Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/118AB342249511EFBF275B73C4F9AE02.roa
File:                     118AB342249511EFBF275B73C4F9AE02.roa (raw, json)
Hash identifier:          NqwTwG+Agr5XJi4bwI9im7xWQxdq8IuBPwpMhYcCze0=
Subject key identifier:   B7:AB:54:B0:CB:49:0E:A9:0D:DC:0F:C4:46:2F:1B:AD:EA:BE:36:68
Certificate issuer:       /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial:       023D
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/118AB342249511EFBF275B73C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:52:57 +0000
ROA not before:           Mon 03 Nov 2025 03:17:23 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     152904
IP address blocks:        103.74.216.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
                          rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
        Validity
            Not Before: Nov  3 03:17:23 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46ee9-a7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:f6:d8:de:c1:87:9d:f2:ec:bf:c1:20:ad:
                    8c:fe:31:77:0a:79:c1:02:61:c7:ff:76:3e:99:b4:
                    ef:b5:36:e0:06:0a:ef:62:6b:06:8e:d9:b9:5e:36:
                    eb:8f:39:b8:4b:9a:f3:12:1d:87:a6:b5:b2:9d:d9:
                    3e:05:21:20:f2:53:bf:aa:b2:31:ba:ed:f3:f4:04:
                    fb:cb:88:6d:23:00:7b:ba:9a:b6:44:23:ac:c1:0b:
                    77:bf:b9:86:fe:e9:75:18:bf:f8:50:97:b5:88:29:
                    92:08:b0:64:e6:55:8a:b3:34:fe:20:14:72:7a:60:
                    62:05:b4:e6:98:44:78:16:68:67:7b:54:cb:6f:be:
                    92:d5:60:97:f1:45:81:42:b9:35:bb:e6:f6:e6:fe:
                    bc:d7:65:5e:c2:a2:fa:3f:b8:f4:02:1e:3c:dc:5a:
                    54:ad:2a:22:89:93:d5:28:5e:a1:6f:a6:76:38:1c:
                    01:b1:f1:df:75:8c:8a:62:60:7b:95:69:dd:6e:7f:
                    f7:61:fe:ee:94:59:e3:76:13:de:0d:ca:d0:02:48:
                    05:d3:25:af:e8:8c:a6:d1:ef:a9:86:57:5d:97:f9:
                    04:a1:d1:72:ad:93:c6:76:0f:2d:e7:7a:f6:b8:39:
                    04:66:e7:05:f7:61:f4:58:df:76:9e:fe:a8:2d:14:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AB:54:B0:CB:49:0E:A9:0D:DC:0F:C4:46:2F:1B:AD:EA:BE:36:68
            X509v3 Authority Key Identifier:
                keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/118AB342249511EFBF275B73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.216.0/26

    Signature Algorithm: sha256WithRSAEncryption
         a1:6e:39:05:21:16:3f:51:95:67:d6:31:3e:0a:6a:61:2e:86:
         c2:bb:d0:1a:8a:ba:26:05:ac:77:cf:14:c9:01:e8:b4:4b:b1:
         b0:b1:51:37:32:a4:b7:13:c5:ca:b1:e2:23:16:4b:84:c9:81:
         be:a0:f0:8d:c7:50:23:76:2e:2c:41:41:fb:d2:ba:38:30:e9:
         a4:60:7f:31:66:3b:27:9b:50:ac:b7:b0:e8:ea:81:e0:b5:50:
         50:54:c1:4f:f4:0d:56:9f:8e:32:44:9d:df:84:9e:00:df:52:
         d0:fe:c3:6d:97:36:35:1c:6f:15:3a:12:3a:9c:d8:19:af:55:
         61:d4:d5:30:2e:cd:27:fa:ef:fa:96:96:4f:86:52:46:b4:2f:
         fb:41:5d:32:99:8f:4a:ba:4b:1a:8a:9d:fd:05:fe:f3:41:53:
         fd:85:b0:71:9f:ee:9d:c0:eb:cd:4d:b7:09:02:ee:1d:dc:72:
         d8:6d:71:d4:48:de:05:73:fd:fd:f0:73:38:da:22:2f:8a:ea:
         49:25:4f:68:bc:7a:3a:94:58:ce:06:dd:a5:87:97:25:aa:e3:
         0c:0c:fd:b3:37:3c:03:f8:0e:aa:d0:88:7a:c8:4a:b9:5c:7a:
         a6:12:06:70:bc:a8:b9:3c:f0:9d:92:9e:08:2a:e3:05:84:e3:
         4c:bf:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:52 2026 by rpki-client