Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/B62F5378265811F1B0D864DEA4833773.roa
File:                     B62F5378265811F1B0D864DEA4833773.roa (raw, json)
Hash identifier:          d4qXqs0vf21uAmTHlb0izdYCuuZAXvGPzrYKUZpwbxw=
Subject key identifier:   A5:93:B0:E2:29:43:D2:DC:1E:B8:D7:B9:A4:95:B2:EE:2D:B5:FE:A3
Certificate issuer:       /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Certificate serial:       02
Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/B62F5378265811F1B0D864DEA4833773.roa
Signing time:             Mon 23 Mar 2026 01:36:28 +0000
ROA not before:           Mon 23 Mar 2026 01:36:28 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9268
IP address blocks:        103.153.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
        Validity
            Not Before: Mar 23 01:36:28 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69c0991c-1c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c7:ae:9b:92:af:a2:20:e5:be:24:1f:d2:1f:
                    df:26:b9:a6:39:7a:9a:88:0b:3a:92:bf:e7:26:8c:
                    b5:92:28:39:3b:12:a5:5b:32:c5:95:bb:f3:c5:2f:
                    fb:51:39:f6:11:99:e9:f4:56:a9:1c:84:6d:4d:3d:
                    14:73:7f:fd:11:14:ed:a9:3a:3e:94:2c:65:41:6d:
                    9a:f9:b1:18:76:ce:35:10:71:a8:64:a8:a1:e1:45:
                    f8:7b:ad:ab:7c:f3:00:eb:0a:7b:62:91:f3:54:9b:
                    ed:41:35:a4:ef:65:30:05:f4:89:f2:3f:b7:89:e4:
                    7f:00:f4:0f:b0:0b:4b:e2:46:54:4c:76:e1:50:3a:
                    a0:8c:85:3d:a2:d1:ff:42:19:18:ff:50:b6:68:02:
                    3b:08:fe:91:38:df:49:ef:9f:e5:df:5e:c1:1b:87:
                    21:51:2d:8d:9d:ee:89:60:ff:55:24:95:f6:47:59:
                    5d:a9:e8:b3:fe:75:68:df:46:0f:de:8e:c8:be:3c:
                    4c:88:79:b8:54:5c:eb:fd:cd:b7:b6:07:95:cf:ea:
                    be:c4:71:91:16:da:10:a7:5f:e5:11:a6:ab:50:ce:
                    b7:8a:db:3f:42:3c:ab:2f:86:08:84:75:ae:e7:16:
                    72:bf:ff:be:1b:37:28:fb:94:97:bb:e1:41:22:20:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:93:B0:E2:29:43:D2:DC:1E:B8:D7:B9:A4:95:B2:EE:2D:B5:FE:A3
            X509v3 Authority Key Identifier:
                keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/B62F5378265811F1B0D864DEA4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:75:c6:23:72:d4:c4:0d:d0:b3:cc:e8:77:22:7c:12:50:a6:
         9d:e5:6d:1c:60:b5:d9:29:b9:a1:47:aa:61:bc:c7:8a:a4:e1:
         c0:1c:a6:28:95:1b:8c:0a:e5:63:9f:27:9e:9b:f3:e5:69:a0:
         90:3d:84:85:f4:d2:c5:5a:50:5f:9b:44:96:92:0c:d3:aa:7f:
         5c:b4:37:a6:cd:a4:e9:31:f2:2a:d7:1f:e4:db:b6:76:1b:00:
         a3:77:26:43:98:4f:70:27:d9:58:1c:f9:fe:06:35:62:40:23:
         0e:ce:40:56:bc:8b:2c:4c:cd:ec:5e:ff:73:42:97:4e:20:26:
         ad:19:fc:1d:cd:d4:0e:3f:a6:9d:f8:46:be:ab:8a:61:3e:58:
         44:b5:ed:dd:52:ce:3d:fc:e4:13:e2:59:c1:79:7b:31:bb:c9:
         f3:f4:cc:f1:c7:f9:1d:cf:17:3f:71:6b:11:43:84:d1:75:80:
         ee:49:45:54:3b:87:6c:08:00:c7:31:82:8d:29:3f:8f:05:0d:
         f2:cb:d5:0f:63:8e:0a:d4:10:7b:15:f7:fa:0a:da:5b:1d:54:
         97:c6:68:c6:fa:66:5f:b4:61:0a:20:a0:02:27:d3:17:eb:ac:
         3d:53:e0:68:96:48:4b:13:cf:7e:da:aa:29:fe:56:bf:d8:8a:
         a1:d0:73:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:40:51 2026 by rpki-client