Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9F685E60678511F0999A252DC4F9AE02.roa
File:                     9F685E60678511F0999A252DC4F9AE02.roa (raw, json)
Hash identifier:          F0BVTAtasd/U+5Pd7iq4lB4rkiv9dNM8GMlahH5MNTA=
Subject key identifier:   E4:06:74:DE:06:81:8D:DE:C9:36:64:FB:2D:24:40:3D:72:EA:E2:36
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       87
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9F685E60678511F0999A252DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:29:42 +0000
ROA not before:           Fri 29 Aug 2025 08:59:15 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.141.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Aug 29 08:59:15 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a59ed6-606e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:41:4e:92:13:33:75:a6:69:7c:f3:f8:9a:
                    d1:98:ce:11:01:f4:c0:7b:a5:e3:21:a5:d5:b7:ce:
                    47:31:59:ae:89:59:c2:be:79:c1:48:09:d5:c8:05:
                    9e:38:11:1a:07:22:a2:86:e9:bd:99:8a:4f:ae:67:
                    5e:ca:fd:25:7f:5a:b7:08:6e:42:8c:36:9a:f5:d8:
                    70:be:6b:c7:4c:fc:18:10:4d:4f:5c:6f:b1:78:db:
                    83:82:83:87:e7:8b:58:e9:21:b5:89:23:80:81:cd:
                    bb:c9:ce:3a:ef:c4:a5:b9:3f:bf:07:1c:05:7b:2d:
                    2c:89:89:de:bd:14:77:2f:f1:8f:cd:03:42:71:b5:
                    74:12:24:07:39:1d:29:ab:8f:96:63:e2:a9:2f:b0:
                    ba:8a:34:79:cd:b9:6e:9d:61:81:22:a6:40:23:3e:
                    b1:2e:58:3c:e2:3a:26:56:df:bb:dc:1e:9d:f4:e1:
                    ba:d6:5a:97:9f:9b:d0:4e:5f:0a:82:17:a6:82:20:
                    34:69:a7:43:4f:2d:dd:29:73:42:9a:e6:8e:19:9f:
                    49:0f:98:f0:66:c8:de:6c:2d:a5:79:db:3f:c7:f2:
                    25:5d:d5:ee:96:6e:0d:97:61:16:48:fe:77:8c:39:
                    7f:7f:38:e1:6d:eb:13:29:81:a6:89:ed:7c:4b:57:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:06:74:DE:06:81:8D:DE:C9:36:64:FB:2D:24:40:3D:72:EA:E2:36
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9F685E60678511F0999A252DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:a1:87:02:f2:52:db:03:a4:c4:e5:48:76:fe:85:20:77:ce:
         8d:41:0b:a7:4e:77:56:6a:e1:d7:00:c0:bf:83:a7:f3:fa:f5:
         57:3c:ff:8f:d0:b1:47:c6:d7:fc:ca:89:24:93:30:53:0b:0c:
         b5:48:c3:06:91:ee:cd:b5:80:6d:a3:8a:ea:20:6d:90:1d:67:
         3f:35:76:4d:8b:ba:bb:6d:1a:31:14:ad:a9:4c:5e:9e:6d:16:
         23:d4:04:d7:fc:a8:86:1e:fa:dc:14:1f:91:5c:2f:39:5c:a4:
         15:4e:2c:79:ad:42:65:ed:8b:32:d6:9c:fa:7c:6f:8e:c0:0d:
         16:a3:f9:b6:aa:5d:56:7a:a8:54:2a:a7:28:aa:3b:23:2d:66:
         5e:4a:b7:78:0c:a4:c8:94:a9:57:9b:c7:9e:4a:c4:28:47:49:
         6f:b7:9b:64:5c:51:c4:31:fb:03:c7:44:58:8a:c2:52:b6:1b:
         c9:ed:8b:4c:a0:58:c8:2d:8d:04:40:f6:ea:73:7e:5c:ae:08:
         53:20:1d:82:9d:76:72:af:a7:54:71:37:78:ed:74:7b:38:2f:
         95:8e:4d:be:f7:0f:d0:83:a0:fb:f2:91:c3:64:55:42:33:5a:
         3a:c4:0e:70:17:f7:2e:de:d5:8e:54:24:79:d4:4f:5a:d0:30:
         00:59:6e:c2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMjIxMTAvBgNVBAUTKEMyM0RFRUI0NzlFNzBGNjBFRkNBN0M4ODQ2MkI5NUI5
REMyMkM5RDAwHhcNMjUwODI5MDg1OTE1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWVkNi02MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBNBTpITM3WmaXzz+JrRmM4RAfTAe6XjIaXVt85HMVmuiVnCvnnBSAnVyAWe
OBEaByKihum9mYpPrmdeyv0lf1q3CG5CjDaa9dhwvmvHTPwYEE1PXG+xeNuDgoOH
54tY6SG1iSOAgc27yc4678SluT+/BxwFey0siYnevRR3L/GPzQNCcbV0EiQHOR0p
q4+WY+KpL7C6ijR5zblunWGBIqZAIz6xLlg84jomVt+73B6d9OG61lqXn5vQTl8K
ghemgiA0aadDTy3dKXNCmuaOGZ9JD5jwZsjebC2leds/x/IlXdXulm4Nl2EWSP53
jDl/fzjhbesTKYGmie18S1fgMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOQGdN4G
gY3eyTZk+y0kQD1y6uI2MB8GA1UdIwQYMBaAFMI97rR55w9g78p8iEYrlbncIsnQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEyMi9GRDVERTlCMjY2
MDAxMUYwOTk4NkM5MTdDNEY5QUUwMi93ajN1dEhubkQyRHZ5bnlJUml1VnVkd2l5
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dqM3V0SG5uRDJEdnlueUlSaXVWdWR3aXlkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDJBMjIvRkQ1REU5QjI2NjAwMTFGMDk5ODZDOTE3QzRGOUFFMDIvOUY2ODVFNjA2
Nzg1MTFGMDk5OUEyNTJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ40qMA0GCSqGSIb3DQEBCwUAA4IBAQBEoYcC8lLbA6TE5Uh2/oUg
d86NQQunTndWauHXAMC/g6fz+vVXPP+P0LFHxtf8yokkkzBTCwy1SMMGke7NtYBt
o4rqIG2QHWc/NXZNi7q7bRoxFK2pTF6ebRYj1ATX/KiGHvrcFB+RXC85XKQVTix5
rUJl7Ysy1pz6fG+OwA0Wo/m2ql1WeqhUKqcoqjsjLWZeSrd4DKTIlKlXm8eeSsQo
R0lvt5tkXFHEMfsDx0RYisJSthvJ7YtMoFjILY0EQPbqc35crghTIB2CnXZyr6dU
cTd47XR7OC+Vjk2+9w/Qg6D78pHDZFVCM1o6xA5wF/cu3tWOVCR51E9a0DAAWW7C
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:18 2026 by rpki-client