Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AEFA3DD02CE211EC8664D47EC4F9AE02.roa
File:                     AEFA3DD02CE211EC8664D47EC4F9AE02.roa (raw, json)
Hash identifier:          JNyT3x6YheDgHZgSUgnImzYieLl4IVAjDWgWqSgPfwM=
Subject key identifier:   B9:3D:4C:EE:03:1E:2A:1D:11:93:45:04:72:71:9C:19:7C:11:F2:83
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       05D1
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AEFA3DD02CE211EC8664D47EC4F9AE02.roa
Signing time:             Thu 10 Sep 2026 23:45:16 +0000
ROA not before:           Thu 10 Sep 2026 23:45:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.70.49.0/24 maxlen: 24
                          103.70.51.0/24 maxlen: 24
                          182.54.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Sep 10 23:45:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa3410c-68be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:2f:f9:8c:d5:18:c6:66:e6:e7:a2:df:7d:
                    c6:ad:40:db:9c:9e:3e:3b:83:8e:09:d2:c3:46:a0:
                    ec:ce:6f:1c:8c:2c:50:1b:1d:1e:c7:23:35:20:91:
                    cb:98:0d:7f:d2:4c:ec:e0:fe:92:4c:7c:8e:79:37:
                    8c:78:59:fd:af:50:d6:d8:0d:29:f3:b7:35:65:d2:
                    df:f6:15:25:da:b6:5e:c6:ad:5c:0a:2a:b6:c2:f3:
                    95:9b:88:5f:f5:5c:ca:e6:58:b2:b8:b7:9d:f6:b8:
                    91:1d:09:c2:19:96:0e:8a:99:aa:3c:08:60:31:01:
                    d9:cf:fd:c1:ff:fe:0d:44:05:1f:47:a6:9f:c5:46:
                    e5:4d:64:a6:c1:8e:82:47:93:03:15:a6:85:5e:c4:
                    e9:40:fe:f6:f5:e3:4f:f9:cc:88:fe:f9:7c:49:67:
                    4c:4f:24:db:f7:ff:72:b9:29:5f:1a:e7:b8:37:ce:
                    d0:8b:84:71:61:9a:03:b1:b4:ea:f4:db:50:17:87:
                    3c:d8:69:a1:04:a8:5b:73:22:fb:0f:2c:3d:1d:e6:
                    70:82:8e:68:3f:db:fa:62:8c:b9:fe:90:16:f3:62:
                    f5:62:48:32:df:b8:08:47:4a:5b:aa:9f:5c:7a:cd:
                    2b:5c:94:eb:f5:2a:3a:84:d8:75:0d:19:83:69:9a:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3D:4C:EE:03:1E:2A:1D:11:93:45:04:72:71:9C:19:7C:11:F2:83
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AEFA3DD02CE211EC8664D47EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.49.0/24
                  103.70.51.0/24
                  182.54.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:0b:2e:84:34:c8:6e:c7:f1:7a:bc:bf:c7:39:db:12:b9:0e:
         bc:19:f9:52:f7:3b:ed:fa:46:e3:a3:6a:b3:64:0b:de:e9:38:
         9f:8e:ec:f8:fc:21:56:71:4f:d2:f1:4c:16:29:b6:a4:f7:78:
         b7:31:37:e1:b2:54:02:49:cf:f0:95:ec:97:58:dd:77:85:f8:
         68:9a:07:ce:90:b6:f6:1f:7d:38:83:cf:79:8b:9a:a4:81:ba:
         fd:8d:7e:fe:3f:e6:18:e3:03:95:a7:33:07:a3:b2:08:e9:08:
         6c:3f:29:f2:2d:d0:db:e1:27:fd:2c:c4:59:cc:f3:70:13:77:
         5b:f1:ff:20:94:54:f7:39:9b:94:ea:91:b1:67:32:c1:ce:24:
         07:23:95:4e:4a:42:f0:3c:52:43:f6:21:1d:23:c1:6a:74:a6:
         ef:5c:4c:5c:78:d1:05:7a:3e:49:d1:24:52:e8:33:4c:2b:e8:
         a0:60:2f:ea:21:d1:e2:8b:ba:aa:ea:19:3a:9c:0e:25:12:2e:
         dc:b8:88:6f:b4:4b:21:9c:63:f7:8e:a9:27:ed:81:08:e3:fd:
         58:ab:8b:91:a2:b4:13:d3:56:15:e8:aa:2b:04:a9:88:ef:cf:
         1e:40:37:de:d2:51:eb:06:c6:52:2b:a6:73:99:1c:44:3a:a7:
         b1:c2:6b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:45:57 2026 by rpki-client