Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/50548100855311EBBAE75616C4F9AE02.roa
File:                     50548100855311EBBAE75616C4F9AE02.roa (raw, json)
Hash identifier:          muid8eFslCMAjv8X0l++SzQZi7k4UuMJzpvWLNPLVqI=
Subject key identifier:   47:29:E7:DD:A1:87:E7:36:E9:F3:00:39:26:4A:50:52:3F:FD:46:43
Certificate issuer:       /CN=A9168939/serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
Certificate serial:       06F8
Authority key identifier: 7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/50548100855311EBBAE75616C4F9AE02.roa
Signing time:             Tue 10 Mar 2026 22:28:55 +0000
ROA not before:           Tue 10 Mar 2026 22:28:55 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     139583
IP address blocks:        103.136.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl
                          rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784 (0x6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168939, serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
        Validity
            Not Before: Mar 10 22:28:55 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b09b27-6bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:e3:45:b0:fb:86:86:a2:dc:e9:0d:f3:d8:
                    54:11:af:72:2c:2f:79:01:30:d5:b1:69:72:9b:01:
                    24:ed:7f:c6:5f:b4:f2:e2:a5:0e:e7:81:e7:cb:04:
                    3a:1f:37:62:09:41:98:ab:63:90:e1:cf:6d:0d:bf:
                    68:ff:32:d9:c1:db:a4:30:31:a5:9a:87:6c:58:43:
                    8d:cb:a8:87:1f:d4:e4:29:9d:11:d9:9b:7f:83:61:
                    e9:1f:70:ea:41:ab:49:10:aa:fc:7e:fe:59:55:eb:
                    b2:2b:fd:5a:21:38:d3:8b:60:5d:ee:f4:10:cf:60:
                    49:53:69:66:dc:da:13:2d:fe:4a:dc:ca:57:70:0a:
                    1a:55:73:eb:8c:bd:c0:6f:ce:85:6e:31:a0:06:01:
                    e4:c5:f2:87:c3:7a:a3:66:15:b6:ee:7b:52:80:58:
                    25:64:d2:37:0e:f6:03:19:9f:51:3f:29:7a:a9:67:
                    88:dd:d1:3b:5c:41:3f:b7:4a:78:c5:dd:9f:0e:d0:
                    4b:2b:ef:a9:97:77:d7:7c:63:90:42:15:39:b7:11:
                    8c:07:58:08:72:b9:c5:01:11:11:f1:dd:9d:1d:62:
                    e7:ce:ab:2d:b5:94:28:18:60:5d:8a:ed:a1:f3:d8:
                    fd:24:79:ce:90:29:8c:c2:fe:33:f0:1a:18:a9:ae:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:E7:DD:A1:87:E7:36:E9:F3:00:39:26:4A:50:52:3F:FD:46:43
            X509v3 Authority Key Identifier:
                keyid:7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/50548100855311EBBAE75616C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:af:9f:b8:1a:88:7a:e0:6c:90:de:df:79:85:98:d2:bd:cb:
         47:17:e8:fa:3d:06:25:0d:b5:53:05:7b:b8:5a:b7:b5:fd:1a:
         1e:61:11:ce:97:96:96:9f:a3:e6:b0:69:c2:e6:6f:c7:53:2a:
         0a:c9:be:58:91:ae:8d:7a:0e:23:56:63:64:16:89:a7:1d:05:
         c2:7f:0f:32:95:08:cf:09:15:b6:1a:93:31:85:f7:f4:b8:c3:
         79:57:86:3d:f4:9a:72:99:a3:4e:cd:56:1b:90:7f:f0:89:02:
         cb:79:72:e4:c5:69:ae:3e:4a:63:33:ae:19:67:e1:fb:a8:f2:
         31:67:34:2d:6d:56:71:55:aa:ea:65:1f:46:e9:39:50:50:9e:
         aa:c5:a2:71:a8:ad:ff:43:bd:69:b5:15:35:2f:c6:bd:ed:d7:
         4a:d1:97:1a:69:9c:e0:d2:07:35:08:9a:c2:fa:4e:93:68:8d:
         6c:19:80:f3:ac:65:ca:22:14:0b:67:2c:cc:94:2e:cf:dc:69:
         88:5a:da:5a:7e:49:f0:09:01:aa:4a:a6:b0:ef:c6:d2:ad:bd:
         60:87:18:4c:eb:c0:db:b9:d4:eb:45:55:b2:1e:dc:b4:4c:29:
         8e:c4:16:df:1a:9c:77:1b:c9:61:89:ad:18:3c:ac:b6:b2:5f:
         01:40:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:49:13 2026 by rpki-client