Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/CF272560413111ECB71E086AC4F9AE02.roa
File:                     CF272560413111ECB71E086AC4F9AE02.roa (raw, json)
Hash identifier:          B85i9GlcOeiOoR1hQF1a7WIZsOujBEcuH+d9GBIiQdM=
Subject key identifier:   83:D4:E3:B7:D2:FF:27:C3:9B:8B:C5:EF:30:A5:99:AC:76:F2:10:BA
Certificate issuer:       /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Certificate serial:       0518
Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/CF272560413111ECB71E086AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:45:10 +0000
ROA not before:           Tue 02 Dec 2025 22:56:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     23747
IP address blocks:        103.103.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
                          rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
        Validity
            Not Before: Dec  2 22:56:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a434d6-5230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:89:18:87:57:68:0c:26:3e:a4:6d:8e:73:
                    de:b9:04:53:c1:8d:6e:a1:a2:d1:a4:06:94:eb:22:
                    80:5f:1d:b8:98:b4:13:8a:da:4b:97:fc:dc:84:b4:
                    58:73:3f:f1:e3:f5:98:37:cc:70:16:3d:10:30:ef:
                    3f:67:a8:30:29:65:5b:23:be:da:db:d2:a2:7d:b8:
                    b3:52:d3:c5:f5:b2:f7:c5:54:85:0e:3a:b6:69:ca:
                    73:aa:d8:b8:e6:6d:a8:5e:9f:09:2d:43:b1:ec:64:
                    ff:cb:4a:1c:83:f8:a7:7b:57:a2:ef:e6:97:5e:b1:
                    64:6c:ef:ce:8a:34:de:80:fe:5b:d0:7b:c2:af:1d:
                    47:30:6b:b2:da:7c:26:88:1b:86:b7:a4:02:a5:35:
                    b0:30:3f:75:cc:d7:44:a8:ee:3b:07:8c:a2:6e:45:
                    50:b1:0a:18:0a:2b:19:f0:18:76:56:b3:5e:27:ac:
                    94:9f:dd:46:6a:7d:df:59:3d:0f:d9:19:74:cc:cb:
                    56:d4:41:bb:f3:cf:38:fe:94:47:88:bd:a4:21:b2:
                    6d:02:ef:84:11:ba:35:2a:eb:d9:98:f8:d6:3d:10:
                    ac:49:7d:3c:04:e7:38:db:94:d1:7c:e8:fd:1f:13:
                    d6:28:40:37:e3:c0:99:bd:a3:e2:ae:e9:a6:9c:c0:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D4:E3:B7:D2:FF:27:C3:9B:8B:C5:EF:30:A5:99:AC:76:F2:10:BA
            X509v3 Authority Key Identifier:
                keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/CF272560413111ECB71E086AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:08:ef:e4:dd:d5:b9:3b:3f:0f:f9:14:ca:0f:4d:54:16:4c:
         98:c4:7c:a2:97:5a:24:5e:9e:6e:e5:30:e2:2a:08:70:56:cd:
         80:10:09:cd:0d:b9:f4:b9:f1:c3:dc:83:1e:f6:f9:d5:b9:21:
         00:54:43:be:34:85:50:a6:62:a8:85:ac:3f:3f:ee:5c:98:bc:
         88:96:6c:fb:1c:c2:c9:ae:9b:1e:9b:8c:ea:e6:44:f8:4d:49:
         7e:7f:3d:01:b4:6d:8d:59:6f:f5:30:d7:b6:e3:22:45:9a:04:
         11:61:b0:1f:0f:1c:c7:f2:df:a7:33:f9:6e:61:f7:bc:98:ec:
         04:71:bb:3e:9c:55:64:af:86:cd:e8:a5:16:b5:a2:2b:30:93:
         99:68:9d:d7:48:ac:91:64:08:d0:d5:9d:e2:19:ed:f9:27:34:
         65:d8:75:3f:3f:f3:c8:1d:b7:73:bf:6d:8a:33:6f:6e:77:30:
         82:3b:0c:f3:f7:88:42:4f:c0:53:6b:34:cd:fb:50:54:c3:84:
         52:a5:27:07:8f:82:3b:cd:04:89:1d:37:b2:22:47:72:ea:0d:
         44:4d:d2:b2:c3:9e:97:e3:b4:45:5f:93:c9:17:d1:ba:d5:6f:
         a2:02:0b:6c:6b:64:c1:5d:25:e8:e9:c3:75:38:22:7b:46:ca:
         4c:0f:c5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:06 2026 by rpki-client