Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/34386BAAB90A11EF97D24653C4F9AE02.roa
File:                     34386BAAB90A11EF97D24653C4F9AE02.roa (raw, json)
Hash identifier:          8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=
Subject key identifier:   C1:D8:5F:5D:4B:13:C1:5E:55:AC:73:1A:92:4B:CA:AD:A7:DD:36:43
Certificate issuer:       /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial:       0287
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/34386BAAB90A11EF97D24653C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:16:43 +0000
ROA not before:           Wed 05 Nov 2025 02:16:41 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151354
IP address blocks:        103.210.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
                          rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
        Validity
            Not Before: Nov  5 02:16:41 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4747b-f2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:fa:48:dd:a6:65:d5:23:eb:a2:09:bf:81:
                    66:70:df:bd:ff:7b:4f:1b:95:61:1a:21:87:6f:0d:
                    6a:c4:d6:e8:e1:31:d1:be:7b:c5:36:05:d3:a8:80:
                    5d:7a:d6:9d:63:1b:68:27:8e:cc:70:b6:05:c9:fa:
                    f9:99:dd:b8:8a:39:51:1c:a1:b0:7b:8c:b6:bd:62:
                    ae:39:7c:ce:61:38:b7:8d:dc:4b:a5:2d:88:92:a3:
                    e0:ad:6f:2b:e9:d5:ce:6f:b7:93:48:6b:82:7a:8f:
                    68:91:93:10:cc:9a:f2:98:a1:b9:f8:60:f7:6c:e1:
                    20:84:c1:ec:f2:df:d6:dc:33:a3:b4:40:77:34:bc:
                    03:74:e1:74:f5:d5:44:fb:56:35:c6:7e:08:93:51:
                    e9:b5:ec:41:74:73:0f:f8:9a:85:9f:c4:1b:88:aa:
                    b8:a2:a7:5d:6d:31:50:d0:d2:8c:09:cc:a0:4c:61:
                    69:f9:bb:24:7f:c8:e0:8e:20:f3:f1:c9:4d:be:d2:
                    11:b0:20:d7:02:0b:0f:8a:c3:96:ec:67:e3:11:ab:
                    95:27:5a:f2:97:25:b2:fe:e2:73:8c:0b:73:f6:89:
                    85:6f:35:66:7b:3c:48:a8:c7:14:36:82:26:b1:41:
                    68:92:db:e5:ab:3e:8d:65:d9:20:40:42:44:8a:80:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D8:5F:5D:4B:13:C1:5E:55:AC:73:1A:92:4B:CA:AD:A7:DD:36:43
            X509v3 Authority Key Identifier:
                keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/34386BAAB90A11EF97D24653C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:08:44:25:f9:db:80:42:2c:a4:0e:37:f9:47:10:e2:79:0e:
         5b:3c:c9:40:2e:3b:b1:11:0e:df:8a:96:67:fb:35:58:25:18:
         2b:ad:1a:18:a1:9d:6f:b5:36:ae:1f:33:f1:50:b2:61:b3:7a:
         a4:d8:60:6c:b2:ee:52:f7:4a:44:90:8a:c8:39:dd:61:e7:4c:
         c3:14:24:91:d2:21:39:2d:5b:0f:49:73:de:f2:d2:fb:d8:35:
         f1:26:53:90:7c:99:37:b5:1f:5b:4c:03:a3:cf:3e:09:74:6e:
         11:24:ae:2a:5e:6a:3c:b8:f4:f2:9c:66:6e:40:e3:e5:05:a7:
         f4:3f:99:44:00:b9:3b:b4:6f:4c:f9:ab:e6:f1:6e:8a:a2:d3:
         ce:94:db:cf:09:86:7e:f2:82:25:6b:c5:ce:1f:eb:80:64:d0:
         65:d3:d7:40:6a:91:a6:c0:65:5a:dc:5a:53:fe:3a:67:fc:8c:
         9a:1c:59:18:79:e6:48:1a:33:26:8f:7b:99:83:3d:f0:b7:a6:
         1b:01:91:64:61:5c:3a:03:d5:12:0a:3e:d7:aa:17:c2:ff:e4:
         db:45:56:f1:cd:30:0b:37:67:ee:ec:43:70:dc:73:66:a3:88:
         97:db:69:2c:5d:d3:a6:87:1f:96:e2:de:7d:a3:02:2d:74:b0:
         94:64:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:07 2026 by rpki-client