Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/5B0A7AFCF3F611EB8DD81585C4F9AE02.roa
File:                     5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (raw, json)
Hash identifier:          aqvU+UiVz5EiQm3aVLx9pIrD5pXO9qkeQ5aR6UKmmFg=
Subject key identifier:   BC:65:8A:85:6B:14:9C:5B:86:57:08:FD:7C:74:F6:E1:E5:E0:C1:87
Certificate issuer:       /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
Certificate serial:       05D2
Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/5B0A7AFCF3F611EB8DD81585C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:50:21 +0000
ROA not before:           Sat 07 Jun 2025 00:15:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7600
IP address blocks:        103.27.174.0/24 maxlen: 24
                          103.92.140.0/23 maxlen: 23
                          103.92.142.0/24 maxlen: 24
                          123.253.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl
                          rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
        Validity
            Not Before: Jun  7 00:15:11 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fdcd-7023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:78:4f:56:a3:be:b9:cd:81:98:cd:96:a0:
                    8d:72:47:a1:80:01:78:d9:d2:78:75:ff:83:50:c1:
                    eb:18:6e:97:7f:fe:0f:ac:70:89:86:1f:c5:ba:13:
                    15:a1:8b:94:bc:c6:e1:c6:8b:b8:ac:27:78:bf:0d:
                    e3:15:38:fb:29:ca:05:c6:19:84:5e:75:0d:7f:2d:
                    9f:d0:ff:98:0b:5e:9b:86:1b:ba:a5:21:19:58:0d:
                    33:3e:e1:e4:48:cb:21:e0:5b:af:f9:b0:d9:d8:f6:
                    8e:36:21:38:94:17:c2:eb:6d:58:3d:0b:3d:f8:fe:
                    ea:c9:05:1c:1b:ab:42:cd:8f:47:dc:d0:d7:4a:e3:
                    2b:cd:2f:b4:a9:40:06:14:63:6c:b0:8b:c4:17:e9:
                    27:ef:a3:e4:52:4f:11:69:31:69:e5:99:5e:44:8f:
                    54:c4:87:29:1a:8f:73:11:95:fc:1f:8b:08:6a:84:
                    07:2c:a5:d4:0b:05:db:0e:d7:d1:92:12:a7:38:02:
                    83:0d:4d:fb:a3:2d:2f:cc:cf:19:67:00:6d:9d:86:
                    42:a0:b8:a2:fe:41:f9:58:79:08:cd:a9:62:53:5d:
                    bd:7f:87:40:5a:f5:72:d1:e1:92:f4:c2:3c:ed:9c:
                    e7:e1:5e:5f:10:ac:b9:44:13:35:b8:94:44:5c:37:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:65:8A:85:6B:14:9C:5B:86:57:08:FD:7C:74:F6:E1:E5:E0:C1:87
            X509v3 Authority Key Identifier:
                keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/5B0A7AFCF3F611EB8DD81585C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.174.0/24
                  103.92.140.0-103.92.142.255
                  123.253.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:0d:4a:ee:95:18:d5:94:a0:d9:18:78:5f:a5:a5:9b:dd:
         9f:a2:0c:14:84:0a:2a:58:02:50:9a:36:3f:a9:e6:77:8d:fa:
         eb:a5:ff:57:dd:3f:69:86:03:de:03:5b:eb:b1:2c:9e:75:82:
         b8:03:fe:2a:c1:2d:18:d2:c4:41:91:7b:42:53:3f:24:6e:ee:
         88:a2:4e:52:b8:b5:ca:c5:d5:37:a5:c8:e4:d7:5d:25:2c:a8:
         c2:c9:63:03:84:63:92:3a:07:f9:e3:54:7f:a4:0b:43:0e:06:
         9d:30:84:e2:1e:07:e6:d8:49:78:e2:3b:10:9e:83:35:e4:73:
         62:08:b4:ee:20:83:53:e6:92:d8:68:1a:fb:e7:30:63:11:26:
         58:41:e0:34:81:56:db:00:8a:d7:48:87:f8:aa:ab:d4:5f:5e:
         82:ff:4b:88:43:23:af:cf:22:94:1f:43:2f:d8:1b:de:55:ab:
         07:80:f6:68:26:f1:cd:2c:66:06:08:33:83:df:92:f1:70:a6:
         5f:e8:b4:f7:42:0b:a4:28:d7:1f:81:49:07:a8:9e:50:a5:76:
         4e:20:7b:05:2e:9e:85:b4:40:15:9f:9b:7d:04:25:ca:f6:58:
         8a:46:fb:b7:06:0a:d6:bf:96:1c:30:b8:08:3b:3d:0b:4d:d1:
         3f:a6:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:40 2026 by rpki-client