Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa
File:                     8E9B074050E311EF8624AC36C4F9AE02.roa (raw, json)
Hash identifier:          DNo6LAjYKJT9hMbFIUnOrjoJbdOcs5kpnOeIkHugpwQ=
Subject key identifier:   7B:93:A6:9B:7F:4D:27:D7:E4:8B:CE:49:7D:53:7C:BE:AA:59:87:DB
Certificate issuer:       /CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Certificate serial:       0131
Authority key identifier: 62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:20:25 +0000
ROA not before:           Mon 07 Jul 2025 06:42:30 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136920
IP address blocks:        103.99.26.0/24 maxlen: 24
                          103.176.215.0/24 maxlen: 24
                          2001:df0:f980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
                          rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911392E, serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
        Validity
            Not Before: Jul  7 06:42:30 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5aab9-1419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:67:b7:dc:3e:84:81:ce:ac:48:7c:45:1b:d3:
                    13:02:61:d7:f8:53:44:28:f1:89:1f:4c:63:ec:b0:
                    06:6b:eb:1e:8c:30:4e:fc:ed:f1:e1:d1:03:50:a8:
                    9f:20:35:4b:ed:76:28:13:3e:d2:15:8e:5d:83:06:
                    65:09:f5:ad:0a:61:a7:9d:9a:f1:26:20:97:e2:64:
                    54:43:cf:32:c0:05:f9:51:2c:be:01:58:a8:ea:a1:
                    16:94:81:17:7c:da:c3:5f:eb:2e:4e:3f:53:88:d1:
                    a7:bb:b7:fa:d3:b5:37:08:8a:46:f9:1e:3f:67:0e:
                    5a:44:b3:5a:2f:8e:25:55:db:00:30:f9:8e:6a:d1:
                    19:9c:32:d0:96:1a:65:a7:17:05:9b:cc:89:41:dd:
                    5d:58:51:4f:20:0b:e1:81:28:33:8e:47:52:f6:a6:
                    7c:25:5a:ef:2d:ee:c7:04:45:bf:d7:19:31:7f:7e:
                    78:f4:86:2c:82:b9:1f:28:d6:31:a1:fb:51:e8:30:
                    48:39:33:46:0f:71:c8:28:22:0e:8f:de:f8:33:15:
                    58:4b:f6:ce:a9:d2:ed:37:01:f0:d9:d6:65:05:a2:
                    36:60:d5:2a:6d:55:66:97:1f:b9:28:84:0e:f4:6c:
                    a1:fb:5d:cc:37:c4:a6:02:86:59:a3:ce:2d:bc:c8:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:93:A6:9B:7F:4D:27:D7:E4:8B:CE:49:7D:53:7C:BE:AA:59:87:DB
            X509v3 Authority Key Identifier:
                keyid:62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.26.0/24
                  103.176.215.0/24
                IPv6:
                  2001:df0:f980::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:0f:24:03:0b:1b:a9:a0:96:0e:73:9b:e3:f5:7e:3a:b7:d0:
         a8:87:be:88:17:eb:86:2c:fc:6a:75:ef:3e:a6:23:7a:a5:32:
         48:69:30:0f:6f:33:a7:1c:0b:40:d6:34:b9:7d:fd:8f:eb:b8:
         27:2d:be:02:7c:54:19:8e:df:2b:9a:55:e1:23:4e:88:fe:d7:
         22:dc:61:0d:22:45:d2:ae:e4:0e:38:43:7a:f6:35:4d:bf:d7:
         90:91:45:b8:2a:63:81:09:42:c5:9b:41:3a:f4:87:ba:59:a4:
         e2:c5:d0:0b:9e:90:1e:c4:c3:db:39:9c:44:0c:c3:3f:78:b3:
         a1:b8:52:f8:3d:36:9e:ce:7b:84:7f:aa:7f:ee:b3:d7:2a:a4:
         8e:a4:eb:52:dc:d0:1b:45:68:b7:92:47:cf:e6:70:8b:b8:10:
         53:e7:56:04:bb:bf:1a:4e:24:6a:a6:33:2f:f7:d9:82:19:be:
         68:1b:69:8e:7b:f2:29:52:3d:77:aa:bf:35:07:2e:4f:e5:b6:
         91:a4:01:f7:03:63:30:38:55:df:d6:3a:d7:70:f1:ef:18:d2:
         b4:08:ff:22:2c:10:3f:02:4c:ee:98:55:58:2c:b5:8e:2f:fc:
         7d:a7:fb:ff:d7:08:0d:a9:aa:3e:a7:8f:65:61:3f:61:22:61:
         58:13:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:09:49 2026 by rpki-client