Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/3FF85EE88A6C11F18AC6DE993F11F970.roa
File:                     3FF85EE88A6C11F18AC6DE993F11F970.roa (raw, json)
Hash identifier:          DQXrNc95cxUGYQVQkKsxBmvCdcmn9YS5SIvwcsF7Ii4=
Subject key identifier:   91:65:12:7A:16:9B:65:FC:4C:A8:3E:0B:B4:06:F7:E0:AD:BB:5E:A2
Certificate issuer:       /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial:       0D2D
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/3FF85EE88A6C11F18AC6DE993F11F970.roa
Signing time:             Tue 28 Jul 2026 10:08:16 +0000
ROA not before:           Tue 28 Jul 2026 10:08:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154750
IP address blocks:        103.115.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
                          rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3373 (0xd2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
        Validity
            Not Before: Jul 28 10:08:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a687f90-397b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:d9:34:09:d2:38:45:47:b4:9d:49:cf:03:
                    23:69:49:43:bd:0f:03:dd:01:02:c2:a3:73:c9:63:
                    b6:9c:58:f3:91:00:21:d3:11:50:5b:12:03:a7:75:
                    1f:7c:36:2a:f5:f3:b3:20:33:bc:8a:a8:a6:d0:ee:
                    42:1c:bd:4d:30:05:94:d6:89:4e:bf:89:7a:1a:29:
                    ff:2d:82:6a:22:ba:ef:88:de:41:e0:f3:b7:a2:5d:
                    3a:b9:5d:fc:c5:73:ae:58:c0:21:bb:f7:56:13:6f:
                    bd:9b:47:a5:bf:fa:28:ae:05:ae:49:67:1d:d7:28:
                    75:dc:9f:99:4c:fa:4b:25:19:35:c6:3e:d1:3a:28:
                    4f:16:fa:27:3e:29:30:96:06:26:96:65:4c:8a:2b:
                    21:ad:cd:20:0a:8a:e5:56:f0:15:ca:20:5c:58:38:
                    fc:c8:6a:ba:ee:76:47:51:46:74:42:e2:d3:89:0d:
                    72:21:3e:27:9f:20:63:6c:46:14:6e:8f:f8:8d:d9:
                    97:d4:5c:7a:f9:8d:b5:d7:6f:04:6c:a6:13:8f:52:
                    8f:05:24:1e:f8:ad:cb:a6:7d:af:0e:c8:2e:44:15:
                    8f:24:b7:bc:fb:d1:eb:c4:bc:73:83:64:b7:fd:16:
                    66:94:be:aa:54:fa:96:64:b8:87:66:cb:00:03:4a:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:65:12:7A:16:9B:65:FC:4C:A8:3E:0B:B4:06:F7:E0:AD:BB:5E:A2
            X509v3 Authority Key Identifier:
                keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/3FF85EE88A6C11F18AC6DE993F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:72:2a:b4:ae:53:78:ba:7d:47:b6:92:b7:4b:fd:04:3d:f6:
         ff:1a:5d:8e:bf:26:9d:94:14:f9:d2:5a:80:e5:6f:fa:ce:68:
         df:f9:63:79:07:69:ae:fc:3b:b3:3b:e7:2b:3c:bf:81:08:51:
         72:4c:da:9c:87:73:77:ef:18:61:ce:7b:3c:d6:2c:4d:47:9b:
         69:c5:72:99:77:33:8b:d6:f6:06:7f:21:8c:a2:96:39:4b:45:
         a1:d1:88:8e:5c:9d:9d:c9:5a:07:df:4b:ed:b6:cc:af:77:5d:
         b4:26:db:f8:a0:8d:db:27:35:93:78:6b:c8:63:42:45:29:09:
         be:03:e3:10:ce:fe:ba:92:93:4f:bd:1d:5c:e7:3e:59:a8:eb:
         02:ef:ed:10:a0:31:2c:76:96:6b:8b:f7:71:f4:a1:4d:f2:2e:
         fb:d1:bf:ee:f7:95:21:35:19:6f:0e:b7:93:b3:f4:f0:70:4c:
         70:7c:8a:9b:a9:ca:ab:7c:f9:f4:5a:0b:b8:a6:89:33:d1:56:
         f5:2b:61:af:9f:30:3b:ba:44:16:f8:9d:84:d3:56:61:68:f4:
         5c:a7:02:6f:77:67:83:69:f5:16:bf:46:7c:f5:45:62:59:82:
         1e:7e:eb:89:f0:28:be:ad:14:2c:c3:d0:ec:a1:78:16:e6:33:
         f6:78:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:04 2026 by rpki-client