Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
File:                     4CBDBA5E3F0011F18130B663C8833773.roa (raw, json)
Hash identifier:          Fj+bRfSzcCaCjFqPxjs4ZGVm3cIIfQYKMPXbwmtBTf8=
Subject key identifier:   CE:FC:DA:33:06:C1:65:66:E0:40:8C:55:A5:D9:4C:B8:8F:2A:60:B7
Certificate issuer:       /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial:       1DF8
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
Signing time:             Mon 14 Sep 2026 16:28:41 +0000
ROA not before:           Mon 14 Sep 2026 16:28:41 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        103.239.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
                          rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7672 (0x1df8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
        Validity
            Not Before: Sep 14 16:28:41 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa820b9-ed4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:77:65:a7:42:61:35:b8:2c:36:80:c0:82:
                    71:e9:2b:3e:42:87:27:3c:05:06:f2:de:2b:0c:20:
                    f5:16:12:81:2f:a7:d8:44:d9:87:c9:ac:c3:12:85:
                    57:19:0f:6c:8a:97:40:87:a9:a8:9e:6e:e9:36:96:
                    87:bb:da:39:ed:b3:44:e7:bf:72:2f:66:c0:c7:84:
                    08:df:33:11:25:3c:ae:24:e0:e5:c1:42:b4:db:ab:
                    df:5a:a0:aa:6b:8c:67:1d:cc:96:d5:83:1d:16:53:
                    b2:69:8f:87:91:c7:ff:71:f4:35:dd:c7:65:a8:19:
                    92:12:84:54:9e:86:a4:d8:c2:c3:06:6f:3c:ae:76:
                    af:cb:5d:b4:48:9f:db:72:3f:2d:ee:38:a2:30:23:
                    f6:f8:b8:50:a2:a0:80:33:c9:93:22:da:18:5a:59:
                    d3:4a:16:37:54:c4:e4:ec:a5:4d:46:16:66:54:80:
                    b9:03:6c:15:a5:fb:b6:27:45:72:a2:b0:01:01:ea:
                    fb:e4:fc:62:dd:ce:4c:e2:24:1c:9c:81:7a:49:4a:
                    43:2c:c6:bd:9b:d5:c2:21:42:bf:91:d2:4f:6d:35:
                    2f:7a:3b:3b:c5:54:43:90:de:49:d7:78:c8:29:db:
                    84:c6:2f:ab:31:74:00:f3:10:4b:25:94:a2:bb:ef:
                    17:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FC:DA:33:06:C1:65:66:E0:40:8C:55:A5:D9:4C:B8:8F:2A:60:B7
            X509v3 Authority Key Identifier:
                keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:44:cb:20:12:b1:33:4f:c0:33:05:0b:72:24:1b:c1:5c:cd:
         5b:75:8e:0e:34:32:7c:ce:07:90:61:51:25:0a:ee:da:52:1a:
         77:a1:4c:3d:be:49:5f:cf:77:79:f6:74:73:09:86:e5:83:97:
         6a:8c:a9:20:2a:b4:4e:75:c9:54:f0:00:fb:92:65:44:1c:ad:
         9d:25:9d:c2:de:3a:f9:f3:d7:c0:25:0c:a1:52:2b:7e:3f:25:
         55:f5:87:54:a2:3e:05:43:52:45:77:65:c3:65:6f:db:bd:a4:
         33:59:69:46:42:50:85:cd:f4:01:38:cb:cd:a1:ef:c6:97:98:
         df:ec:95:db:9b:8c:d0:9e:6e:bd:4a:5a:d9:85:47:6c:5c:cb:
         d4:ea:84:97:55:98:2b:fd:93:9d:48:7d:9a:af:9a:2f:80:d9:
         c7:6e:be:19:33:a6:8d:35:9e:52:1d:05:3f:4d:3a:14:bf:ef:
         d3:dc:16:d6:9e:02:ae:2a:48:fe:9b:6b:f7:3b:77:97:fc:2f:
         6b:ba:ff:f4:43:f7:dc:18:e4:09:49:eb:3f:96:ba:56:16:d1:
         c3:74:9e:92:07:02:5d:9b:14:cc:f8:29:0d:0c:1f:3a:3f:38:
         04:43:fe:94:6d:b9:e5:89:6f:96:73:f9:84:84:79:64:80:a7:
         0f:b6:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:55:52 2026 by rpki-client