Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/CED1044A623011F09444A631C4F9AE02.roa
File:                     CED1044A623011F09444A631C4F9AE02.roa (raw, json)
Hash identifier:          StP9KMrnm4TGA7UMr9SQ/tPqe7AhIHIbZg5S33BgdOc=
Subject key identifier:   65:57:80:2D:D7:89:B6:93:7A:61:9A:7B:00:63:87:26:5C:F2:F8:FE
Certificate issuer:       /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Certificate serial:       033C
Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/CED1044A623011F09444A631C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:27:03 +0000
ROA not before:           Wed 17 Sep 2025 02:08:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63969
IP address blocks:        103.23.95.0/24 maxlen: 24
                          103.190.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
                          rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
        Validity
            Not Before: Sep 17 02:08:34 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a44cb7-0af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:d8:7a:aa:f7:4d:fe:85:71:af:d0:31:b4:
                    b4:d6:c6:12:d5:6b:38:0b:42:0e:78:28:c7:03:31:
                    08:2f:e1:3d:ce:82:5f:ef:84:62:d6:bc:e9:d5:fb:
                    f2:fe:96:5b:36:cf:30:94:f5:db:07:97:fa:ae:4d:
                    54:e1:78:43:39:92:35:21:b7:8a:7b:48:92:4c:d9:
                    78:68:25:ca:9a:b5:08:a5:04:ae:71:88:d1:4d:8b:
                    fd:ea:a3:b4:78:97:19:38:c2:38:4e:d2:09:40:88:
                    e5:cc:74:22:1f:af:b1:85:0d:db:13:6c:91:f0:a0:
                    30:9a:0b:cd:99:1b:1d:b4:cf:93:52:b0:ed:d3:57:
                    72:89:c3:bc:21:01:8a:5f:08:e3:fa:fa:0b:75:45:
                    a0:09:41:d2:c1:26:06:8b:e3:35:70:b4:a0:04:d0:
                    ce:b3:8f:65:9d:32:c7:5c:f8:ed:43:a1:d4:2e:e2:
                    29:76:08:89:98:2e:ca:b9:bd:73:4d:e3:2d:b9:21:
                    b2:ed:d0:d5:e0:ee:49:bc:4e:97:27:8a:f9:f2:a1:
                    09:2f:dd:e1:c9:79:1e:d6:20:f6:b6:c0:d5:8d:7b:
                    8c:f0:ea:45:64:ca:6c:dc:10:09:86:dd:e7:5b:21:
                    a9:2f:10:59:c2:23:a4:f4:24:19:03:be:52:d9:51:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:57:80:2D:D7:89:B6:93:7A:61:9A:7B:00:63:87:26:5C:F2:F8:FE
            X509v3 Authority Key Identifier:
                keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/CED1044A623011F09444A631C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.95.0/24
                  103.190.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:fe:54:62:ce:0f:8f:7d:f2:4e:4b:46:38:eb:2a:08:90:79:
         fb:6b:22:47:af:c2:cb:eb:d6:42:3c:ce:ea:9c:44:87:fb:27:
         48:e2:70:89:f2:af:bc:07:f5:79:f1:b0:12:a7:15:86:e8:8e:
         c7:f6:74:29:8b:5d:65:d3:f4:d9:85:c2:32:40:07:a8:65:fb:
         f3:05:e2:94:1b:2b:e2:e6:79:c4:10:8e:56:cf:64:97:9e:d9:
         54:b4:3c:ff:0f:35:7a:82:1a:e0:95:8e:a9:e3:f0:39:ef:1d:
         b8:44:e4:bf:ec:b6:e4:4c:ff:cb:a2:83:ae:5b:7f:08:94:c6:
         18:b5:48:d3:08:de:f4:0a:e4:39:72:be:b7:64:93:d6:b3:01:
         70:20:48:5c:50:28:0a:a4:80:21:6f:4d:69:17:3e:3d:db:94:
         c4:32:6a:31:15:af:d3:fe:7c:20:30:55:09:22:01:f7:cf:fb:
         8a:fe:08:0d:58:31:05:4c:11:d3:69:53:d8:64:b3:5e:9e:27:
         99:5f:cc:76:ba:cc:94:15:3f:79:9f:e6:5f:51:45:e6:33:f9:
         c2:89:47:d7:2d:71:ec:9e:db:90:08:5e:c7:c4:23:42:64:00:
         36:a1:04:57:65:4c:7e:fc:31:63:be:74:dd:28:24:c6:ae:9e:
         32:1e:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:24 2026 by rpki-client