Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
File:                     B24758AE772311EFA5510A63C4F9AE02.roa (raw, json)
Hash identifier:          PCIW0fEME2KOfnq/TRE2cq6zzHOhVe+Ww8ZwI33T/9A=
Subject key identifier:   7B:23:3F:53:AC:9C:13:8B:F2:DC:07:DB:7B:08:21:63:7B:72:7C:6A
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       0251
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:27:29 +0000
ROA not before:           Wed 05 Mar 2025 04:19:32 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     10225
IP address blocks:        103.182.210.0/23 maxlen: 23
                          103.182.210.0/24 maxlen: 24
                          103.182.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
                          rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
        Validity
            Not Before: Mar  5 04:19:32 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3ea61-b817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:91:69:7f:c8:47:84:52:f3:97:5d:43:c8:0a:
                    08:80:40:da:90:c3:94:40:84:50:28:9f:2d:c3:cf:
                    52:c0:06:32:e9:4b:3e:b1:73:81:28:70:01:63:ee:
                    2a:16:62:24:f7:db:98:27:5a:65:41:3b:19:33:38:
                    d6:35:a1:85:3d:06:f3:38:5e:55:39:c5:4e:ab:10:
                    24:6d:49:a8:2f:46:68:2f:90:31:98:e4:c6:f0:79:
                    35:fa:53:98:5d:32:95:e7:94:d4:7e:4d:52:65:63:
                    e4:14:11:04:81:f8:96:32:60:4e:bd:34:05:c5:a1:
                    61:5e:6d:33:06:32:a9:21:f0:c7:01:2e:91:99:dd:
                    69:e0:51:0a:e4:63:21:75:5a:8a:f6:e5:cb:80:44:
                    1c:99:b7:07:ab:99:bb:18:e9:7d:2c:95:95:af:79:
                    ce:c7:31:98:2b:49:ee:df:52:b6:18:76:0c:85:c1:
                    d3:eb:fb:d0:fd:9b:85:41:f4:37:3e:e9:e1:35:a0:
                    79:5d:45:40:12:f8:83:a1:7f:c7:ae:2d:83:c5:b0:
                    32:9e:fb:a9:7a:f9:80:b8:68:6d:d1:8d:e0:2c:b4:
                    69:c1:c8:1a:be:94:12:23:9b:34:d1:76:af:d3:3b:
                    d9:52:9a:79:47:f7:26:17:01:61:ff:04:f9:8c:93:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:23:3F:53:AC:9C:13:8B:F2:DC:07:DB:7B:08:21:63:7B:72:7C:6A
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:e4:de:32:bb:64:d3:99:38:a4:1e:07:c9:2c:78:da:a4:df:
         53:73:c7:1f:35:b9:01:e2:f8:9b:4e:6a:a2:01:2b:f3:bc:8a:
         51:d0:97:88:1a:d7:96:7f:2c:c0:a6:2b:ba:58:06:36:17:50:
         43:c9:7c:0c:6a:ef:bc:55:26:9f:be:63:91:4c:c1:ea:11:65:
         ee:29:33:85:f1:de:fb:8b:18:64:35:77:7e:91:f4:78:70:99:
         df:17:cd:04:5b:dc:a0:68:95:ba:87:5a:55:7a:84:84:c7:5d:
         85:ac:b4:67:51:22:f5:42:ad:8c:c4:79:13:8f:04:22:f9:05:
         61:08:33:16:fe:a2:bf:4e:60:68:9c:ae:fa:f2:12:66:b4:51:
         ec:ac:36:65:e1:2e:1d:e9:b6:a4:4a:fe:64:96:a5:9b:02:fc:
         ac:1d:0b:75:96:1f:84:ea:67:ab:eb:dd:dc:1d:e6:dd:dd:85:
         ea:e6:05:cd:c4:bc:70:93:7c:da:88:ee:6b:b8:78:c6:d7:ad:
         7e:6b:f1:c9:22:cd:24:51:b9:95:3f:0f:f4:73:5d:bd:5b:ed:
         d6:88:f5:a6:39:ba:6b:7f:9e:3a:61:14:00:02:85:91:56:33:
         2a:4a:bd:74:14:e4:45:1b:45:8d:fc:9a:a5:81:8a:67:bc:c3:
         11:aa:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:28 2026 by rpki-client