Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/CC3EDFDEAA5211F1BB7371B85B11F970.roa
File:                     CC3EDFDEAA5211F1BB7371B85B11F970.roa (raw, json)
Hash identifier:          Ms0xxfw0xPuWdFx2As656pXikuhQssH+FnkLgBCuV6M=
Subject key identifier:   B2:53:76:FE:1D:15:C0:FE:CB:99:DE:2B:42:D3:8B:0B:7C:23:FE:14
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       061A
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/CC3EDFDEAA5211F1BB7371B85B11F970.roa
Signing time:             Mon 07 Sep 2026 00:26:42 +0000
ROA not before:           Mon 07 Sep 2026 00:26:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133415
IP address blocks:        103.116.171.0/24 maxlen: 24
                          103.227.234.0/24 maxlen: 24
                          103.227.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: Sep  7 00:26:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a9e04c1-8ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:4d:62:fc:a6:64:1a:3c:11:a6:2d:4b:b5:
                    ff:3f:bd:90:a5:7c:ba:b1:2d:12:c4:6b:22:6a:39:
                    98:e7:bf:33:de:b1:31:20:a9:2c:b3:ce:23:a5:0d:
                    d8:44:a4:fe:a8:9a:25:de:62:ee:0f:90:21:c8:40:
                    09:da:b2:36:95:0d:24:20:42:4a:0d:fc:e2:4c:c8:
                    5a:9e:57:62:65:7b:e6:15:ef:a4:79:fd:fa:48:47:
                    31:06:30:21:83:cb:a5:a5:da:f8:fd:64:6e:f9:7a:
                    fc:af:21:93:fd:59:0e:5a:2d:09:fc:c3:1d:03:00:
                    69:ad:3e:77:0c:3b:c7:83:64:be:7e:ae:2e:24:87:
                    0d:98:55:a9:10:6b:10:55:d2:69:46:78:2f:2e:3b:
                    6a:cc:0d:da:47:58:62:89:f3:b4:df:6d:9e:a1:3e:
                    87:c9:df:50:4d:75:37:3e:a3:37:32:24:c9:fe:37:
                    69:5e:7a:f1:50:4d:a0:0f:39:9a:2e:fd:b1:2a:9f:
                    92:36:5e:59:97:b1:8e:ca:dc:b3:fc:f7:c9:50:37:
                    69:81:bd:7e:cf:52:ab:e7:7a:8c:eb:84:4b:a5:a7:
                    d9:1e:8b:35:00:cc:82:3d:9f:f6:0f:24:ef:52:2e:
                    cf:ad:09:fa:67:7c:a1:ce:3d:a4:e1:25:d2:37:9e:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:53:76:FE:1D:15:C0:FE:CB:99:DE:2B:42:D3:8B:0B:7C:23:FE:14
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/CC3EDFDEAA5211F1BB7371B85B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.171.0/24
                  103.227.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:35:b1:d4:8e:c0:5d:09:4d:e5:af:97:b6:94:3e:51:20:96:
         a6:9d:31:e4:ac:a3:7e:d9:26:a9:3f:07:96:33:66:e0:6e:ac:
         70:ea:b9:9a:f9:44:71:55:ae:65:dc:cd:87:37:23:a7:fc:01:
         ad:65:08:a6:fe:90:c1:d0:df:f5:73:cf:98:a9:4e:56:2a:d7:
         64:3e:1e:18:dc:21:c0:ff:49:de:8b:ad:0c:00:07:46:e3:7c:
         da:51:e5:54:fc:dc:e5:3a:19:78:80:c1:33:b4:51:9d:b7:99:
         14:46:a7:d8:83:65:74:0a:d9:e5:20:b6:f7:49:12:bb:97:e4:
         2d:7e:45:6c:05:a2:77:20:9e:bd:2b:c3:a1:f1:92:0b:a7:70:
         98:0c:07:79:5a:2a:db:c3:65:e7:38:e9:30:5d:cc:90:b7:bf:
         0b:f9:ac:9f:50:96:4b:f3:da:00:91:95:3c:95:c3:53:f5:cf:
         ba:e3:01:39:12:9c:00:64:4c:80:26:9e:26:40:2f:9a:c6:41:
         15:9c:ed:f5:3e:56:4b:c7:9c:6d:db:a6:5f:cd:77:c6:35:e6:
         ee:29:9b:58:90:b6:d4:27:21:6a:58:75:ee:51:12:85:97:e0:
         18:8f:3c:66:64:c0:fd:69:20:4b:d5:b6:dd:52:68:61:18:5a:
         25:8a:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:33:51 2026 by rpki-client