Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/880B53F493C611F093DD4E26C4F9AE02.roa
File:                     880B53F493C611F093DD4E26C4F9AE02.roa (raw, json)
Hash identifier:          E7fRSEBOLv1Ini1ZezJ3o4e+j0VIouEQB2U+Yt1JiHk=
Subject key identifier:   00:A8:E4:1B:B5:FF:28:2C:50:AA:25:B0:A9:22:BB:18:BC:10:B8:5D
Certificate issuer:       /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial:       036A
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/880B53F493C611F093DD4E26C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:37:21 +0000
ROA not before:           Wed 17 Sep 2025 13:05:57 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139646
IP address blocks:        103.40.8.0/22 maxlen: 24
                          103.180.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
        Validity
            Not Before: Sep 17 13:05:57 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47951-146e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:4f:66:89:8d:0d:12:a3:a7:5b:3a:44:88:
                    fd:61:2f:e3:59:bf:a7:bf:61:39:4a:4c:04:3e:8d:
                    dc:ed:24:30:01:64:e7:41:dd:78:37:a9:27:9e:28:
                    2c:a6:89:41:a6:83:6a:23:89:0d:1a:b7:7c:17:71:
                    37:2f:b0:01:19:de:5a:15:d1:ba:c9:60:0f:90:3d:
                    c9:16:98:62:7f:9d:76:cf:6a:e8:fe:90:2e:0c:60:
                    08:5f:2f:f8:c3:44:6e:4a:97:80:6e:85:f0:75:73:
                    ef:a7:8f:33:72:b6:22:28:c0:d8:17:6c:77:b6:16:
                    8d:d0:7b:48:d1:5a:32:2e:4f:a3:d3:eb:c8:9c:ed:
                    af:e6:0b:3b:c8:5f:35:84:3d:06:fb:fb:64:2f:b1:
                    16:c3:aa:7f:e1:f7:8b:f9:5c:90:45:c9:cc:f8:4f:
                    63:90:28:3d:83:d9:86:9f:05:67:a3:e0:a5:77:ea:
                    40:dd:6e:56:1d:57:0f:d8:8b:58:0a:05:28:62:45:
                    48:86:93:cc:6b:3a:d1:e5:66:56:06:22:0c:b9:ec:
                    e6:46:f6:86:77:1a:d0:3e:cd:c6:23:99:63:1a:22:
                    76:73:b6:f6:1e:11:cf:22:c9:97:24:a9:fb:dc:43:
                    56:ae:41:e8:0d:05:12:3b:40:95:af:c3:38:0a:56:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A8:E4:1B:B5:FF:28:2C:50:AA:25:B0:A9:22:BB:18:BC:10:B8:5D
            X509v3 Authority Key Identifier:
                keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/880B53F493C611F093DD4E26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.8.0/22
                  103.180.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:6a:2d:ca:97:40:68:96:cd:6d:d0:84:a2:16:c3:8f:f5:44:
         ac:15:4b:16:b4:62:c9:f8:ec:73:40:f1:bc:bf:32:24:33:a7:
         dd:9a:7e:2b:f2:09:fb:6b:43:1b:60:cd:83:55:de:b2:e5:86:
         99:3b:2c:1c:7f:cc:ba:e4:fc:45:a0:82:f7:c4:5a:c6:df:52:
         6a:39:16:17:4b:33:ac:69:7a:48:f4:1b:41:c3:b0:24:0c:06:
         2a:f2:a4:7e:d1:0d:56:c2:18:44:b1:ce:97:03:a0:1b:25:5f:
         12:12:b5:1e:f6:7b:06:a8:16:85:a4:f7:4e:dd:f0:94:12:a5:
         c1:ad:82:72:e4:85:b0:8c:20:8d:1c:5d:4b:5c:4d:4c:34:32:
         ad:a9:65:ce:87:e5:83:40:f4:a3:5a:ff:00:73:da:69:70:4d:
         de:78:89:29:c9:e9:48:73:23:b4:01:aa:aa:cb:78:98:55:04:
         c9:ca:b3:a3:c2:3d:17:22:f4:7b:f9:ca:91:ad:59:7a:b3:38:
         8c:81:c6:5a:53:cc:42:18:c9:76:5e:16:1b:3a:92:d0:c1:3b:
         ba:b1:11:21:44:44:13:f7:e4:83:1b:89:83:7e:bd:79:a5:1f:
         63:fd:4c:72:95:5b:6d:e1:a6:d3:33:77:06:61:68:96:33:b0:
         79:3e:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:12 2026 by rpki-client