Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/4A6E97AC311E11EE85C30E3BC4F9AE02.roa
File:                     4A6E97AC311E11EE85C30E3BC4F9AE02.roa (raw, json)
Hash identifier:          eZZ6OFwcrcrXTZgOQDhlIiXfyLs/tMt4GT83cZsLk+s=
Subject key identifier:   5F:F7:04:60:B2:65:0B:B3:EF:71:5E:01:A7:0C:26:2F:AA:BC:BE:37
Certificate issuer:       /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial:       020A
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/4A6E97AC311E11EE85C30E3BC4F9AE02.roa
Signing time:             Sun 03 May 2026 03:34:59 +0000
ROA not before:           Sun 03 May 2026 03:34:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        103.88.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
                          rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
        Validity
            Not Before: May  3 03:34:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f6c263-9d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:dc:81:ac:92:3e:d9:80:8a:36:9d:b8:c5:
                    7d:5c:d3:43:a0:bb:10:85:9c:92:a4:02:b8:e4:ef:
                    73:3a:c5:b5:2a:e5:77:ee:ce:ee:db:62:01:e4:b6:
                    f8:62:03:c2:84:8f:dd:6e:27:d1:ed:49:df:09:99:
                    6f:35:93:5f:53:d2:1f:cd:44:d9:9a:4c:0b:6a:ff:
                    be:1d:4c:99:64:a9:df:6b:8b:ae:e0:82:0a:c4:4b:
                    b2:74:ce:9b:00:cc:34:77:67:56:98:da:61:95:74:
                    9b:ad:4b:e6:3a:a7:61:a8:28:e4:55:40:2d:b0:08:
                    c7:5c:cc:d9:09:7f:c5:11:6e:54:06:01:02:a1:ef:
                    03:2d:e3:43:32:fc:18:f9:31:bc:d9:b5:1f:48:40:
                    58:82:23:6c:1d:f2:ee:ac:39:b5:54:ca:90:aa:87:
                    27:42:5a:53:c8:65:73:cb:16:44:15:26:8f:00:aa:
                    12:69:66:c6:29:4b:fe:71:dc:20:d2:94:45:a8:ee:
                    cf:92:e0:5d:e0:19:f8:30:d9:5c:13:68:3a:65:28:
                    31:0b:ef:3f:21:7d:cc:a5:96:19:c6:93:4f:d4:ee:
                    92:84:24:b1:62:b0:6a:eb:6f:9c:24:ea:a3:33:0c:
                    0e:62:1e:80:ee:e8:5a:f0:e8:52:19:df:f9:65:e6:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F7:04:60:B2:65:0B:B3:EF:71:5E:01:A7:0C:26:2F:AA:BC:BE:37
            X509v3 Authority Key Identifier:
                keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/4A6E97AC311E11EE85C30E3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:82:ef:86:8a:1f:58:34:d3:c7:1d:43:fb:0f:12:b0:00:
         d6:47:5a:e9:0a:6c:c0:02:00:aa:bc:fe:90:fa:64:cc:83:2b:
         9b:35:1e:97:c8:f5:92:5e:e5:03:2c:db:77:0d:cf:c8:a8:8a:
         f1:15:9e:2f:61:02:35:40:7b:32:b1:a2:78:35:97:bb:aa:53:
         fc:2d:90:14:2e:ae:52:b6:6b:c7:1f:8d:0f:d9:78:01:a5:3a:
         cf:87:4d:7e:02:67:df:24:79:d6:56:a7:7d:d2:63:b4:dc:1a:
         45:7c:60:0e:81:71:cd:c7:fb:e7:30:b1:88:8b:86:26:eb:64:
         32:6b:56:8f:e4:13:43:c4:53:42:08:5a:90:3f:ab:8e:fe:48:
         15:23:e2:47:bc:9e:69:14:fa:b3:68:49:dc:7d:c0:2b:86:16:
         c6:e0:db:51:b3:58:1c:b3:5c:17:5e:b3:33:8a:0d:b4:69:57:
         37:f4:08:43:99:2e:84:63:4e:06:d0:8f:f5:a3:bc:f6:e8:52:
         75:69:0f:dc:e8:20:0e:e8:68:33:8b:5d:11:81:57:70:f4:68:
         28:ee:67:0c:02:fc:8f:a7:f5:84:60:8f:00:12:42:56:d0:37:
         1d:a9:b1:2a:41:bf:4d:1a:64:6e:dc:6a:89:c3:c7:c4:7a:23:
         c9:3f:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:12 2026 by rpki-client