Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/A71C98C4B00411F184AE3FF86611F970.roa
File:                     A71C98C4B00411F184AE3FF86611F970.roa (raw, json)
Hash identifier:          0qf+ZPszaZ90AY479kx3fJzerzO61Sj4OArotXEpOV8=
Subject key identifier:   F4:A5:D8:40:F5:A8:8D:E5:B0:36:07:ED:02:7C:E4:64:A9:28:AD:B6
Certificate issuer:       /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
Certificate serial:       0D40
Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/A71C98C4B00411F184AE3FF86611F970.roa
Signing time:             Mon 14 Sep 2026 18:36:19 +0000
ROA not before:           Mon 14 Sep 2026 18:36:19 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132366
IP address blocks:        103.121.104.0/24 maxlen: 24
                          103.121.106.0/24 maxlen: 24
                          103.121.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl
                          rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3392 (0xd40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C451, serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
        Validity
            Not Before: Sep 14 18:36:19 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa83ea3-b7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:fd:80:5d:b4:90:15:ca:92:1c:c1:84:ac:
                    80:49:33:b0:27:6a:f6:be:fe:a4:bc:87:56:dd:d4:
                    d0:b5:3e:00:57:95:72:60:8d:bb:82:f5:5c:77:c7:
                    4a:f2:08:eb:1e:1e:7f:a7:7b:26:1f:ea:a5:cc:3f:
                    9e:03:21:30:6c:7c:20:4c:f3:1e:72:81:72:0e:de:
                    f6:46:84:32:31:5c:39:7d:9c:94:ae:06:68:2b:f4:
                    97:ab:40:5d:a5:56:6f:a7:47:b0:0b:0b:92:3b:65:
                    89:1e:af:a8:32:98:73:90:65:9c:59:40:ec:f9:b1:
                    19:7a:ad:0c:fa:95:e3:fa:16:94:40:c1:29:0f:2e:
                    c9:01:c5:ea:02:09:ec:33:7d:76:b5:31:3b:96:59:
                    29:87:39:bf:00:6d:e1:ac:52:52:08:2d:52:50:30:
                    3a:3e:30:0b:aa:b3:0f:28:f7:52:13:3d:2b:28:d2:
                    b6:1d:7c:bc:76:b3:3b:27:7f:a5:5b:28:ce:d0:62:
                    35:54:a4:55:59:10:bd:40:52:e4:c5:ae:f3:ce:00:
                    be:09:1d:ee:40:f6:2c:2a:25:fa:5a:0f:ac:cd:af:
                    e1:f5:31:52:0f:a3:1c:0c:99:7e:b9:14:4c:90:c4:
                    7f:04:74:98:68:f8:8e:a1:66:ab:29:34:c7:dd:1f:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A5:D8:40:F5:A8:8D:E5:B0:36:07:ED:02:7C:E4:64:A9:28:AD:B6
            X509v3 Authority Key Identifier:
                keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/A71C98C4B00411F184AE3FF86611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.104.0/24
                  103.121.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:27:83:2c:e6:ab:78:b7:9f:bd:cc:5c:b4:1f:47:02:46:84:
         b9:11:a4:8d:22:56:0d:d7:d6:1e:44:e2:b0:c9:7c:1b:42:a2:
         13:30:66:9b:ef:7f:56:7d:db:85:23:9e:82:02:69:0c:cd:73:
         5a:63:b4:97:b7:a6:d4:37:11:cc:f4:fd:5d:64:b0:f8:40:88:
         44:e0:2f:c5:11:fa:ed:19:88:24:c2:46:f2:9a:62:d4:6c:98:
         17:6f:54:09:c4:5e:6a:d2:ae:91:52:8f:22:60:98:84:38:e8:
         41:39:27:2d:d9:31:0b:f2:16:f7:27:da:ac:dc:87:d8:c0:67:
         0c:2b:4a:fd:1c:d7:a4:a2:d2:49:d8:61:36:70:a4:6a:7a:d7:
         e3:57:1e:e0:21:d3:22:67:86:d3:bf:6f:91:f7:ad:b0:b9:8c:
         b4:0e:d3:ea:3e:3e:9f:22:2f:43:2e:75:85:8b:a3:0a:e8:ad:
         3d:6a:3a:fd:68:06:3b:d1:e5:a2:67:97:37:d6:87:4e:62:78:
         a9:f6:2a:54:68:cf:61:c8:d6:61:56:54:5c:68:0c:a1:d5:36:
         fb:11:a8:89:02:2a:07:ef:b4:47:9a:c2:c1:e5:e6:d7:33:73:
         41:6a:b9:33:9e:e2:86:80:1a:ff:52:94:33:66:97:e1:dd:9a:
         ff:b4:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:48:20 2026 by rpki-client