:82
Certificate issuer:       /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E
Certificate serial:       01BC
Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/813EDCA4137E11EF9969A86BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:26:55 +0000
ROA not before:           Mon 29 Sep 2025 05:02:47 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151671
IP address blocks:        103.255.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl
                          rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E
        Validity
            Not Before: Sep 29 05:02:47 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a43e9f-9ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:c2:e0:20:7c:4c:57:3b:44:56:24:1d:b4:
                    08:78:11:22:9e:af:4e:e7:b0:73:70:48:40:b8:58:
                    00:c0:16:56:e9:45:be:4e:96:d7:7d:a7:da:bb:5f:
                    7d:cb:8b:e0:e0:53:00:bf:c1:1d:45:99:23:ba:7d:
                    73:81:1e:92:65:00:b7:c6:5e:90:39:db:63:f9:1c:
                    d5:91:b4:7f:3e:54:8e:ed:74:81:2b:16:d6:57:c4:
                    1b:43:bc:eb:2f:7e:4f:48:17:15:a4:ee:91:b1:45:
                    a9:b8:d8:52:37:75:e6:f4:cc:4c:93:80:f6:b6:15:
                    28:79:b1:9d:29:2e:5d:d8:d8:32:12:31:45:46:41:
                    01:18:5b:54:83:15:03:4b:93:e4:81:54:d9:ef:a3:
                    6a:22:00:94:77:0f:69:e2:4f:e3:73:9f:37:9f:ea:
                    cc:c3:76:38:38:97:23:c0:d2:fb:fc:18:74:3a:3a:
                    e6:4f:18:cf:16:8f:2c:9d:8a:09:6e:9f:a2:8d:68:
                    d2:b2:ba:e4:1f:94:8b:51:f9:34:67:30:ae:63:cb:
                    d9:be:b8:43:a9:b3:87:da:06:e1:ad:ed:6a:b1:9f:
                    c3:7d:08:6f:65:0e:b7:45:97:b3:bc:b9:e7:07:aa:
                    a0:5a:25:1a:f6:24:29:20:59:38:ec:cb:e7:61:2b:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:34:34:53:26:6E:A3:80:26:DE:64:FA:29:BC:69:65:43:04:6B:82
            X509v3 Authority Key Identifier:
                keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/813EDCA4137E11EF9969A86BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:70:55:3b:b8:37:51:ca:67:d8:74:29:42:47:35:a2:97:f1:
         25:8d:10:ec:80:e2:21:5c:b5:18:d9:35:8a:e7:d2:d8:e2:55:
         56:dc:5a:36:38:51:6b:f8:fe:f4:1a:15:0b:33:18:7d:e9:26:
         93:75:94:4f:de:8f:b9:2b:fc:a4:a0:a0:38:32:50:99:bb:07:
         af:24:80:6d:49:77:a3:cb:a5:b6:4d:4e:44:23:e7:78:ec:f7:
         a0:14:b7:c9:e5:74:55:55:53:2c:83:94:86:8e:3b:50:0d:cf:
         db:4c:9f:55:4f:01:fe:18:22:ef:5d:47:95:88:fa:7a:21:6c:
         ac:bf:01:d5:a4:e3:cf:01:ad:67:ac:d2:b1:a6:95:56:e7:85:
         56:4d:50:d1:b4:5e:73:25:4e:5f:6e:d9:39:ec:87:37:63:85:
         7d:b4:b4:6a:99:e6:c7:de:bb:ac:f1:63:f8:d9:cd:8a:72:1e:
         e8:41:ad:67:a5:46:05:7f:71:9a:a1:a0:a7:01:a1:30:56:b6:
         80:df:f0:74:10:4d:db:77:b3:eb:fd:d5:34:26:65:4c:b5:35:
         b3:58:0c:8a:d0:dd:eb:ea:bb:68:07:ec:52:d4:bc:40:36:38:
         36:3b:21:89:d6:3d:01:8b:47:01:3e:c4:19:9d:96:d2:61:55:
         a2:46:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:34 2026 by rpki-client