Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/C569659C02DF11EBB54FAE29C4F9AE02.roa
File:                     C569659C02DF11EBB54FAE29C4F9AE02.roa (raw, json)
Hash identifier:          TD9jRvjGm8f9TyS03n5KbZiMqQuEldpFR5c6jfin43I=
Subject key identifier:   F3:C6:82:8B:87:83:C0:A1:26:04:46:7C:B3:12:4A:63:C6:B6:EC:DD
Certificate issuer:       /CN=A917A717/serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
Certificate serial:       140A
Authority key identifier: 49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/C569659C02DF11EBB54FAE29C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:33:24 +0000
ROA not before:           Tue 26 Aug 2025 17:26:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136894
IP address blocks:        103.97.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl
                          rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5130 (0x140a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A717, serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
        Validity
            Not Before: Aug 26 17:26:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a42404-9538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:64:d1:e2:22:1f:52:1a:31:69:3f:29:f4:
                    b4:10:ce:86:8b:a6:06:cb:94:a2:df:e1:b3:e5:a6:
                    e6:58:db:79:86:71:2b:41:14:f8:70:8f:ab:8c:ee:
                    43:af:f9:bb:b0:d0:20:53:5b:4d:79:20:2a:e0:cb:
                    10:4c:6b:aa:df:b2:82:77:ef:7b:8d:9f:18:e5:c1:
                    9e:52:89:d0:36:7b:1e:d1:48:c4:de:b0:04:f8:2b:
                    6c:7b:94:b8:db:60:4d:9f:1f:46:ab:e5:33:b2:40:
                    10:2d:f4:0c:d3:a6:88:bc:ca:16:40:93:95:bb:1d:
                    7a:4f:98:ca:35:ae:90:44:0d:a5:57:ab:47:e9:75:
                    ba:96:a7:ee:71:d7:84:45:01:e0:39:82:ba:fd:e6:
                    bd:63:ab:5e:2c:04:b6:8f:17:27:64:6e:d9:29:d1:
                    2c:15:8f:88:74:ea:9c:de:75:c8:f7:80:66:60:1d:
                    77:25:4e:f1:b0:c9:5a:4f:2d:6c:50:1a:bc:25:25:
                    16:7f:02:b9:c9:9c:7d:6c:8b:48:da:af:e3:18:2d:
                    9f:41:5b:f1:67:ac:57:ee:b2:c0:ab:ad:63:1f:2a:
                    89:6a:ce:bb:7a:54:ad:13:e4:49:b5:5a:b4:17:99:
                    bd:ca:b1:e4:9f:c4:69:d9:db:4e:8a:85:b0:0f:26:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C6:82:8B:87:83:C0:A1:26:04:46:7C:B3:12:4A:63:C6:B6:EC:DD
            X509v3 Authority Key Identifier:
                keyid:49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/C569659C02DF11EBB54FAE29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:81:5b:7c:88:02:d7:ac:c6:52:af:e9:d8:39:d5:d7:13:
         1b:34:0c:73:ea:32:9a:a1:84:df:ea:24:83:29:39:98:3a:58:
         21:b7:de:6f:14:2e:9a:87:ad:ed:d9:77:ec:a5:d7:6e:1d:fd:
         81:27:ca:ac:c3:70:66:41:eb:32:4c:ae:83:10:66:4e:e5:12:
         c4:6f:48:84:3d:94:6d:c7:3c:b7:b4:e3:5c:47:14:ba:53:a5:
         45:fe:66:00:27:e4:a9:cf:0b:11:bf:3f:10:d5:5b:62:f1:4f:
         86:cd:d1:46:6f:93:92:35:63:a3:67:61:53:ea:05:52:f5:d0:
         9b:84:7e:c5:5f:4c:2f:ca:03:00:e8:03:be:77:3d:8a:c2:9f:
         f2:4a:e6:a2:07:ed:8e:85:ab:9d:df:8a:26:f2:2e:fd:82:1f:
         ba:4c:51:02:cb:4f:23:b3:4e:17:2f:67:b3:e6:45:33:ba:a1:
         fb:bd:81:63:7f:6f:5f:ed:f7:07:bc:71:a6:f0:5d:2c:94:87:
         85:f4:40:c6:fc:3d:89:5e:8d:08:f0:0c:32:5a:b2:6b:4a:58:
         1c:9b:eb:a8:73:15:46:cc:04:f0:7f:b2:9f:a6:f9:44:85:4b:
         75:03:67:a8:a0:82:a8:39:71:05:68:eb:f0:cf:1c:85:bd:72:
         51:91:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:15 2026 by rpki-client