Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/9C524DA858CE11E891382260C4F9AE02.roa
File:                     9C524DA858CE11E891382260C4F9AE02.roa (raw, json)
Hash identifier:          Q51vzZRqiNMLEKgdpBoUsf7XxI+ws50Le5bazvWIeV0=
Subject key identifier:   FD:55:2A:31:0F:0D:A2:E3:3D:FD:DC:41:6B:88:12:57:B0:3C:BF:D5
Certificate issuer:       /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Certificate serial:       1567
Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/9C524DA858CE11E891382260C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:17:19 +0000
ROA not before:           Mon 10 Mar 2025 17:06:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     136380
IP address blocks:        103.86.56.0/23 maxlen: 23
                          103.86.56.0/24 maxlen: 24
                          103.86.57.0/24 maxlen: 24
                          2407:2bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
                          rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5479 (0x1567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
        Validity
            Not Before: Mar 10 17:06:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4041f-969e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:8d:a1:c5:6b:05:7c:a6:43:02:a4:38:73:
                    72:2a:13:0b:b8:7c:7b:16:ba:c5:e9:15:6f:fb:fc:
                    e3:bc:7c:db:ba:ce:d0:40:5d:72:13:56:c9:0a:f5:
                    e4:a6:65:f5:95:42:c8:4f:cb:63:ef:35:a0:63:e3:
                    10:30:81:28:26:42:50:bf:79:9f:35:3f:35:db:22:
                    57:fe:d1:42:80:26:59:11:11:97:c2:8e:ef:54:83:
                    5e:f7:e4:52:0b:d5:d8:9a:7c:22:8d:bc:7f:b8:90:
                    d8:53:a1:2b:40:a4:8e:95:c4:7e:e0:f4:95:e5:ec:
                    a5:3a:03:d6:10:68:39:b4:39:4b:fd:8b:b3:33:c6:
                    18:c0:b8:1a:1a:ae:87:78:5f:67:e5:b7:64:47:bb:
                    7c:8f:43:f3:52:28:e3:e7:26:04:6f:7b:90:d1:31:
                    2e:cf:d8:1d:fb:5f:02:c0:23:28:94:06:24:18:de:
                    92:ab:10:02:84:e3:c8:81:6c:5c:bc:75:9f:dc:f6:
                    bb:3d:cb:7e:9f:0b:f8:76:b1:cf:a8:24:20:38:a0:
                    00:fe:07:ba:d9:f8:98:ab:34:ff:00:cf:1d:b3:f4:
                    aa:7b:d3:43:3f:87:22:1b:53:73:e2:3b:2d:28:b1:
                    4b:0c:02:99:19:67:84:3d:ae:9f:8b:8f:3b:6c:af:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:55:2A:31:0F:0D:A2:E3:3D:FD:DC:41:6B:88:12:57:B0:3C:BF:D5
            X509v3 Authority Key Identifier:
                keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/9C524DA858CE11E891382260C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.56.0/23
                IPv6:
                  2407:2bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:3f:f9:a1:9e:cc:98:56:e1:20:0b:b6:7e:1c:7d:92:9c:34:
         ff:12:c2:d2:01:62:9b:30:c2:b2:a1:03:24:16:3a:8d:88:d1:
         f0:0c:bc:c0:6b:ec:71:4b:73:3e:c9:44:99:fb:59:12:e0:95:
         d9:76:5f:bf:db:0e:02:71:ad:e3:b8:b2:86:61:24:f5:c6:33:
         eb:22:f6:9a:13:52:b3:e7:38:86:28:ee:f9:a4:f3:5f:32:5a:
         91:f3:a3:33:05:6d:71:6d:31:63:66:55:7d:a6:8b:4f:06:ac:
         73:af:6c:61:99:1d:22:06:28:49:33:28:b3:55:86:11:1c:32:
         bb:52:72:23:46:0f:0c:ad:99:96:64:bc:ab:7f:76:b9:94:c4:
         78:f1:2f:9a:06:bb:bf:9f:aa:42:e2:c0:4b:2b:a8:51:a6:82:
         4d:5c:62:7b:83:ad:3b:d3:7d:26:0d:43:e0:6e:ce:e6:02:b1:
         39:2d:d3:3a:10:95:4d:e1:1d:ea:12:d2:6c:e0:c7:14:e2:2d:
         0b:ab:fd:ba:79:f9:ea:82:e6:05:4c:13:0c:0a:85:99:1b:be:
         2d:20:55:c7:2b:98:d1:ed:3a:0a:60:92:b0:f0:34:66:36:85:
         c3:2b:2a:14:46:a1:b3:24:33:2d:ca:e0:fa:53:30:46:f2:49:
         75:8f:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:18 2026 by rpki-client