Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/7E99DBC2F73711F0916171B3376F56BC.roa
File:                     7E99DBC2F73711F0916171B3376F56BC.roa (raw, json)
Hash identifier:          UEW2XtX4KBzm17TH1yp1jERmuGNV8b8OsPHmzbPq8eg=
Subject key identifier:   77:4D:FB:21:55:B0:4A:D8:51:BB:1F:53:FC:01:4F:6B:1C:32:BE:62
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       0156
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/7E99DBC2F73711F0916171B3376F56BC.roa
Signing time:             Wed 23 Sep 2026 07:46:03 +0000
ROA not before:           Wed 23 Sep 2026 07:46:03 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152450
IP address blocks:        43.231.186.0/24 maxlen: 24
                          103.161.138.0/24 maxlen: 24
                          103.161.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: Sep 23 07:46:03 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6ab383bb-bafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:ba:2f:6b:a4:ea:f2:6b:e2:9d:51:ce:62:
                    f4:1d:f6:49:07:77:3b:57:cc:5c:19:33:35:8b:f8:
                    cc:a4:71:62:35:f4:43:fc:5d:b7:7d:aa:c1:52:b1:
                    80:ee:d3:e1:60:57:53:55:9e:8f:49:84:fc:a4:e6:
                    1d:00:f3:1a:c0:21:cf:60:f2:4d:5c:82:cc:72:f7:
                    6b:9f:c1:49:77:bb:ea:f7:4b:9d:5c:74:16:bf:b2:
                    35:5c:14:a0:b5:02:73:66:8f:74:7f:ea:fe:02:41:
                    df:a7:34:7f:bd:fa:f8:15:35:6f:c0:5a:e3:2f:00:
                    5c:1f:f0:e4:33:33:6c:a7:ac:a0:9d:d8:09:c7:df:
                    fe:f9:7f:11:9b:45:f3:ff:b7:55:d9:e2:27:1e:22:
                    2e:26:15:b2:5f:9b:ca:08:28:63:77:1e:aa:3b:e5:
                    d6:f3:1c:07:e3:22:50:be:5a:4f:bd:32:e3:80:c9:
                    aa:e9:f3:d4:8f:f4:19:82:4a:c4:7d:6d:62:e8:bb:
                    a8:c2:6c:d3:9e:e2:0a:9b:2c:39:d7:b1:d7:6f:20:
                    4f:fc:6a:74:49:0e:42:c8:24:c2:06:86:4c:8f:d8:
                    84:02:ba:81:5f:38:ba:c1:63:34:dc:bc:f0:58:dd:
                    74:39:dd:dd:e4:f2:00:81:13:57:74:81:64:3d:9c:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4D:FB:21:55:B0:4A:D8:51:BB:1F:53:FC:01:4F:6B:1C:32:BE:62
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/7E99DBC2F73711F0916171B3376F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.186.0/24
                  103.161.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:90:87:fe:18:0e:44:36:7c:91:1b:39:7c:69:09:af:dc:
         af:b4:47:5d:d9:07:88:fb:17:b6:77:06:7d:fa:f0:68:da:7b:
         b5:a9:e0:dc:dc:6f:15:7f:8e:2b:0f:77:5b:dc:ee:f2:af:ac:
         c4:a8:48:0e:66:a6:bd:ed:6e:76:4f:cb:39:62:02:ac:f6:21:
         ef:01:8f:59:0d:5a:85:f2:0b:ce:43:58:31:6e:2c:78:6f:35:
         5b:88:b5:1c:f5:7a:62:0a:90:05:39:77:27:8e:a5:28:cb:67:
         b6:1e:a7:89:7b:1d:4b:a6:51:3b:41:03:a3:c1:ff:ac:f1:59:
         da:1e:c6:a3:55:3f:5c:85:93:cd:07:76:e2:20:9e:49:f8:57:
         48:69:7f:91:63:32:f7:cd:20:bf:e1:ac:3d:a2:71:0a:71:6e:
         6b:fb:d1:0d:77:e3:41:46:0b:2a:4b:d9:e3:1f:ba:c6:75:78:
         68:90:e2:5c:45:7f:28:ef:9d:c8:03:c9:d0:73:07:fe:83:39:
         95:b8:8f:a2:b6:8d:47:0a:1f:60:82:28:17:03:a7:03:9f:ca:
         82:75:20:b2:78:34:18:ba:7f:0f:aa:72:4c:60:c6:b9:dc:65:
         60:3c:db:68:5f:8d:88:9c:79:12:91:45:af:b2:a4:a9:fb:13:
         c9:a0:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:03:59 2026 by rpki-client