Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/39E77242050B11F097AB4F3BC4F9AE02.roa
File:                     39E77242050B11F097AB4F3BC4F9AE02.roa (raw, json)
Hash identifier:          f4VDz/BlstZBW1chVIwlagvkDRoT+EHxpUDJhivw1tk=
Subject key identifier:   71:7D:63:46:55:F7:32:24:9E:D8:1E:C9:28:90:71:28:A3:30:C1:62
Certificate issuer:       /CN=A919F64F/serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
Certificate serial:       C4
Authority key identifier: F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/39E77242050B11F097AB4F3BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:24:19 +0000
ROA not before:           Thu 02 Oct 2025 21:16:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     18214
IP address blocks:        103.158.33.0/24 maxlen: 24
                          203.153.9.0/24 maxlen: 24
                          203.153.10.0/24 maxlen: 24
                          203.153.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl
                          rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F64F, serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
        Validity
            Not Before: Oct  2 21:16:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59d93-3cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:23:bc:3d:a4:04:4a:b8:dc:8a:a5:f9:52:3b:
                    03:68:a4:7c:bd:68:62:9c:63:61:71:29:5b:d3:ee:
                    79:43:a3:07:0f:84:c8:dc:50:9e:5e:39:ae:6d:fe:
                    81:6a:c8:2c:01:e7:d1:25:2d:0c:8d:45:30:cd:32:
                    6f:da:a5:64:42:7e:47:01:35:cd:42:9c:75:e3:9c:
                    e0:53:be:19:e6:97:37:2e:38:dc:e9:ba:ef:73:85:
                    19:6e:b8:46:78:64:a8:2b:09:45:e3:db:5f:9a:cb:
                    c0:5f:97:f0:d0:76:17:e6:91:32:c9:28:a4:30:ca:
                    1d:26:21:2d:f5:12:01:f4:18:1e:64:e3:4d:04:8a:
                    00:d5:7d:38:ff:31:41:8c:ed:f7:1b:7f:e3:18:33:
                    a5:b7:95:13:b2:8b:1d:b4:31:4b:da:52:51:65:db:
                    87:b9:ef:56:72:dc:7a:9c:a7:05:e5:92:75:5c:1b:
                    37:9b:c8:23:bc:a7:79:01:e1:30:19:71:d9:9a:76:
                    c5:cb:3d:8d:69:83:ce:d7:8b:a5:f2:c8:a2:08:b7:
                    07:9a:ed:85:4a:c3:14:18:87:80:63:5d:fe:86:13:
                    fa:4e:d2:21:6b:c7:9b:e4:d3:fc:d6:b0:1e:49:62:
                    3f:c9:00:6f:10:92:dd:5c:67:47:1d:3c:ba:77:82:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7D:63:46:55:F7:32:24:9E:D8:1E:C9:28:90:71:28:A3:30:C1:62
            X509v3 Authority Key Identifier:
                keyid:F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/39E77242050B11F097AB4F3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.33.0/24
                  203.153.9.0-203.153.10.255
                  203.153.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:75:07:c9:9e:94:b7:db:c7:b1:b0:89:fb:58:2c:79:8f:c2:
         7c:dd:76:c1:9b:56:81:30:3d:93:cb:d5:e4:de:4b:38:55:e3:
         74:c4:1a:89:11:88:63:dc:2c:a8:0f:fa:7f:69:62:a5:f7:21:
         8c:e8:cd:ab:7e:cc:69:fc:ec:61:b2:d6:38:07:60:ef:08:85:
         56:00:a5:c0:ee:35:91:b3:df:ef:52:3e:65:17:ac:5c:f6:71:
         2d:a9:34:b4:f9:6e:9f:f8:2a:90:3f:1f:56:34:2b:de:ec:c3:
         82:17:46:f8:7f:6d:94:7f:55:ff:b4:a6:13:4f:67:7a:12:d8:
         b2:fb:86:9c:32:91:08:36:35:f4:96:9d:21:5c:c4:75:d5:9c:
         30:00:a0:3d:1e:31:2c:ed:09:45:71:39:ee:2b:81:82:78:2d:
         34:82:5e:91:62:38:fc:0b:ba:5b:75:f0:22:44:c1:77:c3:e9:
         d8:9a:eb:62:7b:ba:33:f8:64:e1:cb:8a:01:05:e2:07:2c:e0:
         12:bd:77:22:2c:47:62:8e:29:e0:10:d9:60:97:f4:c5:39:d5:
         62:39:41:15:a5:dd:76:8d:2c:87:81:f4:06:e9:cc:33:c8:c9:
         25:d2:04:0d:1e:bb:38:df:29:fc:dd:03:9f:b3:d4:62:9a:5e:
         d2:75:22:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:54 2026 by rpki-client