Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/C9FDEC12E82411EE81065223C4F9AE02.roa
File:                     C9FDEC12E82411EE81065223C4F9AE02.roa (raw, json)
Hash identifier:          6NTho7fCZ0RCJplWa2uFjJlS3TpkgTf4y4zdBtALNSM=
Subject key identifier:   AA:DF:1E:84:91:99:69:42:D6:68:C1:7B:C5:0F:6D:49:88:05:FE:A2
Certificate issuer:       /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial:       017B
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/C9FDEC12E82411EE81065223C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:28:51 +0000
ROA not before:           Wed 03 Sep 2025 05:54:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        103.142.246.0/24 maxlen: 24
                          103.142.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
        Validity
            Not Before: Sep  3 05:54:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a59ea3-707f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:5b:a1:b1:3c:08:c2:17:d5:7c:71:cd:9e:
                    f2:71:cc:aa:bd:41:19:f5:0c:ac:3e:f7:99:a6:e3:
                    e9:37:d5:95:9f:53:11:18:28:cf:09:eb:be:64:7a:
                    a9:5e:63:14:6d:83:60:b6:8b:94:09:b2:2a:6d:f6:
                    29:d4:0e:c1:e1:18:7d:2d:06:93:6c:2a:9a:c3:db:
                    33:f2:54:b0:d9:c9:14:f1:3b:1e:84:c4:87:50:ea:
                    83:91:37:67:09:15:56:90:c6:4c:d9:fa:ea:4f:9e:
                    b4:fe:8a:58:96:1d:53:74:99:11:9f:20:12:31:5c:
                    eb:18:93:d9:d9:ec:86:7d:6b:41:36:59:d6:83:e4:
                    50:5b:ff:82:cc:51:5a:4a:64:12:54:1c:f3:c2:f3:
                    a4:8e:6a:c1:e8:22:a3:5f:28:45:8a:c4:4a:55:30:
                    17:cd:20:a4:75:64:73:37:29:ed:c5:1b:6c:1c:6e:
                    e4:b0:1b:25:36:37:a1:c6:1b:f7:41:df:29:9a:8a:
                    a4:44:8b:d9:1c:8a:e6:ab:df:39:a6:d1:26:3d:28:
                    56:90:fc:30:ff:86:7d:b9:7c:27:de:b9:24:5a:9d:
                    dc:26:a4:86:d3:95:e3:23:55:be:a6:83:54:bd:15:
                    2d:58:17:ed:5b:6f:6c:9f:f6:0f:37:46:16:f0:23:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:1E:84:91:99:69:42:D6:68:C1:7B:C5:0F:6D:49:88:05:FE:A2
            X509v3 Authority Key Identifier:
                keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/C9FDEC12E82411EE81065223C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:fb:7f:81:2f:8d:4f:e8:9f:f4:d3:28:1d:f6:0d:fa:cb:
         19:13:8d:b9:55:db:ce:81:cd:3a:46:73:60:89:c3:99:47:d3:
         bb:e3:cd:3b:be:3b:8f:c8:53:96:cf:cb:ee:b9:6e:1d:e3:20:
         20:c4:93:1b:f5:4a:0b:22:3e:7a:01:6c:ae:d3:23:b2:fb:06:
         66:bf:5e:fd:c0:c4:4d:8a:3d:8d:ed:8c:68:84:1d:7c:4a:3d:
         a9:61:b4:eb:c0:78:e9:b4:bd:f8:d6:57:9f:f9:e7:ee:69:26:
         93:18:19:18:bd:29:f5:c1:20:6a:76:0c:53:f1:93:a2:8a:f0:
         3d:fb:3c:ee:37:a1:d7:06:36:67:f2:33:df:bf:fd:96:cf:80:
         66:c6:62:8f:31:24:5e:e0:60:21:01:1f:a4:61:1a:30:1b:25:
         7b:a4:17:07:01:b7:66:fc:8b:0b:03:ed:c3:ac:7d:b3:27:52:
         00:8b:6d:4e:55:87:f2:bd:bc:6e:db:e2:55:0e:52:55:31:e8:
         e4:75:3d:f7:40:ef:f8:5d:44:27:e3:85:ba:65:95:be:f6:4d:
         3e:97:91:f8:a6:f4:61:61:5c:1d:70:63:e0:95:d9:37:e9:74:
         5d:f2:51:b9:38:db:4f:b7:00:50:ee:49:56:3b:b2:c1:6c:3d:
         31:55:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:05 2026 by rpki-client