Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/776724AAF7B711ECAE4F7935C4F9AE02.roa
File:                     776724AAF7B711ECAE4F7935C4F9AE02.roa (raw, json)
Hash identifier:          YaLUoS4NO6gvXeP/FB11InRUuC2v1zSJTE++6llurm4=
Subject key identifier:   C9:E8:20:41:CE:88:AA:C8:B4:BC:39:49:9C:BA:B7:5D:A0:CE:77:BD
Certificate issuer:       /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Certificate serial:       0351
Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/776724AAF7B711ECAE4F7935C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:03:55 +0000
ROA not before:           Fri 01 Aug 2025 03:08:50 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149988
IP address blocks:        103.190.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
                          rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
        Validity
            Not Before: Aug  1 03:08:50 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a51a3a-d6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:18:27:82:2f:ed:a1:18:fc:b0:8b:1d:4f:
                    42:19:cf:3b:f3:fb:4a:dc:7e:08:8f:16:13:8a:f9:
                    4b:e3:47:3c:f6:8e:77:33:b2:05:e4:29:53:25:34:
                    1b:7e:36:db:3e:11:4a:76:08:70:cb:fe:7c:6f:39:
                    94:8d:b8:a6:0c:06:0c:69:89:bf:ce:6e:26:e7:9f:
                    b7:a0:23:69:b3:4b:f9:e4:7e:fd:4f:20:82:39:9d:
                    97:90:6d:79:fc:23:32:9c:52:a6:2c:00:ce:56:b0:
                    ff:58:01:9b:6a:ac:c0:b6:0b:29:42:53:5c:3f:18:
                    97:0a:7e:6a:90:d0:02:b9:4e:cd:5f:3f:60:e8:10:
                    e9:bf:86:66:c2:b7:d3:6d:0a:ff:7a:dc:a0:88:8d:
                    36:2f:e6:c6:3b:44:4c:ac:02:24:52:0f:59:01:e0:
                    b8:8b:5c:83:04:ad:c0:c8:89:65:d4:81:04:54:7f:
                    5d:c4:54:e2:21:d4:8a:61:09:2e:09:2d:f4:56:ce:
                    80:9d:4b:4d:99:73:a2:36:cd:db:db:ad:92:bd:82:
                    44:f5:e9:72:d3:fe:4d:4e:57:ab:9e:53:13:a5:f2:
                    7c:e2:2b:c9:60:65:27:b2:65:91:60:93:4c:68:c2:
                    c0:a3:4d:98:a8:27:a6:63:66:26:8c:34:27:fa:be:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E8:20:41:CE:88:AA:C8:B4:BC:39:49:9C:BA:B7:5D:A0:CE:77:BD
            X509v3 Authority Key Identifier:
                keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/776724AAF7B711ECAE4F7935C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:c1:e3:e3:42:e3:62:37:39:ed:9b:c7:4d:94:1f:95:53:24:
         ca:52:70:0a:18:c6:6e:2e:62:b3:f8:7e:d3:e8:8a:ef:5b:be:
         98:a6:37:85:8b:3b:ad:5c:df:f0:a6:1b:57:41:df:d8:71:5b:
         14:18:97:6e:e8:a5:27:87:2f:8f:a8:9d:be:0d:82:22:cd:91:
         e2:4d:5f:5c:af:0c:56:9c:26:07:e2:3e:bf:32:19:e2:57:ba:
         67:29:60:86:b8:0c:67:72:d0:c3:db:d4:76:bd:22:bd:fb:4e:
         ae:81:cc:df:a3:e1:25:99:04:1c:b0:8c:44:8f:9d:c8:4d:fb:
         e0:b7:aa:1a:45:7d:e2:16:78:3e:d1:fe:1a:22:42:49:cc:ac:
         c6:7f:b3:27:60:93:a5:df:cf:47:f6:8b:92:73:61:93:7a:7f:
         af:b1:fe:ba:21:be:db:ff:1d:5d:6a:31:a7:11:fa:4b:3c:9f:
         67:17:5c:5b:a1:eb:0f:99:c0:f1:a9:fe:85:80:42:1e:e2:95:
         48:81:f7:b1:fa:f4:95:b2:ae:fd:5d:5d:8d:eb:4c:2b:bd:54:
         34:79:4a:bf:5e:1e:ff:41:ef:d7:61:5d:f2:65:c4:d6:dd:ec:
         53:d9:45:54:b8:06:4f:59:75:1b:24:30:d2:04:21:be:61:f1:
         de:5a:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:08 2026 by rpki-client