Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/6923942E252711EF948A5E18C4F9AE02.roa
File:                     6923942E252711EF948A5E18C4F9AE02.roa (raw, json)
Hash identifier:          O1muA/0EJVSd9L8bh/HkeYxU93aOIw8GOb3fRQGF3F0=
Subject key identifier:   3E:00:A7:F6:1F:31:47:DE:70:DE:14:88:0C:B7:F8:01:EB:E0:6C:1B
Certificate issuer:       /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Certificate serial:       015F
Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/6923942E252711EF948A5E18C4F9AE02.roa
Signing time:             Sat 07 Mar 2026 04:41:09 +0000
ROA not before:           Sat 07 Mar 2026 04:41:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     45152
IP address blocks:        103.210.148.0/22 maxlen: 22
                          103.210.148.0/24 maxlen: 24
                          103.210.149.0/24 maxlen: 24
                          103.210.150.0/24 maxlen: 24
                          103.210.151.0/24 maxlen: 24
                          119.252.184.0/22 maxlen: 22
                          119.252.184.0/24 maxlen: 24
                          119.252.185.0/24 maxlen: 24
                          119.252.186.0/24 maxlen: 24
                          119.252.187.0/24 maxlen: 24
                          119.252.188.0/24 maxlen: 24
                          139.5.52.0/22 maxlen: 22
                          139.5.52.0/24 maxlen: 24
                          139.5.53.0/24 maxlen: 24
                          139.5.54.0/24 maxlen: 24
                          139.5.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
                          rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
        Validity
            Not Before: Mar  7 04:41:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69abac65-6014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:91:fa:93:17:8f:b1:0e:2e:7a:20:fa:1e:3b:
                    f2:c2:c1:10:e6:ea:e8:d6:cc:53:39:2a:e1:10:62:
                    d6:4e:a9:b3:0f:a3:dd:ff:60:20:d7:80:29:23:d8:
                    0a:da:3a:4b:f8:47:2a:4d:a4:1d:61:fa:dd:e7:6e:
                    a8:a1:de:1d:bd:04:c6:14:cf:63:d0:20:c5:2b:d3:
                    2a:df:7d:d8:2c:b0:57:06:00:86:90:81:3b:3d:90:
                    b6:ef:50:fb:5d:ef:3e:65:cc:ff:31:6e:5f:f1:03:
                    f1:c5:cf:5d:29:22:72:d6:c3:e5:b3:74:d8:ee:25:
                    50:78:1c:a4:35:65:43:34:fd:66:78:78:b7:25:5d:
                    37:7b:f8:7d:de:fd:25:56:f4:c0:6f:9e:2d:a3:bc:
                    18:5b:ec:56:63:71:c4:63:67:4f:cd:f1:66:d9:44:
                    82:bb:79:fa:e0:6f:6e:73:83:47:be:db:c6:44:c8:
                    51:5d:32:64:4d:0a:a7:d0:2f:aa:95:e0:7a:38:36:
                    41:ea:02:0a:74:bc:81:fc:3e:12:e8:37:ad:e9:27:
                    ba:38:71:83:29:1a:a4:77:60:6e:f6:3d:36:4e:df:
                    e6:c3:aa:a1:b6:5b:07:1e:b7:db:18:99:fe:75:03:
                    ca:f3:53:0e:d9:52:5f:e9:f8:5c:ba:be:8f:d9:e9:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:00:A7:F6:1F:31:47:DE:70:DE:14:88:0C:B7:F8:01:EB:E0:6C:1B
            X509v3 Authority Key Identifier:
                keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/6923942E252711EF948A5E18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.148.0/22
                  119.252.184.0-119.252.188.255
                  139.5.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:79:33:08:b7:9a:c3:93:ad:99:e7:7f:29:d4:43:35:a1:
         06:7d:b5:20:86:40:6e:d6:c7:26:00:65:15:3b:cb:34:e4:7e:
         68:0f:7d:9b:97:e8:08:4e:1d:3d:57:0d:0f:7c:1c:23:3d:36:
         16:1b:30:94:74:8f:b6:a2:15:48:b5:de:2a:72:51:52:a6:8e:
         e1:c7:fb:ea:cf:e4:de:04:4f:43:f7:8c:87:6d:c9:67:9a:d0:
         52:c1:50:a6:46:0c:a6:26:53:c8:e6:db:df:eb:01:90:a0:6d:
         40:a4:62:4c:af:2d:d7:5e:43:c5:a5:2c:d8:f0:df:52:5b:ee:
         05:b1:40:97:9b:f7:72:1a:82:37:21:6a:47:4e:72:9c:8d:8c:
         80:61:3d:51:c3:d9:38:47:1a:57:14:0c:2e:13:d5:19:b1:0b:
         ee:7f:1c:b8:ca:f6:20:5a:57:13:54:44:db:23:be:b4:af:26:
         c9:75:c1:14:83:0c:52:dd:e4:55:c4:e1:b7:70:fa:e7:00:e5:
         36:00:6c:6d:2e:c1:f8:31:56:c1:37:09:d0:b5:d3:8c:56:c7:
         65:02:1b:0e:94:10:99:bf:2b:79:45:b6:4a:1b:0b:73:1f:83:
         e0:cc:a1:54:0b:cb:70:2f:77:50:4f:76:59:4f:a6:ae:d2:03:
         aa:34:70:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:23 2026 by rpki-client