Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa
File:                     F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (raw, json)
Hash identifier:          9TmPmA1+zthJxiNmUQ4CrTPbBg0Xhy5uru/BuqYwuPI=
Subject key identifier:   C6:A6:01:64:3A:2E:D3:FC:EB:B4:76:A1:3F:76:FB:14:BF:B5:4C:BA
Certificate issuer:       /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial:       088D
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:21:32 +0000
ROA not before:           Sat 08 Nov 2025 20:10:52 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9930
IP address blocks:        103.243.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
                          rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189 (0x88d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
        Validity
            Not Before: Nov  8 20:10:52 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a42f4c-5f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:04:6f:fe:0d:8b:eb:8c:b1:0b:1a:22:ea:78:
                    44:b3:1b:b5:6d:8e:5e:dc:80:3a:4c:46:fe:20:84:
                    2f:51:ae:41:74:ef:d2:89:21:03:7a:2b:a8:40:b8:
                    25:1e:2a:19:65:5a:2d:dd:0a:67:d3:7d:0a:7c:9e:
                    12:8a:68:18:05:cf:36:bc:8e:cc:1f:be:4f:e0:14:
                    e1:8e:75:8e:2d:d9:d9:cc:3e:69:ea:52:fa:8d:2f:
                    1d:5a:27:4a:a8:4c:76:bf:0a:83:90:13:0a:83:c5:
                    89:c5:d0:86:e0:f1:b2:5d:07:7f:0e:5d:59:b6:80:
                    d0:1f:14:3b:a2:75:27:47:a8:cf:39:30:07:1d:59:
                    ff:53:c6:ad:a0:eb:6d:d1:dc:4b:76:30:8a:9c:6e:
                    d9:68:df:3e:38:fb:5e:cf:ee:8c:37:e8:89:99:00:
                    5a:57:f2:98:7f:50:13:62:bb:2a:da:90:02:f5:4a:
                    2f:d5:4a:bc:64:fc:3e:4f:48:e0:9c:5d:64:82:dc:
                    5d:68:e1:83:e5:22:02:4e:97:b5:a7:e2:74:0e:a4:
                    d4:1a:34:44:bf:33:11:27:c0:14:8f:bb:aa:a9:2f:
                    0b:84:02:28:dc:32:17:41:f5:05:92:d0:eb:f7:b9:
                    47:ab:da:b2:1a:5e:ce:e6:16:0a:0e:8c:c6:45:8b:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:01:64:3A:2E:D3:FC:EB:B4:76:A1:3F:76:FB:14:BF:B5:4C:BA
            X509v3 Authority Key Identifier:
                keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:e6:32:96:e1:ad:da:96:54:24:a9:8e:d5:d4:80:a0:19:49:
         33:d7:e1:08:4d:58:4e:ff:91:01:23:5a:1d:ee:f3:a4:ba:7d:
         f1:6b:46:89:83:d5:2b:38:94:01:b6:b3:df:b8:17:b1:60:c2:
         88:c4:5a:db:40:6d:b9:bf:e1:1c:6e:ba:0e:8c:dc:82:93:17:
         5f:40:87:74:bb:3c:29:d5:00:8b:73:79:20:45:cb:96:41:e7:
         ef:86:7a:b9:95:5b:9c:de:45:0c:86:26:e3:e7:aa:07:f4:2e:
         87:31:9f:02:a2:7a:89:c8:c9:0d:c2:09:75:3a:15:bd:a5:89:
         74:26:06:e8:5e:b8:9b:85:0e:9d:da:29:c2:cc:41:a7:8e:03:
         7c:2f:c8:5e:dd:1d:0e:c6:df:63:37:50:6e:a4:45:39:ba:a9:
         4b:d9:7c:a7:85:ef:69:06:56:eb:6c:37:e9:fd:fa:35:72:f3:
         e9:3c:00:64:b8:60:15:b5:5e:ab:b2:8b:6d:74:a7:27:f4:1b:
         9b:3d:d2:a3:04:ad:47:82:86:2a:57:78:11:1f:8d:34:c8:4b:
         5a:c6:4f:ba:37:ca:00:fe:ad:67:86:d2:76:e9:03:bc:e6:5f:
         9f:1d:78:26:3d:b7:ee:b4:bf:af:66:95:97:6d:7a:be:1b:df:
         8f:9f:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:03 2026 by rpki-client