Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/7A299148000311F191DFD8AE3C6F56BC.roa
File:                     7A299148000311F191DFD8AE3C6F56BC.roa (raw, json)
Hash identifier:          CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=
Subject key identifier:   AF:05:14:19:0A:9A:FB:98:13:33:07:54:E1:BD:FC:0D:B3:D0:DF:B0
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       0831
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/7A299148000311F191DFD8AE3C6F56BC.roa
Signing time:             Sun 01 Mar 2026 17:41:59 +0000
ROA not before:           Sat 14 Feb 2026 21:18:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.82.228.0/24 maxlen: 24
                          103.82.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
        Validity
            Not Before: Feb 14 21:18:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47a66-be45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:82:e8:ed:97:63:29:a7:1c:1f:50:c7:8d:
                    46:51:24:bb:17:8c:e1:78:15:e2:71:e4:ff:cc:e6:
                    ad:cc:ce:bd:61:ae:3a:1a:64:70:fe:ea:2c:c0:f7:
                    4c:80:53:b2:3f:b4:97:e7:c0:47:69:97:0f:da:bb:
                    ce:a9:ca:5c:49:1b:64:65:2d:1c:bb:0e:b7:71:bb:
                    f3:ad:cb:43:e1:b6:3d:04:4c:d7:aa:17:3a:0f:3f:
                    fe:22:cd:63:b6:dd:d9:06:92:83:96:fa:4a:f4:d6:
                    e8:e9:b7:0a:ee:63:b8:21:1c:7e:af:33:5c:98:84:
                    c5:df:9d:1f:18:e8:51:73:92:7f:bd:92:d7:c8:51:
                    74:c2:26:bb:25:cf:b6:99:b5:94:77:ee:85:8f:8d:
                    80:8b:91:0c:eb:8e:99:fb:d2:5d:01:05:e6:c7:4b:
                    43:99:53:30:fc:39:d8:52:f0:7a:16:8d:a4:1a:41:
                    b2:58:87:dc:9e:9c:48:f0:9c:82:50:e4:49:0b:ff:
                    78:b6:3b:46:d2:01:06:6e:54:d7:c5:8c:92:7d:d0:
                    96:b6:45:9d:c7:f1:86:97:be:2a:5b:d1:55:7a:91:
                    12:20:02:30:87:dc:b7:84:74:71:70:95:56:32:40:
                    b9:79:a0:71:d9:40:78:fd:34:c1:fc:7f:0c:83:d2:
                    7d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:05:14:19:0A:9A:FB:98:13:33:07:54:E1:BD:FC:0D:B3:D0:DF:B0
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/7A299148000311F191DFD8AE3C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:86:81:78:e4:90:2d:94:30:e7:52:fb:81:fe:41:70:23:d6:
         de:0d:ad:9c:cb:68:9b:79:73:eb:23:17:96:98:ce:5f:5f:4c:
         a8:71:93:f2:bb:d3:72:fc:99:e0:d9:c3:35:50:a1:a0:13:25:
         cc:d8:ca:56:b8:e0:27:b3:5f:9d:f4:39:05:30:06:52:f1:b3:
         84:3a:df:b2:e6:f3:78:f7:bd:ac:2e:60:d8:25:88:68:ed:ff:
         a3:35:ac:a3:be:25:0c:f4:7c:b3:42:e3:fa:9d:f1:90:1a:73:
         aa:75:07:8c:8e:78:5b:97:89:9e:1f:e1:90:2a:31:7e:33:b6:
         e5:34:76:49:33:09:6d:a1:fd:6c:7f:ef:96:09:8a:63:17:0f:
         18:03:78:11:13:e4:06:16:ff:17:80:f8:e6:7a:cd:fe:f8:dc:
         95:05:bf:7f:a2:ec:2a:6a:7d:45:31:e8:1f:9b:8f:80:18:83:
         fe:b6:17:89:f3:9a:bc:d0:bf:83:17:db:92:2e:a4:67:78:b7:
         1c:39:2a:35:a6:29:24:b9:d1:86:68:53:0c:03:27:59:53:da:
         80:48:30:f9:d1:3e:1d:39:68:8d:cb:f6:09:3f:17:78:b6:9a:
         46:31:3c:bb:33:12:30:76:7e:42:ea:e5:28:a8:40:e5:28:fe:
         c2:f8:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:32:34 2026 by rpki-client