Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/1407117C216311EA90D74C52C4F9AE02.roa
File:                     1407117C216311EA90D74C52C4F9AE02.roa (raw, json)
Hash identifier:          rmYnuMOnsWqJ1EMxIYJ3/6l6BUhvQSL5XzWmFrIJCBU=
Subject key identifier:   CD:81:6A:52:37:96:BA:85:BD:15:78:D6:A1:47:FE:A5:A9:A3:6A:27
Certificate issuer:       /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Certificate serial:       0C49
Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/1407117C216311EA90D74C52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:43:27 +0000
ROA not before:           Mon 22 Dec 2025 19:15:32 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     58910
IP address blocks:        103.145.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
                          rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3145 (0xc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
        Validity
            Not Before: Dec 22 19:15:32 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4508f-ea6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:76:c7:8f:49:3a:51:5a:1a:90:1e:23:4f:
                    e3:63:94:38:6e:25:fb:6b:3e:16:b7:6b:96:e9:19:
                    a6:35:a4:b8:bb:07:f0:d6:b7:29:5f:c7:70:be:92:
                    57:43:b7:7d:6b:e4:0b:61:26:02:12:89:f9:98:34:
                    90:8c:f3:52:0a:1d:dc:f5:5b:89:68:ce:8d:77:5c:
                    7f:4a:64:be:65:f5:d2:20:fc:db:8d:26:e6:ae:75:
                    d6:1b:06:bc:71:a3:2f:dc:bb:09:18:d8:1c:36:5c:
                    21:ab:83:b2:94:f5:57:01:65:6c:c8:85:e9:2d:ed:
                    07:40:5a:ff:db:5f:72:c1:19:c9:e6:3f:10:39:a8:
                    dd:e3:2e:a7:75:5e:d7:2e:ac:be:a0:7c:53:e1:a8:
                    2d:b2:89:7b:a5:27:4a:47:b6:fe:98:7a:78:54:04:
                    e0:54:34:3c:55:18:f2:03:86:cb:0f:7a:e2:0e:25:
                    57:32:8e:fc:5d:3a:db:53:85:a3:8a:2a:d5:8b:75:
                    c9:1b:7e:91:75:0d:f0:c0:41:45:db:7e:c6:be:63:
                    74:ac:b9:b7:13:85:c7:c8:12:03:50:bc:c7:54:36:
                    df:a5:97:a4:9c:76:6e:92:65:93:72:8c:70:70:45:
                    6d:b2:b8:43:fe:5b:dd:6e:78:93:7b:fc:b6:c9:05:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:81:6A:52:37:96:BA:85:BD:15:78:D6:A1:47:FE:A5:A9:A3:6A:27
            X509v3 Authority Key Identifier:
                keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/1407117C216311EA90D74C52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:7f:c5:ba:07:18:b0:6b:8a:2e:1b:50:37:42:e9:51:b3:
         fd:f5:01:bc:4e:88:53:8f:62:42:f7:58:58:52:65:64:b4:68:
         8a:a5:85:76:00:8b:e7:07:31:ff:e3:7a:1e:d3:2b:74:14:62:
         af:6a:85:a3:bd:ca:42:13:09:27:a6:96:25:3f:df:2f:be:3d:
         aa:5b:15:58:0e:7a:c4:87:40:2f:cc:6b:e4:37:b8:ca:31:06:
         f5:f8:9c:0c:75:27:7f:41:75:20:7a:7f:fb:77:ce:d9:dd:25:
         91:7f:e6:8e:89:df:6a:25:36:d2:ff:bd:de:f8:f5:7a:e3:6a:
         b1:ab:f1:2a:14:0a:3e:45:6d:18:f9:53:a9:40:a6:ea:3e:d0:
         cf:8d:23:39:a6:ae:ff:99:54:43:b0:02:d0:b6:32:0f:44:a7:
         c7:e2:f5:7e:b7:23:82:95:8b:0c:17:7c:dd:fd:07:27:e6:76:
         03:6f:f7:6a:5c:21:a0:68:a4:2c:5e:bb:c4:cc:80:ae:e6:24:
         15:ac:e8:d4:bb:51:e5:19:34:10:3d:38:9c:e4:f0:c9:b5:3c:
         6d:11:51:da:82:34:53:4e:20:3e:cb:0c:bb:76:80:e6:26:1e:
         da:af:4b:48:ed:f8:15:b9:86:70:de:60:60:ad:43:fe:19:dc:
         fc:18:79:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:07 2026 by rpki-client