Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/1BCA5982656311ECA4E81323C4F9AE02.roa
File:                     1BCA5982656311ECA4E81323C4F9AE02.roa (raw, json)
Hash identifier:          IT79Hkoa22EueYUEPb7uUMkBxRjft5NtH+6nYpQUQTE=
Subject key identifier:   EF:A6:FB:3E:9A:5D:FA:A5:23:01:F0:FE:23:FE:9C:5D:2D:23:C0:4E
Certificate issuer:       /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial:       109D
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/1BCA5982656311ECA4E81323C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:48:03 +0000
ROA not before:           Mon 30 Jun 2025 17:50:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     59382
IP address blocks:        103.237.36.0/22 maxlen: 24
                          160.202.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
                          rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4253 (0x109d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
        Validity
            Not Before: Jun 30 17:50:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a44393-e580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:97:4e:98:f2:db:f5:ed:2d:a8:ff:64:01:
                    6a:28:94:fc:c9:23:ad:96:f3:9d:1d:1f:5d:6f:32:
                    ed:12:20:97:48:72:98:d0:b1:57:fd:6d:bf:37:82:
                    19:c4:8a:d7:5c:f5:dc:c4:9e:dd:46:c6:0c:30:d1:
                    df:2f:b6:10:61:ad:73:52:fe:75:08:b5:c9:1e:35:
                    92:68:0e:bd:e1:3a:18:23:40:f7:e4:c0:36:5d:16:
                    fc:75:33:d2:94:30:b3:1c:fb:9f:70:85:1f:17:25:
                    2d:42:38:5a:39:cc:bd:31:8a:04:29:5a:ca:46:d8:
                    ef:9e:86:9a:2f:c7:6d:04:34:9a:c9:de:83:a8:ac:
                    cc:82:88:c8:9f:ff:d4:1b:61:0f:98:e3:c4:7b:83:
                    80:02:ad:e2:23:a7:cf:42:2c:64:d7:5f:60:50:8f:
                    75:9c:b3:56:d8:1e:a2:84:33:e0:5b:94:a1:f3:a3:
                    71:d5:59:ab:b4:bd:3b:05:06:d8:c5:9a:57:f5:61:
                    f4:01:bd:33:b1:26:c2:ee:4f:c1:8c:07:9e:28:04:
                    51:01:32:f7:0a:1d:f3:7c:54:dc:5e:b1:34:dd:9c:
                    9d:09:e7:5f:9d:a0:2c:29:40:70:a6:59:1c:99:d5:
                    d4:f3:ad:0a:39:ad:20:0f:54:87:8d:7d:68:fa:8d:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A6:FB:3E:9A:5D:FA:A5:23:01:F0:FE:23:FE:9C:5D:2D:23:C0:4E
            X509v3 Authority Key Identifier:
                keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/1BCA5982656311ECA4E81323C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.36.0/22
                  160.202.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:76:97:f7:e4:ec:cc:01:42:a3:7c:8c:74:6d:b9:27:f0:66:
         3d:6d:e2:57:4d:ee:b4:a9:a2:0e:c7:68:fc:ea:59:3b:ff:09:
         11:19:3b:e1:87:bd:08:e0:98:50:7c:95:bd:4e:3b:16:1e:d8:
         41:8a:27:1f:6d:4e:63:18:e5:4d:a8:d3:0d:fe:1b:e3:ef:19:
         14:7e:79:79:7f:12:b1:1f:84:78:0b:9c:6c:a0:9e:c2:d2:52:
         12:f6:9a:b5:a7:56:c3:bb:18:6b:40:0a:7d:8a:ec:e1:d9:7d:
         3f:df:f4:69:46:6b:9f:2a:bd:6a:09:e7:b8:dc:c2:54:a1:c9:
         47:b6:31:27:68:d1:a1:6e:98:18:f6:56:63:66:7c:e6:74:0f:
         cc:6c:c2:e5:5f:2c:e7:9d:af:24:20:b1:1a:58:f1:94:0f:04:
         24:57:4e:66:73:a8:64:40:8a:68:42:b2:72:b7:86:fc:b9:5f:
         46:6c:e8:ee:ab:12:c4:3e:c6:00:49:89:4e:99:c7:d9:af:4b:
         9c:a8:11:9a:66:dd:c5:45:ec:b4:00:2d:10:30:84:57:41:c4:
         f6:30:84:17:0c:4c:41:58:c9:cc:21:fc:e9:8b:78:ed:1f:51:
         66:50:e4:6f:0f:fd:37:cd:4f:4a:4b:fc:79:30:9b:71:4c:87:
         39:c2:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:33:51 2026 by rpki-client