Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/9839F630765111EDA744AE3AC4F9AE02.roa
File:                     9839F630765111EDA744AE3AC4F9AE02.roa (raw, json)
Hash identifier:          zTGTx7/ZH11Scl6xxtt6/6AQ3HI9XkZHLbDnCzFKfFY=
Subject key identifier:   B0:40:34:CE:2D:0C:31:C7:57:B4:86:4D:EE:7B:4A:3D:62:57:91:12
Certificate issuer:       /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
Certificate serial:       08BE
Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/9839F630765111EDA744AE3AC4F9AE02.roa
Signing time:             Tue 14 Jul 2026 19:19:20 +0000
ROA not before:           Tue 14 Jul 2026 19:19:20 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     139294
IP address blocks:        103.140.234.0/23 maxlen: 23
                          103.140.234.0/24 maxlen: 24
                          103.140.235.0/24 maxlen: 24
                          2001:df0:da80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl
                          rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
        Validity
            Not Before: Jul 14 19:19:20 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a568bb8-f049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:12:4d:f3:76:d9:16:50:36:3c:0f:37:00:
                    2a:77:28:c9:92:31:c5:34:fa:68:76:b9:77:c3:6f:
                    7c:8b:fb:bc:5a:9a:31:ee:65:ad:cc:b2:81:48:2d:
                    17:4a:ad:9e:b1:57:e8:01:0a:fc:9f:3f:c0:12:c5:
                    0f:7d:8a:e0:de:4b:14:9f:2b:e4:df:6c:3c:a6:e6:
                    94:1e:15:64:cd:0e:1c:c9:ff:1a:b0:72:69:b2:a6:
                    06:ad:44:87:70:ed:b5:78:da:71:36:af:e5:bf:ac:
                    e6:cf:fc:f6:24:29:83:c7:4a:af:e2:c3:a9:af:c5:
                    73:5d:d1:25:9d:99:18:08:b4:e3:9a:e8:53:d1:46:
                    0d:99:50:58:fc:b2:be:6b:a6:e6:64:cf:b1:59:28:
                    71:b3:e5:29:99:aa:0d:7d:c7:a1:fa:97:32:09:88:
                    2f:8f:90:de:ae:50:10:92:97:f2:a0:8b:6c:a6:88:
                    c4:53:78:d6:62:81:d2:85:d1:5a:f5:5d:7a:03:70:
                    81:6a:39:10:db:f6:48:41:b6:44:ff:c3:b5:f2:dd:
                    1e:09:80:33:b2:7b:b1:59:a7:ad:4b:28:21:ac:9a:
                    1b:f5:b8:f0:bf:6e:fe:4b:d0:ba:e0:81:c4:df:13:
                    61:08:ae:b7:9c:1d:61:34:76:13:c0:c6:be:54:43:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:40:34:CE:2D:0C:31:C7:57:B4:86:4D:EE:7B:4A:3D:62:57:91:12
            X509v3 Authority Key Identifier:
                keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/9839F630765111EDA744AE3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.234.0/23
                IPv6:
                  2001:df0:da80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:53:63:65:43:dc:51:ec:97:77:09:bd:98:c0:13:40:e0:
         fe:38:04:ca:55:3e:9b:24:b8:1a:8d:16:c5:20:81:1e:3b:f2:
         09:d3:9f:51:98:c8:f3:ec:24:55:3f:00:09:58:b3:98:c1:0c:
         05:f5:9a:1d:94:e5:65:4c:fd:38:6b:f4:cb:13:00:7d:28:a4:
         24:a0:05:c6:f0:06:c8:0e:ae:1b:e4:33:15:cd:65:a1:82:c5:
         84:94:6b:d6:48:d6:89:5f:a2:58:8b:fc:9b:53:75:20:24:86:
         96:8f:99:91:0f:f4:a1:28:0b:d7:4c:d1:cf:41:8a:60:c6:ea:
         00:dc:6e:cc:f2:96:26:56:b2:46:96:44:b0:79:41:58:b3:06:
         28:4c:a6:b5:94:0c:3c:42:30:6c:c1:8a:01:e9:d8:b7:3f:c2:
         03:8b:d6:de:14:10:d0:8b:a7:fd:92:43:9e:78:ce:42:51:58:
         a4:c6:c7:bb:1c:22:85:30:aa:3a:02:38:16:5b:72:2e:45:98:
         9c:e2:f4:2c:89:aa:83:db:59:11:9a:e0:a5:c4:ce:4e:02:83:
         98:d5:02:ca:d7:11:6d:0a:90:4e:0e:88:9e:bd:bc:86:73:b5:
         35:ad:ad:29:bc:4a:2f:a9:2f:4c:a0:fc:7b:ea:8c:f2:6a:e7:
         bc:c5:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:39 2026 by rpki-client