Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/9E5F4D0060E111EEBD81AD43C4F9AE02.roa
File:                     9E5F4D0060E111EEBD81AD43C4F9AE02.roa (raw, json)
Hash identifier:          G6A60uvoHVClKs0IVvwlJ3DuRbSPI/5L5sKr/MESlgo=
Subject key identifier:   CD:44:92:DC:9E:C1:95:A7:39:73:B2:A5:F8:91:3A:28:7D:E0:C2:14
Certificate issuer:       /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
Certificate serial:       0205
Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/9E5F4D0060E111EEBD81AD43C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:36:39 +0000
ROA not before:           Mon 05 May 2025 03:09:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151066
IP address blocks:        103.129.124.0/23 maxlen: 23
                          103.129.124.0/24 maxlen: 24
                          103.129.125.0/24 maxlen: 24
                          2001:df2:3b40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl
                          rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
        Validity
            Not Before: May  5 03:09:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3de77-36f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:c4:43:52:ff:0d:1c:cf:1f:7e:8f:a0:ed:
                    71:44:7a:01:1f:86:db:5b:13:08:21:1b:e3:27:09:
                    68:f5:7d:f4:67:be:cf:6e:f9:24:55:1b:2c:42:69:
                    23:44:bd:b7:2c:5e:24:4f:24:57:65:51:c8:fa:11:
                    1c:3c:0a:6e:86:27:9e:8e:69:12:28:05:1f:12:ac:
                    26:7d:8f:e5:41:b5:a1:35:e8:6d:f7:40:33:00:75:
                    1c:d1:a4:0c:97:61:af:bb:93:c5:56:25:ec:84:b5:
                    ab:02:8e:11:6d:e1:60:83:ff:3a:c6:05:79:ad:ce:
                    45:44:4f:4c:ec:9a:1f:0c:be:d9:ce:2a:f1:1a:05:
                    98:97:15:04:45:c5:45:63:cc:32:7f:5f:ae:83:a5:
                    cb:f0:af:ea:e7:8b:c7:91:c1:b2:96:e8:ef:f5:9f:
                    1c:30:6c:aa:6a:c2:76:01:47:f3:08:0d:34:e3:81:
                    4a:01:41:ea:a4:6e:84:dc:b7:d3:df:11:32:d1:c2:
                    50:9b:25:58:39:46:49:b8:a1:c4:1a:dd:47:11:87:
                    e8:3d:20:7a:bc:22:17:76:41:b3:95:36:d8:24:f6:
                    a1:48:a4:bf:06:0c:bd:bd:56:1b:de:40:14:12:4b:
                    a2:6b:1e:d7:3a:d1:1b:a4:fd:fe:4a:d4:70:57:69:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:44:92:DC:9E:C1:95:A7:39:73:B2:A5:F8:91:3A:28:7D:E0:C2:14
            X509v3 Authority Key Identifier:
                keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/9E5F4D0060E111EEBD81AD43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.124.0/23
                IPv6:
                  2001:df2:3b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:3c:22:62:ab:14:01:9b:6a:5d:2f:5f:0e:74:d2:56:b7:
         8c:6a:41:ac:8f:3e:0e:32:3a:0c:fb:b9:f2:05:88:2a:ed:05:
         26:13:4f:eb:9d:4d:2e:0e:00:1f:8e:36:1a:94:5d:d6:e3:5f:
         8f:6d:76:24:04:90:9b:c9:3d:07:33:d7:d3:12:e4:8c:6e:9b:
         65:54:c6:35:f0:cf:f4:b6:82:2e:5e:4a:53:16:b7:98:92:c1:
         17:91:3e:6e:bc:91:22:0e:75:59:af:f8:1a:4e:1a:ce:55:1a:
         b5:45:52:1f:21:c8:37:77:4b:52:41:12:5b:83:4b:97:87:10:
         49:6e:f0:ea:33:dd:e9:f0:95:48:b4:f3:4f:75:8a:9b:f9:c8:
         35:ae:a3:33:2d:e5:1e:95:6a:d4:f8:76:41:f2:0d:ca:3a:2f:
         77:eb:19:05:ff:62:c4:e7:cb:20:7c:95:d1:2d:43:07:ac:4e:
         23:f4:6f:79:35:db:bc:14:45:04:8c:96:d1:5b:9d:d3:46:cc:
         34:ab:77:24:e6:c4:f7:4b:a0:a5:83:36:48:0a:d3:9e:c5:7a:
         27:ef:b5:22:6a:eb:47:80:c4:c8:f2:04:80:be:42:59:9f:67:
         5d:5b:07:ab:c0:95:b8:89:b4:0a:96:89:38:52:7b:6a:46:38:
         7a:f6:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:00 2026 by rpki-client