Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
File:                     B24758AE772311EFA5510A63C4F9AE02.roa (raw, json)
Hash identifier:          knFwvMjPgbAwZWQ4tl74NJH9Eoq0c8p4Rxp+Mu8Ms4k=
Subject key identifier:   EE:EC:EB:24:00:54:B8:EA:1B:0C:BC:12:A8:A4:2B:5F:1B:E2:C4:03
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       0259
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
Signing time:             Sat 07 Mar 2026 02:36:24 +0000
ROA not before:           Sat 07 Mar 2026 02:36:24 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     10225
IP address blocks:        103.182.210.0/23 maxlen: 23
                          103.182.210.0/24 maxlen: 24
                          103.182.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
                          rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
        Validity
            Not Before: Mar  7 02:36:24 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ab8f28-57df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:82:6b:6d:a7:9a:e6:1a:e1:24:36:89:48:
                    06:6e:76:04:36:b9:65:3c:a3:58:ce:f6:67:d4:43:
                    2b:de:df:95:29:56:67:e6:35:5e:c2:ae:f0:71:d0:
                    2c:8f:af:77:64:f6:c1:c6:ca:38:e2:53:6b:03:d1:
                    bd:6d:07:b8:1f:0c:e1:20:7b:cd:8a:96:ef:9f:85:
                    af:1a:84:98:ba:03:02:1e:57:3b:20:83:59:03:98:
                    c8:5f:11:f7:7d:e1:64:d1:57:fa:cb:c6:80:0f:1b:
                    23:15:fd:21:cd:2a:94:6a:54:a3:bb:2d:92:8f:44:
                    23:64:c1:41:09:64:6c:6d:7b:86:63:96:1b:da:21:
                    4f:72:59:a0:ab:21:d1:95:be:38:f6:43:9f:77:36:
                    80:a2:ec:0f:38:fd:f7:f2:a2:2e:f3:67:52:fb:14:
                    24:7b:27:07:1b:db:64:75:c8:d5:9e:5c:a5:89:05:
                    bd:6e:d5:53:83:35:24:06:89:9a:26:07:34:de:7d:
                    4b:0a:b5:10:5f:f2:d1:4b:c7:d8:06:41:76:c9:b0:
                    89:3d:67:93:33:c4:0e:a3:96:59:77:1c:f8:8b:b1:
                    93:93:c1:5a:ca:69:0c:6f:59:4a:23:09:48:89:03:
                    5c:df:bc:ab:16:e1:87:45:c3:cb:af:c3:08:46:68:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EC:EB:24:00:54:B8:EA:1B:0C:BC:12:A8:A4:2B:5F:1B:E2:C4:03
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:cd:0e:d3:9b:15:0b:fa:94:ed:e9:34:66:22:17:a9:89:46:
         81:f0:78:cb:d6:0b:a7:6d:1f:6f:f8:2b:e2:e1:98:1b:17:ea:
         50:57:e4:27:49:5b:8e:9d:79:3e:a4:b3:8a:40:d5:c8:22:aa:
         36:4a:02:05:0d:d5:ca:15:5e:8b:f2:d6:6c:ef:34:6a:25:f0:
         3e:c2:de:a0:d0:8b:08:ba:8c:fd:12:2c:73:78:e8:56:e7:55:
         cb:c1:9c:39:0e:d8:91:8b:f1:4c:e0:a2:73:df:f3:8c:a9:8b:
         33:cc:25:33:cb:99:87:d9:4c:c4:9d:c2:e3:81:62:9a:6c:f8:
         92:b1:9f:23:89:58:4e:cd:4e:85:b3:fe:7b:fb:14:84:f8:22:
         43:e7:cd:71:80:10:b8:ed:01:b0:d3:75:2a:74:79:9b:93:f9:
         7f:89:d1:41:68:6d:c0:88:9f:72:13:61:57:30:81:f2:e5:f3:
         50:54:09:0f:90:61:d1:ae:17:b2:ca:e8:c4:15:7b:ee:81:4b:
         0d:37:4b:74:35:56:89:9a:71:78:df:27:a0:10:2c:56:aa:15:
         01:c5:4d:d6:45:c2:cd:bc:7c:43:b5:3d:96:cb:b5:8f:59:fb:
         85:49:eb:7a:bd:f2:79:e3:68:15:ab:6b:e5:f2:ad:00:68:ec:
         5d:af:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:53 2026 by rpki-client