Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/1523921276EF11EDB8F27034C4F9AE02.roa
File:                     1523921276EF11EDB8F27034C4F9AE02.roa (raw, json)
Hash identifier:          8qJZlbai0qCF6BnpaN3fDjskYcVGNM1xXEuO4Wf6FW4=
Subject key identifier:   49:A6:C2:F3:54:8A:C4:6F:A7:2C:86:1D:C6:3B:76:B7:A6:4D:50:2B
Certificate issuer:       /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial:       03FA
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/1523921276EF11EDB8F27034C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:03:20 +0000
ROA not before:           Tue 03 Jun 2025 01:54:54 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     59239
IP address blocks:        103.186.56.0/24 maxlen: 24
                          103.186.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
                          rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
        Validity
            Not Before: Jun  3 01:54:54 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a40ee8-e99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:c3:3c:b1:1a:fa:6e:37:32:ac:61:35:40:
                    01:9d:57:72:50:8a:19:8e:ce:ed:85:98:23:c1:bb:
                    26:85:e4:fd:5c:68:35:6d:a1:c2:4e:1b:d7:b3:67:
                    d6:98:87:fd:8a:f3:5b:6a:95:68:5c:99:f9:d0:cc:
                    71:cf:43:1f:66:3e:71:21:58:22:ab:6a:aa:4f:41:
                    a5:c0:d6:cc:78:a6:cd:bd:34:7d:11:75:4c:a0:8a:
                    97:d4:e0:81:43:b4:fd:76:e9:fd:26:9f:cd:b0:1c:
                    fc:be:d2:79:6c:fe:df:2c:67:2a:b4:b5:a4:53:ae:
                    7e:23:7c:4f:e8:83:a6:c0:cf:92:04:b7:06:3b:f0:
                    7b:57:e2:07:e9:09:3f:95:a1:3b:0a:cf:e8:6b:d1:
                    8a:98:7e:92:36:da:53:c0:e6:91:b7:98:ca:fc:8e:
                    94:c1:3a:54:14:a6:5a:a9:e6:fe:71:04:83:17:8b:
                    36:55:11:db:9d:e2:92:24:7d:44:20:df:65:f4:d9:
                    63:3c:0c:a5:f6:0b:5c:80:23:35:53:ef:0b:cf:62:
                    35:c2:1d:43:7c:8a:2b:73:0f:30:f5:5d:1a:88:c2:
                    c8:d6:f5:fa:c4:e2:8b:7a:cf:84:e5:d4:74:c8:e6:
                    0d:33:40:16:b7:6d:5e:89:7d:1a:11:39:28:19:4b:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A6:C2:F3:54:8A:C4:6F:A7:2C:86:1D:C6:3B:76:B7:A6:4D:50:2B
            X509v3 Authority Key Identifier:
                keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/1523921276EF11EDB8F27034C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:ea:d2:c9:cf:56:5b:03:e5:9f:b0:39:fa:7d:fe:54:50:
         4c:77:b6:18:36:a1:d7:8b:3c:4f:72:01:a4:ea:1e:ff:7e:dc:
         7c:71:f7:e3:2c:da:80:2b:0e:33:90:b7:e2:68:54:78:c0:bb:
         ca:41:93:9c:d9:9a:c2:52:dc:55:d9:d6:34:8a:b4:24:b7:0c:
         5c:5d:e8:b4:58:1d:c9:44:28:19:fe:ff:9f:34:b3:97:73:42:
         29:af:28:ce:2f:27:bd:d9:84:87:9e:87:37:43:f5:a6:cf:e0:
         9c:63:d8:52:94:c7:3b:3f:70:c4:47:e8:1e:34:72:2b:b2:48:
         e7:72:12:2e:91:30:a7:b0:b8:53:ea:f4:11:ac:52:3b:83:d6:
         9d:04:f1:f2:2b:97:87:29:80:54:e6:21:0d:28:eb:c0:f4:b8:
         c8:af:e6:a1:3b:30:f3:0b:aa:ff:07:14:e4:d2:47:02:1f:27:
         41:0f:5e:68:95:d5:04:02:d0:6b:40:3b:fc:ae:73:9a:46:67:
         6b:de:fc:97:23:bc:a6:bf:85:26:f9:ed:c1:ea:ea:47:02:49:
         fd:b0:3e:89:0c:dd:2c:85:b3:af:22:bb:09:61:ff:df:69:f9:
         89:3c:b9:3a:4d:51:93:06:1b:27:0e:a0:93:53:a3:e7:32:aa:
         de:17:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:55 2026 by rpki-client