Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/524CFDB27C1111EFBFC7363AC4F9AE02.roa
File:                     524CFDB27C1111EFBFC7363AC4F9AE02.roa (raw, json)
Hash identifier:          N34ziVoE2D8Mbb1uneGr1ko0ws+ayV+U8XSbWrelpDM=
Subject key identifier:   82:D9:DE:0D:9F:7C:71:34:EE:4B:56:69:96:A2:73:5B:D6:C9:06:03
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       083B
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/524CFDB27C1111EFBFC7363AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:07:32 +0000
ROA not before:           Sun 14 Sep 2025 18:27:50 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138192
IP address blocks:        103.139.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Sep 14 18:27:50 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48e74-c01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:cc:58:c2:18:fa:fb:f9:59:df:d5:51:8d:
                    67:eb:0c:10:5b:c5:28:20:68:1d:2d:e5:ae:a6:34:
                    b2:bf:4c:9b:9e:d6:f7:58:1d:fb:9e:48:bf:95:6b:
                    09:55:bf:9f:6f:b7:bd:17:7a:37:3d:00:0e:13:3c:
                    3e:08:0d:d6:fd:e2:2f:8d:35:ed:58:8a:b2:6e:6a:
                    6f:6e:a3:0c:81:14:84:4b:3f:18:43:32:e8:23:47:
                    30:84:a5:29:83:5a:48:6f:e4:31:f4:48:d2:e9:b8:
                    52:93:b5:cd:8c:e7:ac:ea:60:7f:20:c4:bf:b2:17:
                    9f:18:19:75:87:82:36:62:ef:4c:51:d0:b1:7c:e4:
                    3b:7e:9b:c6:87:46:72:cc:62:e2:c2:39:d5:4c:b7:
                    f3:66:ba:7f:82:22:9b:d2:17:eb:dc:dd:25:2b:af:
                    e3:ac:62:3b:09:ef:a1:d9:46:cd:d6:e1:01:fb:e8:
                    78:9e:80:a8:17:4a:75:d0:29:1e:4e:45:8a:84:8b:
                    a9:56:02:9a:e2:1a:dc:e4:50:aa:a7:95:2c:48:2f:
                    b0:7c:1a:fb:8d:f9:9d:c0:f5:11:d4:99:0a:f1:05:
                    79:82:10:d6:53:58:45:5f:92:8d:ab:4a:0f:8d:d8:
                    fd:e3:9c:20:0f:30:8d:db:b1:7b:11:db:71:5f:5d:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D9:DE:0D:9F:7C:71:34:EE:4B:56:69:96:A2:73:5B:D6:C9:06:03
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/524CFDB27C1111EFBFC7363AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:26:03:a0:62:80:5c:06:bc:61:33:8b:a7:91:2c:26:b6:a4:
         65:00:3a:00:ae:d9:51:9e:be:aa:a1:c3:c7:84:15:23:99:e8:
         24:27:2f:ed:b9:4b:d6:f3:60:0e:6d:24:e5:7b:2b:b6:d2:76:
         69:ac:d3:00:76:ef:bc:d2:a8:7a:d8:3d:75:33:58:e9:94:eb:
         96:14:d7:21:e9:30:12:77:ec:73:1b:bf:0b:53:9e:21:f4:7e:
         41:e4:4c:2c:43:38:f1:ba:3b:7d:f5:69:17:72:a3:31:b2:5e:
         05:ec:c6:c7:f2:84:50:de:58:f3:b5:db:27:65:a1:d9:c0:69:
         80:58:74:1c:61:79:00:9a:79:e7:68:8f:3e:de:0d:82:b1:76:
         9c:a3:62:88:2d:88:30:7c:60:00:e6:14:af:da:7a:ff:30:4f:
         9e:a3:bb:31:a4:c2:98:42:2c:60:ba:3a:d3:19:7b:5b:13:ff:
         7c:34:e9:c1:37:ab:73:07:81:b4:f4:7e:ff:e1:a7:38:ee:f7:
         c7:29:8c:7f:50:19:91:2c:9f:f3:fd:c0:b2:88:f6:8f:78:b8:
         5d:bf:5a:bb:6d:84:28:55:15:d8:db:23:6e:b1:26:9b:a3:d4:
         d1:16:38:ae:89:eb:83:06:23:44:6e:f6:f6:d9:86:fb:b2:58:
         1a:8b:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:11 2026 by rpki-client