Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
File:                     1E809CD0845111EAA961467EC4F9AE02.roa (raw, json)
Hash identifier:          FQzUC/UDtRjOVMq3qcWROmK5O0Zj21UozX3EEGahaO0=
Subject key identifier:   CE:6A:57:A3:1D:C0:4A:5E:8C:DA:FD:68:36:22:36:66:58:0C:2A:0E
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0A4D
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:49:09 +0000
ROA not before:           Wed 16 Jul 2025 20:30:56 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     131287
IP address blocks:        103.68.197.0/24 maxlen: 24
                          103.150.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2637 (0xa4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Jul 16 20:30:56 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a427b5-fbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:53:30:70:90:08:43:97:69:2d:5c:88:2b:
                    f5:2d:43:94:93:4c:e3:b5:08:a1:c7:13:c4:1e:0b:
                    68:26:d6:6b:9c:fc:ff:f5:41:d6:04:2b:b2:9d:df:
                    50:1f:a0:16:38:1f:4b:0b:b6:fa:00:ae:14:8a:8c:
                    dc:dd:7c:70:1d:dc:8e:d4:7b:6e:40:21:61:40:60:
                    e3:d2:54:9a:26:2c:6d:68:78:27:39:fd:ca:eb:2d:
                    9f:63:30:12:2c:af:56:96:c4:b8:21:59:0b:3d:25:
                    4b:8a:96:11:3c:05:03:50:1a:fa:58:5d:86:17:ef:
                    69:f8:77:68:04:a5:45:4b:7c:3f:a4:83:b1:86:1d:
                    2c:15:9d:ff:ca:50:af:06:e8:8c:93:c2:e4:22:7e:
                    b1:7e:2a:c8:76:ca:d3:f1:08:31:12:d3:db:e4:b5:
                    d1:09:60:2a:30:51:61:ed:08:aa:4b:4b:e9:f6:34:
                    af:f7:a4:c3:6b:a7:59:c7:df:7c:75:f5:2c:7c:45:
                    40:f4:c0:ad:57:28:c3:70:5e:aa:4f:94:ef:14:40:
                    c8:9c:bb:f6:b8:3e:92:3f:3e:fb:c3:79:bf:cd:b0:
                    e4:cf:40:cb:b7:e7:ad:f4:f5:a6:73:1b:21:58:62:
                    08:76:46:66:47:61:67:8b:cb:93:2c:c2:bf:28:5c:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6A:57:A3:1D:C0:4A:5E:8C:DA:FD:68:36:22:36:66:58:0C:2A:0E
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.197.0/24
                  103.150.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:57:ea:4d:76:49:fd:fc:75:16:22:42:c5:7a:15:32:5d:57:
         03:1d:54:8e:c5:14:d6:f2:19:ca:e4:33:a3:64:fd:45:cf:10:
         cc:af:8b:c7:a9:62:56:9c:69:ee:4e:21:a8:5e:6c:7a:ef:c8:
         99:54:b3:71:3c:1b:08:90:89:45:6c:10:ec:e0:97:af:1a:62:
         ec:91:7c:e8:cf:06:ed:6e:2b:14:79:a3:e5:7d:4f:1a:30:a2:
         89:9a:03:82:3e:5e:40:c9:9f:74:df:05:9a:76:ad:8e:47:41:
         89:ca:98:60:1e:23:2a:0a:68:17:45:d9:3d:2c:f6:27:d3:76:
         70:2c:43:36:c9:5a:17:9d:49:04:0d:17:1e:33:6b:9e:61:0a:
         0f:f7:35:14:ef:e4:8b:3b:58:f2:00:5f:c1:45:6b:fa:f7:b4:
         66:59:2a:74:62:02:a0:37:18:ff:40:b7:e1:e3:ff:c7:9d:dc:
         8c:0f:8d:7f:41:25:d4:ae:f8:00:b5:a2:fd:61:56:cc:20:4e:
         61:39:a5:df:0f:ae:3f:c3:c6:7a:2b:c7:8a:e0:5e:e1:72:90:
         4e:8f:7a:5c:a7:0f:c4:52:c4:07:91:22:2a:0b:40:c6:3b:65:
         c8:e7:35:25:db:e4:d2:c4:c0:5f:d5:47:63:88:db:38:fd:88:
         cb:19:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:00 2026 by rpki-client