Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/31A11606D5D411ECA6C65869C4F9AE02.roa
File:                     31A11606D5D411ECA6C65869C4F9AE02.roa (raw, json)
Hash identifier:          oKQ5D0QsoR4sy/ZYer9Zsf6ks+/g2utX7kNb8h7AI+U=
Subject key identifier:   0B:53:B6:6A:0B:D7:50:50:35:FC:C9:0A:A4:85:0A:14:BC:C9:01:7F
Certificate issuer:       /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1
Certificate serial:       0395
Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/31A11606D5D411ECA6C65869C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:21:18 +0000
ROA not before:           Sat 31 May 2025 01:47:22 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     131304
IP address blocks:        103.187.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl
                          rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1
        Validity
            Not Before: May 31 01:47:22 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e8ee-35a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:53:9f:5c:78:bd:0d:c7:5c:87:17:aa:33:
                    32:6d:33:57:af:f5:18:e2:c9:2a:08:16:b8:8b:a7:
                    70:ee:84:09:d0:6e:11:71:18:94:de:7f:62:07:17:
                    ad:74:43:12:83:a6:21:68:33:c8:c0:4b:fc:8a:d0:
                    41:33:96:0b:ea:58:c0:2f:8f:e9:42:9d:9b:d5:2e:
                    21:ad:74:ee:bb:6e:e1:a4:46:e8:7c:7b:14:2b:ee:
                    68:27:54:26:10:e4:b9:09:3f:9a:41:c3:49:fb:08:
                    f8:71:82:07:29:1f:bc:b9:83:0f:8e:46:76:d1:b5:
                    17:37:1e:6c:74:0f:a7:ec:dc:b0:03:31:7b:e0:77:
                    59:6f:33:f5:0b:ea:13:3d:cc:02:f5:55:99:bb:a1:
                    a8:cb:cc:a9:d2:5e:be:59:50:5c:a3:d9:e9:03:b1:
                    7b:bc:81:ba:75:5f:f3:b3:c9:4e:4b:43:c5:4f:f3:
                    ee:96:52:1e:66:ec:86:1e:44:4c:55:bc:56:b6:b0:
                    43:dc:b7:bb:81:eb:c1:8c:96:d6:8e:e3:65:c3:2d:
                    29:11:7d:12:92:0c:e8:7d:12:3d:e5:e7:3d:59:fb:
                    31:04:bb:ce:26:3e:95:82:b7:ad:eb:11:a3:b6:8d:
                    9a:c7:b4:83:3a:7e:d3:bc:cb:9b:1a:cd:8b:b0:78:
                    e4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:B6:6A:0B:D7:50:50:35:FC:C9:0A:A4:85:0A:14:BC:C9:01:7F
            X509v3 Authority Key Identifier:
                keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/31A11606D5D411ECA6C65869C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:78:28:9a:c0:d4:a8:97:b9:c4:41:02:35:bc:d5:bc:8c:d4:
         d4:36:e9:3e:2a:da:c2:4b:19:4c:02:32:cb:8a:70:f0:97:05:
         79:19:c8:c0:be:48:0a:4c:49:6b:ba:da:b5:8d:30:47:34:ae:
         99:63:7b:56:8e:73:91:28:42:1e:4d:33:83:ec:7a:a1:f5:4a:
         9e:15:36:ce:1e:84:cb:21:10:df:55:5b:37:d3:06:59:a9:cc:
         63:ad:14:09:a7:b2:d5:d4:28:9f:c0:21:ef:28:41:2c:a4:2b:
         9a:89:c2:3f:7f:16:0f:55:ab:2c:78:c1:5b:7d:ab:19:e0:b3:
         4c:95:9b:90:a0:b9:dd:b3:fe:b8:68:6c:ca:dc:f4:1d:35:67:
         32:99:f7:d5:15:57:1e:24:4b:59:14:04:6e:93:f4:f4:7d:fd:
         8c:1e:18:b9:45:7b:70:aa:ca:60:41:66:63:fc:83:f3:a6:9d:
         95:cf:7a:a5:4f:d4:f0:f7:b2:6c:f7:54:f1:78:17:f1:09:87:
         a3:60:26:44:62:10:b1:f5:f3:9f:29:9b:88:4d:db:a6:39:12:
         01:81:8a:57:7e:6c:1c:01:7e:ba:5a:88:50:59:fe:11:49:9d:
         e0:1c:fd:07:86:fc:9a:30:0b:63:e4:fc:83:0c:c4:3f:3a:7f:
         9a:a2:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:58 2026 by rpki-client