Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
File:                     94EA7370050111EA9BDD372BC4F9AE02.roa (raw, json)
Hash identifier:          mMRUREtvZnIxIVtQ29KyF/I8MzGp8zE5JILwSK9RsUg=
Subject key identifier:   A9:72:78:F5:01:94:20:B6:90:93:C5:7D:A1:A4:F2:91:2A:A1:47:66
Certificate issuer:       /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial:       0D47
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
Signing time:             Tue 22 Sep 2026 18:37:20 +0000
ROA not before:           Tue 22 Sep 2026 18:37:20 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     7474
IP address blocks:        103.77.128.0/24 maxlen: 24
                          202.129.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
                          rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3399 (0xd47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
        Validity
            Not Before: Sep 22 18:37:20 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab2cadf-e96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:4c:34:63:43:ca:c1:5b:a5:86:ce:1d:e5:
                    8a:a1:6f:f9:ee:d3:aa:1e:41:e9:70:da:95:38:9d:
                    eb:80:31:ad:68:d7:d1:3e:42:6f:83:da:84:e2:47:
                    7c:0e:a2:f8:06:20:da:0f:54:57:6e:cf:2c:d7:b4:
                    f5:9c:24:d1:bb:8b:8c:c9:db:4b:86:e3:3a:9e:12:
                    3c:98:46:7e:a2:f7:bb:4d:b5:ff:fd:e6:8f:e8:d5:
                    c9:b5:05:45:7c:dc:fc:03:27:dc:c3:31:91:c1:e2:
                    2a:87:f4:85:56:52:f1:22:6d:aa:4f:36:c7:57:d0:
                    8b:20:d2:14:45:42:37:f1:c5:bc:5b:94:7e:b3:29:
                    b5:11:99:8e:6a:fe:88:b9:5b:ff:a0:9d:22:97:75:
                    a0:8c:e6:c6:03:e8:cb:41:07:bb:23:da:1b:26:eb:
                    21:3a:2e:31:5b:80:ca:84:54:db:aa:28:7d:21:ac:
                    1d:26:ac:86:40:6d:9f:8f:86:74:9c:08:7b:15:7e:
                    33:99:f8:e8:6a:fc:cb:7e:f6:78:ae:22:55:82:39:
                    aa:64:2b:c9:bc:c2:f0:1b:7b:b6:e8:4d:1b:e6:94:
                    57:8a:d9:5e:09:c4:5e:d4:73:5b:15:df:68:bf:9f:
                    b0:ba:be:6a:4a:60:b5:3b:65:93:6b:32:61:ec:c0:
                    9f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:72:78:F5:01:94:20:B6:90:93:C5:7D:A1:A4:F2:91:2A:A1:47:66
            X509v3 Authority Key Identifier:
                keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.128.0/24
                  202.129.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:91:d8:e7:92:47:33:36:c4:36:93:7b:a3:04:7a:92:c9:d1:
         6d:d6:7c:da:1a:4e:73:1a:b7:6b:ac:a6:b3:de:bd:56:78:5c:
         c6:66:a2:b3:cd:6b:85:99:ab:e3:c5:b9:c3:ad:7d:ad:6d:50:
         7c:d2:24:f9:76:72:13:a0:37:0c:9b:65:2d:0d:be:6c:62:f7:
         7b:24:51:38:d2:58:28:42:47:b8:66:b8:dd:b9:c6:93:5a:9d:
         ec:4e:92:39:a9:22:15:a9:5c:ee:86:51:10:0f:00:3c:ab:32:
         ee:de:be:52:7b:04:56:e8:5b:f3:a9:1e:24:c6:07:88:c4:cd:
         5b:e8:97:2b:74:1e:54:f1:a2:04:4b:5d:e9:4b:09:0f:90:c5:
         65:e8:fe:56:cc:06:ac:b7:50:a6:87:8e:c9:ec:ab:cf:31:81:
         23:52:e7:98:e4:c6:21:f0:77:75:f4:4f:97:40:14:c6:ad:27:
         8e:1d:0f:26:8b:fc:89:71:71:a2:65:f7:f8:4a:cc:c9:28:a1:
         b9:77:83:f1:9f:0b:b0:c7:af:c5:4e:8e:4f:d1:1a:0f:d8:e2:
         d2:85:69:81:f3:fd:f3:94:a7:10:07:a0:6d:6b:0c:68:1f:98:
         4c:df:f2:03:54:25:b1:86:81:91:8d:5f:5d:63:9c:78:c3:21:
         26:a4:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:28:36 2026 by rpki-client