Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/64197A380C4E11F1BFF51C3A113D8C67.roa
File:                     64197A380C4E11F1BFF51C3A113D8C67.roa (raw, json)
Hash identifier:          SDIwrvKhvQfNC2FFKTmp/C4FfAE+5eImdfafppjPTLY=
Subject key identifier:   47:A8:11:EE:1F:4F:F1:82:EB:8E:F1:EC:C0:4D:07:D2:C2:FF:1B:8C
Certificate issuer:       /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
Certificate serial:       03E3
Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/64197A380C4E11F1BFF51C3A113D8C67.roa
Signing time:             Sun 01 Mar 2026 10:03:13 +0000
ROA not before:           Tue 17 Feb 2026 22:17:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132165
IP address blocks:        103.186.22.0/24 maxlen: 24
                          103.186.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl
                          rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
        Validity
            Not Before: Feb 17 22:17:05 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40ee1-11e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d4:ca:e4:cb:17:d9:63:f2:75:c2:e1:47:53:
                    f1:12:b4:75:e1:50:9d:a1:e9:e4:19:07:61:56:b7:
                    0a:dd:71:65:5b:9e:15:8a:25:f8:47:f3:fc:50:c7:
                    40:b1:46:4f:a2:2c:87:d5:5b:e1:a0:a0:e3:9e:5b:
                    4a:d9:07:10:ac:5c:de:3f:23:c5:5f:d7:52:6f:cb:
                    d0:29:e6:cc:ac:47:38:6f:bc:e6:f7:f6:2b:eb:3f:
                    40:c6:8c:b8:03:9c:e3:d7:be:d8:f9:37:2e:15:69:
                    60:31:8b:c5:a8:d6:a5:80:62:cf:1e:74:b4:d0:a6:
                    1f:24:4d:44:1d:db:f8:4e:79:28:76:ba:06:c9:62:
                    c5:3f:32:b7:17:83:00:e7:c9:94:e3:46:d8:5a:18:
                    84:9e:b9:a0:4f:3a:63:f6:58:db:fe:c8:ec:d3:ec:
                    0b:e6:82:26:57:c9:74:d4:e5:77:2a:f7:c8:ee:6b:
                    ae:4f:f2:9c:9c:78:6e:3d:81:63:bf:af:e1:3f:cf:
                    bb:bd:f8:26:44:84:dc:97:3c:c6:45:05:d3:bc:ef:
                    e7:6f:9d:10:b4:8e:fa:21:71:8e:01:42:e1:f9:14:
                    f4:22:b5:b8:6f:1b:2e:36:64:4e:93:9d:29:a0:4f:
                    59:c3:dc:40:6b:5f:11:b4:d1:70:97:3a:f2:ee:bc:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A8:11:EE:1F:4F:F1:82:EB:8E:F1:EC:C0:4D:07:D2:C2:FF:1B:8C
            X509v3 Authority Key Identifier:
                keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/64197A380C4E11F1BFF51C3A113D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:05:31:eb:5b:62:e7:eb:e7:e3:4c:00:74:a9:5a:ab:fc:81:
         a3:d7:2c:41:1e:ca:3c:fa:36:20:2b:0d:6c:86:17:e6:fc:a8:
         b3:19:9c:ad:d6:4d:88:8f:fa:5d:69:49:7c:78:94:b9:83:ba:
         dd:37:8e:7e:a8:f0:96:be:d5:86:02:70:2e:d1:59:f6:ed:71:
         ba:d6:48:70:1b:ca:d6:f3:ef:e5:67:0f:0c:fb:79:b3:58:3b:
         63:00:e7:91:41:bd:b9:3f:18:d2:83:12:8b:95:5b:7d:4f:2a:
         d8:29:93:71:b0:46:ea:c1:1c:4e:a8:be:7b:4d:39:28:da:05:
         02:8e:71:b2:c0:9a:ee:6d:14:30:a8:c8:06:a0:bb:31:f2:c1:
         4b:68:cc:7e:66:b7:ae:47:a6:9d:03:6a:e1:d9:6d:26:85:e6:
         e4:c6:29:f0:44:54:9f:b3:f4:dd:0d:5e:ac:31:eb:4e:77:b6:
         78:80:e9:b5:f5:2d:e1:41:58:d9:8e:cf:69:57:9e:d1:83:1b:
         b7:f8:44:31:f0:a9:cd:97:f1:d6:3f:b0:5e:55:7f:f8:81:13:
         c8:bc:a8:27:3d:99:08:9f:f1:9c:58:d9:15:90:27:d1:f0:bd:
         3f:e5:e7:a0:59:5e:95:aa:60:b3:31:08:2a:fb:65:29:be:75:
         50:59:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:25:20 2026 by rpki-client