Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/B0DA9FC46FDD11E9BC194664C4F9AE02.roa
File:                     B0DA9FC46FDD11E9BC194664C4F9AE02.roa (raw, json)
Hash identifier:          xWX82z7DTTDkk9QFkifnplMXIfO3IucnkjNNIuFHa74=
Subject key identifier:   29:C3:7C:AC:2B:D8:AD:4E:6F:A8:43:24:6E:CD:CC:6E:35:89:D7:F7
Certificate issuer:       /CN=A9165B41/serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
Certificate serial:       101F
Authority key identifier: 9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/B0DA9FC46FDD11E9BC194664C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 17:35:02 +0000
ROA not before:           Tue 28 Jul 2026 17:35:02 +0000
ROA not after:            Sat 28 Nov 2026 00:00:00 +0000
asID:                     135111
IP address blocks:        103.110.196.0/24 maxlen: 24
                          103.110.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl
                          rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4127 (0x101f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165B41, serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
        Validity
            Not Before: Jul 28 17:35:02 2026 GMT
            Not After : Nov 28 00:00:00 2026 GMT
        Subject: CN=6a68e846-b1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:52:97:10:46:6a:1d:88:e2:7b:ec:4d:7f:
                    ab:6a:1b:d2:76:0f:8a:63:c1:dc:9c:ba:ce:91:cd:
                    53:bc:bc:86:34:7c:20:f3:fa:0f:4f:c1:33:a8:8e:
                    41:a9:ae:55:11:30:dc:25:88:a6:ca:ab:f7:2b:6c:
                    18:55:85:93:0d:e3:31:28:3c:05:23:db:85:50:70:
                    ab:39:c9:3b:7a:af:26:07:b5:8d:62:e6:01:ed:71:
                    66:6f:51:5c:5d:37:05:6e:53:e0:fc:32:0a:47:74:
                    1f:a4:6c:83:8b:7e:0b:51:ef:66:78:bd:0a:5b:45:
                    a6:db:7f:f9:48:a3:26:52:55:80:be:be:db:17:d0:
                    48:be:06:8f:96:f7:5f:6f:fc:83:2f:5c:c7:50:0b:
                    0c:74:d1:30:03:c5:7e:7b:a7:5f:2d:05:3b:8c:73:
                    f2:92:3a:de:0d:eb:ab:ce:28:92:3d:d9:b7:9c:d8:
                    57:11:9b:84:65:64:80:62:29:04:61:16:5f:8a:c0:
                    a2:79:68:b4:54:f2:84:be:48:da:eb:11:eb:e3:2e:
                    99:03:78:0d:36:f8:15:b9:89:df:e5:8c:32:31:35:
                    2e:65:81:98:17:a4:8a:04:bb:3d:ae:9e:83:41:f5:
                    92:28:89:15:dd:37:24:94:82:b5:8a:64:b0:af:7d:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:7C:AC:2B:D8:AD:4E:6F:A8:43:24:6E:CD:CC:6E:35:89:D7:F7
            X509v3 Authority Key Identifier:
                keyid:9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/B0DA9FC46FDD11E9BC194664C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:eb:b5:53:38:35:3f:5c:b1:66:86:e5:8e:da:79:4f:40:0e:
         1a:99:db:e5:9e:7e:08:79:4b:8d:61:03:f3:6f:0a:21:81:6f:
         fb:a1:07:d7:7e:e3:3c:c8:be:d1:9b:0a:77:ab:98:73:d9:6f:
         7e:29:c2:43:3a:4e:34:33:1b:33:1d:51:6f:82:87:92:92:10:
         42:e9:79:82:2d:f6:a1:fb:50:db:32:a1:36:fd:e7:e5:08:8e:
         31:85:6d:c5:ce:71:9f:80:a5:9a:80:31:0e:de:b9:84:c8:9e:
         54:be:c1:e5:f6:a5:e7:e1:e0:49:e6:92:4c:cf:3e:a2:d0:3c:
         3b:16:07:74:48:6e:e5:83:5c:c5:e4:a7:a7:2e:e2:53:c5:75:
         bb:04:3c:69:e5:29:77:91:d7:12:f5:e8:40:5d:79:9b:64:07:
         09:d5:fc:ea:d3:cf:d0:a5:a5:91:4c:e1:ce:1e:31:36:17:c7:
         a3:ff:22:a4:d3:d4:0f:bf:4d:6c:e3:f3:51:88:7b:23:a6:b6:
         a0:ff:2e:c6:cb:71:5e:e3:77:5d:a3:0c:04:54:2d:8e:8d:da:
         b7:58:96:6f:09:cb:56:30:cf:d7:0c:c2:43:a1:64:bf:41:d0:
         8f:5c:98:5e:f7:eb:c3:04:d4:6b:9e:1a:3a:d1:56:ad:a7:e1:
         3d:75:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:45:39 2026 by rpki-client