Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/98FB9AA812EB11F1974F37D30E3D8C67.roa
File:                     98FB9AA812EB11F1974F37D30E3D8C67.roa (raw, json)
Hash identifier:          RGRkjXCs5NkIsFlBV4PSVHCbwn4KFTzJA6Li9AcD2Nc=
Subject key identifier:   A1:DC:B2:F1:D5:3C:26:23:2E:25:7F:6F:1B:BA:4D:F6:32:04:A2:AC
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       1449
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/98FB9AA812EB11F1974F37D30E3D8C67.roa
Signing time:             Sun 01 Mar 2026 17:27:25 +0000
ROA not before:           Sat 28 Feb 2026 11:36:01 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     215748
IP address blocks:        103.116.45.0/24 maxlen: 24
                          103.129.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5193 (0x1449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Feb 28 11:36:01 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a476fd-334f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:d1:f2:88:0d:12:bc:b4:5c:f2:64:0e:0f:
                    23:fb:fb:6b:84:dc:52:f2:f0:87:3c:21:d6:d0:7c:
                    9e:51:c4:1c:40:f2:e6:2e:0e:08:b9:f9:08:45:4c:
                    b3:8e:60:88:d5:b7:d6:7e:67:26:ce:24:fb:8f:b5:
                    5a:cf:cc:96:0a:c8:26:5a:f6:70:13:e8:0e:8d:4c:
                    74:75:32:7a:11:95:0e:74:c5:97:6e:e4:3b:45:d0:
                    be:8f:55:8d:4a:cf:59:52:7e:92:48:9a:ca:09:65:
                    ec:26:d6:8d:cd:63:db:82:a9:13:a1:48:4f:cb:7a:
                    4d:34:65:c9:a3:96:51:8e:b4:00:9f:dc:c5:b5:6d:
                    9a:91:44:0d:f8:c7:41:59:52:50:a6:c1:7c:e3:50:
                    44:86:74:ea:18:03:be:bb:3b:f9:f9:4e:6c:fb:1c:
                    a2:e9:08:f0:b2:9e:23:e2:2f:9a:74:1d:b6:93:cc:
                    1c:c1:51:88:17:18:04:50:3c:93:64:c5:52:57:22:
                    bc:01:2b:53:1b:0f:ee:f3:92:9a:07:b3:d7:52:c0:
                    28:7f:45:d0:f5:e5:13:45:a0:69:54:a5:44:f3:c0:
                    df:52:af:ad:e6:f6:19:ab:ec:a5:5d:81:b1:b8:f1:
                    67:3e:f2:55:11:d9:27:f1:b4:49:84:d8:65:1d:46:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:B2:F1:D5:3C:26:23:2E:25:7F:6F:1B:BA:4D:F6:32:04:A2:AC
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/98FB9AA812EB11F1974F37D30E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.45.0/24
                  103.129.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f0:7f:83:9c:5f:88:2d:27:a7:57:01:74:da:76:2e:c1:f6:25:
         d5:bf:8d:a9:26:55:60:97:7f:3c:76:c2:d6:5f:51:c0:9b:be:
         c2:19:90:59:b6:fa:f3:44:ef:b1:73:b8:5c:22:a8:8c:21:83:
         a0:6f:bd:10:5b:dc:c5:6b:d2:a9:b1:a0:27:68:0d:15:8f:eb:
         e4:ee:6d:43:9e:32:dc:19:18:0a:2e:52:f0:98:64:15:04:d4:
         c1:87:66:66:8b:c7:ba:74:e5:9b:17:93:59:9c:d0:11:44:08:
         bb:99:d2:22:3d:eb:9a:2b:3a:0c:fb:48:83:15:63:62:70:4a:
         dd:8b:ea:1f:b4:fa:6b:b9:53:da:e3:46:57:f7:e1:5d:bb:2a:
         2f:a5:51:6b:6b:d6:f6:e7:1b:e8:46:80:70:27:d9:c5:f4:86:
         6f:4c:d4:3a:05:28:be:a6:bd:37:83:92:2d:a6:e6:a4:5e:5b:
         c7:ab:54:82:ac:e8:b8:53:4c:b3:4b:86:40:eb:0a:be:a0:0e:
         5c:f4:0c:f5:d8:74:82:a6:0c:67:4d:53:ba:3c:4a:2c:15:5e:
         f4:f8:77:96:fe:aa:f3:10:fb:c5:4d:f7:06:f7:2f:46:79:fe:
         07:4e:ca:a8:af:07:6f:26:01:3a:81:70:21:cb:9f:fe:e6:db:
         85:61:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:53:26 2026 by rpki-client