Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/48E4C546941F11EE8517B26FC4F9AE02.roa
File:                     48E4C546941F11EE8517B26FC4F9AE02.roa (raw, json)
Hash identifier:          DPCUhEYWzZw/Q4o7/HdkA1e5q+1hk1SxLOVa65/v/3A=
Subject key identifier:   AC:F8:57:7E:C2:D9:6E:25:C8:A4:AB:37:07:FE:28:F9:DA:A2:4A:FA
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       09A9
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/48E4C546941F11EE8517B26FC4F9AE02.roa
Signing time:             Wed 08 Jul 2026 21:22:11 +0000
ROA not before:           Wed 08 Jul 2026 21:22:11 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        103.66.180.0/24 maxlen: 24
                          103.66.181.0/24 maxlen: 24
                          103.66.182.0/24 maxlen: 24
                          103.66.183.0/24 maxlen: 24
                          103.244.112.0/24 maxlen: 24
                          103.244.113.0/24 maxlen: 24
                          103.244.114.0/24 maxlen: 24
                          103.244.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Jul  8 21:22:11 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4ebf83-4fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:d6:2f:62:20:37:45:f0:dd:fc:be:26:9f:
                    c2:78:74:3e:e2:e7:1f:94:0e:bd:b3:09:15:0d:12:
                    66:49:2d:6d:b2:7c:3b:f5:db:fd:a0:23:52:26:52:
                    81:39:af:27:46:ac:5d:e4:d1:f3:7d:09:77:4b:68:
                    d8:20:a6:e0:96:e9:a6:8f:6c:b0:85:c1:d7:b3:70:
                    bb:d2:df:10:12:60:8c:ca:e3:db:46:52:5a:0b:4c:
                    9c:b5:53:48:6d:dd:f4:13:57:ab:26:65:cc:0e:62:
                    a0:9a:02:b1:4c:75:e6:8f:00:87:c1:d4:9d:05:97:
                    16:b4:04:8e:91:65:4f:52:e8:ec:5e:d4:12:14:7b:
                    de:39:06:a5:10:01:c3:a6:51:59:51:2e:6b:b4:8a:
                    d4:b2:b0:b6:83:20:fc:17:c3:4f:e8:9c:99:49:93:
                    d4:10:5b:1e:16:31:d7:b6:a6:58:db:57:e4:ba:78:
                    8f:92:88:12:0b:b1:64:9c:b8:32:61:83:d7:c2:a7:
                    1b:33:3a:7f:fb:48:05:a5:f3:8f:50:39:30:1c:b1:
                    56:b4:e5:03:df:b9:d2:43:ba:8f:d3:86:d9:57:95:
                    c1:07:6d:dc:ba:67:b2:af:f7:b5:9a:62:83:1f:66:
                    10:da:c1:cc:0e:f1:4b:de:a7:3f:2d:1d:2c:4d:7c:
                    b0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F8:57:7E:C2:D9:6E:25:C8:A4:AB:37:07:FE:28:F9:DA:A2:4A:FA
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/48E4C546941F11EE8517B26FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.180.0/22
                  103.244.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:ee:d9:59:42:8d:85:ef:49:96:d0:dd:ba:ae:c6:da:75:5a:
         03:5a:94:44:d1:e0:12:2a:6b:6a:40:37:7a:4d:c2:ba:4c:aa:
         93:fd:62:44:4b:a8:e0:87:aa:41:52:ec:78:fa:15:be:cd:f3:
         70:4a:d8:b6:06:db:de:83:c4:aa:32:08:d3:93:3a:96:16:ca:
         1b:63:e6:03:f3:3f:b6:5d:87:05:c2:32:03:9f:08:b9:e5:54:
         61:17:b2:7f:91:6e:ed:95:04:d1:fa:b0:6a:fe:40:33:70:55:
         e9:75:13:ee:86:56:37:c5:da:45:ab:c4:42:4d:22:67:30:2c:
         23:3a:58:93:7c:a3:c9:49:2b:1b:35:4a:33:1f:c3:b3:c2:ba:
         6d:16:ae:fc:16:24:c1:39:d7:f3:06:93:b8:16:83:3d:3b:14:
         4d:c5:7b:4e:f2:c5:9d:9b:dc:6b:e7:1f:8f:00:ec:a5:4e:1b:
         16:72:5b:1c:de:b3:16:0b:49:e6:ce:9a:e0:e2:93:f0:98:dc:
         19:69:f3:ff:3b:bc:41:d4:7c:5e:a6:bb:53:df:69:7e:58:dc:
         0e:81:d8:1d:1f:1e:29:dc:42:2a:ac:e9:d3:ab:64:3c:53:d8:
         60:c5:02:a0:b1:88:25:7f:da:87:e7:b0:35:ec:fe:4f:86:53:
         13:34:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:51 2026 by rpki-client