Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/AC3162143ED611EFA3523A6BC4F9AE02.roa
File:                     AC3162143ED611EFA3523A6BC4F9AE02.roa (raw, json)
Hash identifier:          XYFuQnxpl7FqxfYyxe0uvP0uuoI6+uy9BrmnGH143F0=
Subject key identifier:   FE:A3:4C:3F:6A:BE:90:E3:56:36:9F:D5:DD:02:89:60:1A:15:7B:16
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       05D9
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/AC3162143ED611EFA3523A6BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:40:06 +0000
ROA not before:           Sat 17 May 2025 00:14:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     209242
IP address blocks:        103.116.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: May 17 00:14:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a433a6-af6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:86:a8:85:2b:bb:eb:1a:a8:90:b7:c7:af:
                    88:eb:85:10:3e:8b:01:96:d4:fc:0f:44:22:22:0a:
                    be:8d:e8:f2:93:75:f9:9d:5a:04:31:6d:70:d9:64:
                    d9:53:e0:ca:64:3d:d0:2c:3c:a7:09:ba:d6:fb:d3:
                    f1:8f:c1:f1:ff:02:c5:4d:c3:61:e5:cc:06:42:6d:
                    5a:cb:07:ea:d1:57:46:f7:a5:0a:30:4f:a9:1c:2a:
                    76:cf:67:a5:4a:dc:ca:3f:89:73:c4:66:53:9f:64:
                    b9:3b:12:a5:c5:65:4c:96:23:9b:69:7e:70:94:00:
                    c6:5b:aa:87:c2:37:5d:51:6d:62:c4:89:f4:2d:55:
                    23:49:df:f3:ee:a9:c7:d9:4c:a2:2a:d1:73:19:b6:
                    34:4f:da:4b:5e:9c:3c:d1:fb:6e:92:da:e7:8e:c4:
                    f7:ef:d5:2b:15:e9:8a:67:60:69:b4:f4:23:c0:31:
                    50:3a:39:53:66:08:e6:74:e1:17:42:87:57:6f:fb:
                    1f:b4:7a:0f:4f:71:ca:86:67:05:fd:b9:74:8b:ab:
                    12:93:01:82:5c:e7:a0:46:18:e9:60:49:66:d9:0a:
                    6d:e2:f7:9d:61:99:e4:63:f8:a9:58:2a:b9:82:f2:
                    fb:b1:46:06:78:78:f0:a3:8e:97:f6:9c:26:89:6e:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A3:4C:3F:6A:BE:90:E3:56:36:9F:D5:DD:02:89:60:1A:15:7B:16
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/AC3162143ED611EFA3523A6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:8a:00:58:3b:da:86:c1:91:9e:d4:e8:62:92:cb:85:c4:6c:
         c2:e4:6e:20:bc:a2:65:5f:87:7b:c2:70:ce:14:99:ca:0a:9f:
         8b:cb:1a:15:26:2c:1b:a5:6c:16:bf:66:ea:d3:54:f1:a1:27:
         9a:15:7b:79:2a:d0:32:1b:d1:72:ed:f1:56:a3:15:88:9f:36:
         69:7e:f6:3f:ec:ad:cb:8c:77:e6:57:94:79:7a:a7:ee:9f:8d:
         0f:7a:c9:ce:0a:9f:82:56:30:5b:7a:5b:4b:23:ad:f2:5b:b1:
         cd:f4:db:bd:fb:55:fb:34:76:30:a3:17:af:f1:9a:b7:4c:d3:
         58:9e:74:28:64:c8:37:82:3a:2a:1a:15:70:d4:f0:f5:3a:6c:
         a9:51:a7:b9:17:cf:80:95:bb:3b:65:b6:db:34:22:99:23:8e:
         78:b1:a9:f8:a5:a0:2e:3a:f4:36:03:39:f4:1f:bd:1f:ad:26:
         c2:f6:29:ee:ed:29:18:5e:81:de:0e:7e:f2:da:40:98:bf:55:
         a3:e3:45:8a:c7:2d:c2:20:4b:9d:3a:ff:16:51:7e:74:b0:26:
         eb:50:d4:d7:7c:96:25:bd:37:ac:97:c5:20:6f:ae:2b:8a:6b:
         81:6e:1e:53:5a:da:98:b3:76:61:df:73:4a:75:77:eb:c3:62:
         ca:d3:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:21 2026 by rpki-client