Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/325A2ABA2F6D11EBAE27D010C4F9AE02.roa
File:                     325A2ABA2F6D11EBAE27D010C4F9AE02.roa (raw, json)
Hash identifier:          oIT8yyjoY4BKe1hUh+l+xOYZZJa9NDYiFaHXxYp/DBg=
Subject key identifier:   8F:BB:6D:D3:D5:56:23:B6:95:BC:33:F7:B1:EE:32:2F:0D:72:69:8D
Certificate issuer:       /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
Certificate serial:       07CA
Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/325A2ABA2F6D11EBAE27D010C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:41:25 +0000
ROA not before:           Mon 28 Jul 2025 22:32:48 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137903
IP address blocks:        103.116.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl
                          rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1994 (0x7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
        Validity
            Not Before: Jul 28 22:32:48 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a409c4-bc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:da:7b:5d:ea:09:af:ff:22:7b:5f:3b:b5:
                    9f:d0:ab:e8:37:87:08:0d:24:f2:2a:35:5e:91:d0:
                    9b:b2:f6:9c:0b:51:14:6b:c8:04:39:1f:b9:44:3d:
                    07:79:25:e2:e3:78:1b:23:79:dc:3b:9c:56:5c:62:
                    27:f1:71:ff:09:48:f4:10:fc:43:c9:0b:d0:94:5c:
                    44:40:8d:ca:3d:72:ab:b2:1c:75:ad:03:1b:1c:7c:
                    78:81:87:19:2d:63:e1:39:cb:cf:4a:10:60:9c:a5:
                    15:13:bf:0d:3e:80:5b:25:e3:50:07:92:f0:28:19:
                    0f:e1:d4:ff:3b:d7:0b:84:7d:b2:af:47:21:f6:40:
                    35:4f:41:91:a4:32:09:93:b0:ff:ca:f9:39:21:15:
                    7d:3a:eb:93:87:e2:15:7d:6e:ca:0c:e8:ae:ad:5c:
                    80:51:dc:28:18:25:6b:c2:2e:df:90:9c:3a:3a:af:
                    e6:02:ed:c6:2e:0e:6b:5e:44:ca:d5:61:0b:33:8d:
                    11:4f:3b:70:86:58:39:f3:19:07:a1:a0:7a:dc:e1:
                    fb:7d:c4:3c:74:74:1d:23:94:7b:59:b0:05:51:80:
                    e4:a0:11:f2:67:7d:64:83:78:89:b7:25:94:3d:93:
                    31:28:f9:f2:1f:4e:bd:3e:5e:b5:93:7c:4b:6c:77:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BB:6D:D3:D5:56:23:B6:95:BC:33:F7:B1:EE:32:2F:0D:72:69:8D
            X509v3 Authority Key Identifier:
                keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/325A2ABA2F6D11EBAE27D010C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:63:5f:50:f8:1e:1b:6f:2d:6e:79:50:85:0b:83:f8:86:d2:
         45:f6:e8:c9:6e:16:9a:e6:68:4c:90:ac:58:3f:1e:75:88:e4:
         e1:53:ac:87:2e:51:b7:0a:4c:b2:c4:aa:7a:61:9f:ae:27:0d:
         1b:3c:a9:74:71:bf:6d:fb:64:0d:98:36:ec:4b:c0:74:36:b2:
         0b:ec:64:21:02:1d:66:c8:d2:ad:0e:92:d2:b3:7e:2b:6e:17:
         a1:b3:53:d5:19:27:da:de:2a:01:f3:58:3a:a4:b5:98:c9:00:
         67:58:72:ac:f1:63:5a:8b:12:47:67:da:75:71:e9:4a:c0:03:
         27:85:06:87:d3:cd:6d:80:86:69:3d:95:b3:11:b5:7b:bf:76:
         67:6e:e7:22:80:04:a8:74:bf:91:98:7c:12:5f:a2:c4:6e:f9:
         21:9d:09:a9:3c:e9:bf:7b:d6:4f:b7:c0:48:b4:43:0a:0e:2b:
         32:ce:e6:e9:75:20:d7:20:ba:a5:9f:9e:34:f8:20:46:2c:5d:
         6f:34:1a:ab:16:d9:02:64:48:86:3c:18:4a:4e:8b:d0:13:00:
         98:be:76:d8:8f:ab:b7:3c:50:d4:e0:cc:5c:38:e2:9c:c0:c0:
         a5:f7:65:21:99:0c:08:fe:c7:38:85:d7:04:bb:9e:e5:8e:65:
         2c:75:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:34 2026 by rpki-client