Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/29D7838672F611EEB309873EC4F9AE02.roa
File:                     29D7838672F611EEB309873EC4F9AE02.roa (raw, json)
Hash identifier:          A4vS1iBIFna31/2+QmW4fzKxufr25An/KZ05zs9GbyQ=
Subject key identifier:   3F:54:DD:48:E5:EE:83:34:3E:99:50:73:A5:EB:8C:58:06:11:6B:AB
Certificate issuer:       /CN=A9163BFD/serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6
Certificate serial:       01BC
Authority key identifier: 10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/29D7838672F611EEB309873EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:39:59 +0000
ROA not before:           Fri 29 Aug 2025 04:52:59 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136508
IP address blocks:        103.141.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl
                          rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BFD, serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6
        Validity
            Not Before: Aug 29 04:52:59 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3ed4f-f376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:b3:f1:d1:e1:ac:d6:f0:e6:5b:42:69:6d:
                    14:90:26:a5:f5:2b:88:bd:ab:f2:9e:b9:b4:f7:c7:
                    80:42:f0:0c:21:6d:4d:f5:7a:2b:3b:79:c0:84:55:
                    01:1d:59:2f:a1:a3:e5:0c:b0:2c:12:75:92:30:01:
                    b5:37:96:ff:a4:88:0c:18:b6:2e:23:98:8f:99:6b:
                    e2:bc:07:a0:ed:2d:87:0e:d2:de:ec:4e:57:d6:50:
                    07:bf:2d:c8:2b:72:39:6a:10:e3:12:4a:f2:70:02:
                    04:02:51:d4:f4:1c:2f:53:b2:a3:8b:b5:97:50:89:
                    d7:37:84:9b:b1:d1:c3:56:6d:e4:03:ee:c9:22:c1:
                    cb:a7:01:e2:75:ff:d5:88:fc:bc:a2:38:3b:ce:6d:
                    e8:1b:9d:90:57:bf:74:da:7d:7f:0f:44:58:c9:b3:
                    75:83:9a:5b:a7:71:6a:7e:07:e0:b9:87:44:26:35:
                    a4:d9:3b:da:24:25:ad:54:ad:e5:2e:e7:9e:8d:7b:
                    15:34:cd:1c:6f:2d:fe:e4:4f:b8:7d:da:8c:cb:bd:
                    ad:9e:2c:ea:62:16:b1:1e:91:1d:07:ba:81:fb:9b:
                    72:c4:2e:ee:5e:96:12:f3:fc:ba:e4:30:46:2f:f7:
                    97:b4:ab:03:c8:ed:c7:44:5d:8c:ba:2f:80:26:a3:
                    49:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:DD:48:E5:EE:83:34:3E:99:50:73:A5:EB:8C:58:06:11:6B:AB
            X509v3 Authority Key Identifier:
                keyid:10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/29D7838672F611EEB309873EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:b7:ce:1e:56:59:76:85:a0:bc:84:ff:c4:9b:6d:ea:fc:08:
         96:b1:46:1d:08:21:9a:14:b6:24:a5:43:29:83:dc:4f:5e:1c:
         62:4a:2d:73:bc:99:07:1b:50:84:65:00:ff:08:d0:24:ca:ef:
         af:20:c9:5d:7b:78:c7:47:c2:cc:33:bc:eb:8d:de:27:27:90:
         62:37:67:ad:bf:e6:80:61:4f:8b:27:c5:a1:49:89:09:23:87:
         9d:b7:0d:e2:b1:37:78:73:e1:13:04:6f:00:12:b3:a3:6e:43:
         11:97:cb:7e:87:20:a2:92:fe:55:c9:11:13:dd:e8:dd:84:83:
         4d:fe:89:b8:a8:37:29:b1:d1:52:61:c2:b8:98:92:ad:4f:12:
         cd:b0:02:28:e5:fb:c4:56:1c:30:30:02:b2:4f:d4:17:d1:51:
         c1:0c:34:d7:25:e0:2c:4e:ba:bb:28:34:15:66:39:03:a9:f1:
         f4:c1:dc:af:e8:24:f6:74:a1:c7:b4:5a:44:61:df:de:98:17:
         ae:e3:b1:6b:16:a0:1e:bd:f3:20:7f:f0:29:fa:4f:5d:e5:6a:
         7b:34:56:02:12:7b:b0:98:ca:7c:5d:b6:4d:f7:03:8c:95:6e:
         24:e0:0a:24:75:f1:5b:03:3d:b0:30:cc:81:44:4d:7a:c1:38:
         b7:da:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:36:40 2026 by rpki-client