Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa
File:                     CA08C348098D11EDAB30E934C4F9AE02.roa (raw, json)
Hash identifier:          UvlKwQqXfNX6TNtFAKTDpqec7TKizL2BqsLfAWubGJU=
Subject key identifier:   84:9F:C4:A6:5F:D5:15:30:15:16:96:AD:FC:17:B7:0D:7E:4D:9D:84
Certificate issuer:       /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial:       0313
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:04:09 +0000
ROA not before:           Fri 15 Aug 2025 02:38:33 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137817
IP address blocks:        103.191.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
                          rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
        Validity
            Not Before: Aug 15 02:38:33 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40109-5d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:a4:9b:c6:8f:5b:da:8c:b9:22:28:d8:f6:
                    fb:42:2d:7d:13:01:b3:40:d9:5c:dd:3e:e9:eb:84:
                    dd:bb:81:a8:d3:d6:9f:da:32:93:60:fd:89:65:46:
                    78:c7:90:d8:cb:7c:9f:0e:37:e4:09:00:61:72:b5:
                    c2:38:b7:82:46:a5:d4:39:2d:0e:12:14:5e:e7:b3:
                    4b:97:46:45:fb:f5:0b:ad:29:11:a9:0d:7f:ad:b2:
                    8f:85:f5:ba:30:f2:5c:7e:f1:34:37:85:50:28:c7:
                    6b:89:aa:5a:14:ef:d5:e7:7f:5e:db:df:4e:ea:f6:
                    f7:ab:3c:2a:69:8c:c4:44:3f:9f:ec:ab:d4:01:e9:
                    bf:bf:fd:c9:0d:04:a4:11:01:f1:3e:15:8a:71:27:
                    79:18:6f:fe:d3:df:a4:b0:97:13:4c:44:92:c9:3b:
                    65:77:27:d5:a1:61:0b:65:9c:4c:74:cf:4d:43:70:
                    fa:6b:5b:49:98:d6:ee:66:fa:5e:11:41:38:50:1b:
                    60:d0:be:ee:b2:e5:90:9f:71:21:74:9b:00:73:48:
                    f5:a1:26:89:8d:6c:e4:5e:ab:a5:4b:bb:69:f0:6b:
                    ac:99:87:11:fd:65:ba:c3:a3:78:0e:20:a3:99:38:
                    a2:ca:c3:eb:1b:5e:39:bb:b7:f9:0d:ac:82:f2:84:
                    be:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9F:C4:A6:5F:D5:15:30:15:16:96:AD:FC:17:B7:0D:7E:4D:9D:84
            X509v3 Authority Key Identifier:
                keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:7b:77:56:48:64:7c:9b:3e:e8:c9:5b:26:41:ef:e0:b3:
         9f:9f:43:1d:aa:4e:74:0d:02:25:cb:ae:2d:91:ad:e1:40:44:
         6c:8c:ac:37:1c:fb:18:db:60:ac:57:30:f6:35:b5:95:aa:8c:
         3e:fb:c8:d4:8c:91:ce:4b:42:ed:4b:70:97:2c:b0:e6:73:89:
         1f:23:4d:f0:86:ab:34:0c:3f:38:d9:f4:86:be:fc:bb:ff:d6:
         54:db:42:b6:43:6f:bb:ef:cb:4f:05:2b:2a:ea:81:5d:70:c4:
         ce:46:47:2f:e6:62:aa:e6:ec:b8:d6:22:39:65:2f:e9:da:2f:
         66:ce:da:a6:a9:a3:c5:06:a5:90:82:37:2b:ee:77:a7:3d:3a:
         ac:47:32:0f:44:92:d0:75:4e:e0:00:61:bb:73:d8:24:a5:75:
         3b:39:d5:21:9f:35:af:4a:38:ef:dd:81:65:e0:44:71:86:9a:
         68:fd:02:7e:97:a6:71:ac:dc:2e:c7:c0:4e:2c:46:0e:91:f0:
         56:92:40:cb:cd:13:c8:e8:c3:dc:39:d4:12:44:4c:84:f4:89:
         60:3b:2b:34:0a:71:73:1b:68:70:5a:cb:85:e3:3b:62:6e:a5:
         93:14:ac:9b:44:7a:d6:e4:8a:68:38:1a:5f:64:2a:05:af:64:
         c8:3a:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:51 2026 by rpki-client