Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/20DAF9FA384011EBA5FE7359C4F9AE02.roa
File:                     20DAF9FA384011EBA5FE7359C4F9AE02.roa (raw, json)
Hash identifier:          Ks3Ff+1fc1xA8f+Ru019dMWM8mphZQwD7whUQ8DiE6M=
Subject key identifier:   E8:78:EC:73:E7:0F:78:2A:EA:57:D9:76:B5:31:7B:45:B4:1D:3A:33
Certificate issuer:       /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
Certificate serial:       081D
Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/20DAF9FA384011EBA5FE7359C4F9AE02.roa
Signing time:             Fri 18 Sep 2026 21:41:36 +0000
ROA not before:           Fri 18 Sep 2026 21:41:36 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     141240
IP address blocks:        103.157.34.0/24 maxlen: 24
                          2001:df5:e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl
                          rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 21:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196492, serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
        Validity
            Not Before: Sep 18 21:41:36 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aadb010-341f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:c5:58:53:23:ed:99:3b:f9:13:3a:1a:c1:
                    bf:99:a1:c7:80:a3:bb:9d:9c:fa:a5:e0:af:00:42:
                    04:cb:b6:b7:fe:c1:73:bf:80:16:4f:e9:4c:0f:23:
                    e0:64:5c:be:f3:4e:cd:ad:aa:23:0e:bd:d9:f1:d0:
                    c3:be:ac:a8:03:3f:06:5e:4c:13:16:bd:39:53:34:
                    dd:15:91:68:da:3d:5e:fc:29:c3:b2:c1:b0:d2:b3:
                    f2:dd:df:cc:42:80:c1:f2:3a:55:6a:4b:11:e6:a1:
                    d7:91:95:57:03:16:44:69:2e:90:82:87:80:2b:68:
                    d2:58:42:ab:68:53:b2:e3:8d:90:1a:cc:25:2c:cb:
                    13:e5:d6:2c:a5:7b:1f:67:49:8b:db:5b:87:ca:23:
                    c1:64:2b:bc:f9:5f:52:17:14:fc:03:f8:3c:c9:74:
                    a1:8e:7f:b0:08:d1:f9:c6:01:cd:5b:21:f7:97:e3:
                    c4:b8:ea:b6:c3:34:22:2c:89:1e:82:71:b5:c4:44:
                    a2:38:6e:f5:66:17:10:d9:c4:21:db:b3:2c:bf:e4:
                    b7:8f:b4:0c:8e:75:94:51:9c:85:ad:f1:3c:2f:b2:
                    c7:8c:7c:37:f7:8d:d5:f1:89:b0:67:f1:12:de:45:
                    6f:69:ac:e2:59:8b:cf:37:36:81:30:6b:1e:a0:d9:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:78:EC:73:E7:0F:78:2A:EA:57:D9:76:B5:31:7B:45:B4:1D:3A:33
            X509v3 Authority Key Identifier:
                keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/20DAF9FA384011EBA5FE7359C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.34.0/24
                IPv6:
                  2001:df5:e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:db:dd:17:3d:20:a1:d1:75:ac:22:80:56:d0:89:53:79:54:
         3a:a0:59:b5:c2:27:54:07:09:fc:d0:22:73:56:c1:8a:b5:93:
         60:7d:22:7b:84:0d:fa:f1:1f:46:8d:2c:d8:a5:ee:84:5b:dd:
         19:de:af:3f:e7:0e:49:94:fc:16:07:33:54:5f:75:d2:3d:f1:
         3c:f7:c7:5a:98:66:8d:9c:b9:94:68:87:fb:d7:9d:ac:54:ce:
         5f:d2:fe:af:b3:7e:fc:f6:c0:d8:13:5c:c6:77:a2:41:f3:76:
         5a:6f:c1:a9:92:0f:07:37:a0:85:c0:48:34:39:8e:f8:a4:ea:
         6a:c2:45:30:59:18:8b:8e:6c:c7:fa:34:94:bd:e6:86:d6:0b:
         b9:6c:c9:a2:50:d8:94:10:d4:2f:01:05:4c:36:99:9c:7c:c7:
         0e:9d:d5:fb:2a:db:6b:59:5f:e1:16:f4:01:9f:25:7d:2c:ca:
         8b:7f:b6:1d:33:45:3e:2a:b2:02:8f:bf:9a:e2:d6:09:1b:22:
         d9:3f:4d:1c:ad:57:b2:6c:2a:1f:79:0d:dc:0b:88:65:08:48:
         a4:e4:c5:ed:d0:4a:cd:b5:7f:c2:fc:e3:55:9b:83:56:6b:13:
         2d:64:a9:fb:16:06:44:99:98:a1:eb:40:10:45:b3:25:f4:90:
         3f:98:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:14:49 2026 by rpki-client