Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa
File:                     9A8603FC93ED11ED931AB73CC4F9AE02.roa (raw, json)
Hash identifier:          0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=
Subject key identifier:   76:A8:1F:23:15:99:3D:54:0F:A8:AF:CB:EA:3D:F7:A9:60:91:4D:D2
Certificate issuer:       /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial:       0D1E
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa
Signing time:             Fri 20 Mar 2026 19:23:55 +0000
ROA not before:           Fri 20 Mar 2026 19:23:55 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     201133
IP address blocks:        103.155.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
                          rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3358 (0xd1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
        Validity
            Not Before: Mar 20 19:23:55 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bd9ecb-510b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:32:40:44:1c:9f:94:9e:66:f3:aa:02:d7:
                    e8:a1:db:64:c5:cf:13:b3:15:b3:24:8c:e1:02:04:
                    73:d0:49:42:bf:3d:17:40:1f:1a:c2:bf:c2:39:72:
                    7e:ed:49:65:ea:aa:c3:1c:43:f9:a3:6d:43:eb:92:
                    8f:c6:f4:97:3e:94:c5:cb:bb:57:e1:7d:e5:e1:e7:
                    be:35:a8:b0:e1:0c:1d:ed:3b:5b:c5:bc:c3:b0:d0:
                    41:9f:5b:48:f9:21:ec:d3:ab:e8:51:2c:4e:10:0a:
                    c7:61:54:ec:e1:1c:f1:e1:af:05:30:6a:94:ce:dc:
                    e8:52:2e:94:0a:5b:ae:54:ba:88:41:d7:33:65:3c:
                    1b:ac:3a:57:22:66:71:c0:62:dc:23:81:0c:13:88:
                    a8:45:27:f4:54:74:a5:ca:4d:32:08:ea:e1:b1:12:
                    af:20:95:14:39:30:40:01:5b:64:a3:3a:81:53:63:
                    80:42:16:27:63:42:92:7d:ae:f2:9c:73:22:49:bb:
                    a8:d1:92:59:5f:58:82:ad:e6:0e:23:f1:f2:c4:a3:
                    3f:0d:17:ca:95:da:b2:da:8d:0b:24:13:29:95:40:
                    b9:69:76:e6:60:84:7a:0c:a4:a6:3e:67:b1:6b:24:
                    a8:51:62:25:f8:fa:32:5f:b4:b4:7d:88:83:b6:2a:
                    33:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A8:1F:23:15:99:3D:54:0F:A8:AF:CB:EA:3D:F7:A9:60:91:4D:D2
            X509v3 Authority Key Identifier:
                keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:f6:d4:8e:df:09:99:d8:f8:c2:79:e4:e6:8a:bf:3e:52:
         e3:69:04:14:ce:a3:cc:aa:a1:bc:06:69:b5:1c:99:3d:7c:99:
         a7:29:0d:bd:d1:ee:7a:44:92:2d:6e:e1:2a:e2:7b:2c:da:dc:
         83:1d:ea:ed:27:ca:1e:49:7a:5b:0e:ee:bf:17:24:6b:cf:5c:
         e5:08:13:39:b1:fc:cc:48:73:83:14:c8:9f:7b:09:28:8c:7a:
         3a:6e:66:dd:87:33:60:cc:70:b8:e5:be:7b:28:0b:a0:37:98:
         55:3f:49:4e:65:5b:a9:39:1b:9e:1f:13:ad:7a:82:2e:fe:45:
         56:87:b2:ab:75:00:74:01:58:50:ad:27:56:a6:eb:36:36:fa:
         ac:78:c4:05:9d:5a:05:e5:e3:7f:af:65:ce:3a:76:48:f7:4c:
         ad:32:fa:36:c5:60:21:fc:99:14:44:08:bf:73:45:9d:10:d3:
         cd:9b:5e:6c:ba:77:97:0d:d8:28:07:d3:ef:78:a5:1e:cd:62:
         6e:48:c0:61:a5:32:26:9d:48:70:35:54:a8:89:fe:d8:5a:28:
         23:b8:ef:b3:11:f8:68:12:e9:00:c7:ea:e1:1b:00:ae:f3:90:
         b0:4e:cd:a7:5a:60:4d:e5:6e:cb:6b:ca:22:d8:81:f4:2f:34:
         ff:e9:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:28 2026 by rpki-client