Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/595310E440C911EE9F1D5F41C4F9AE02.roa
File:                     595310E440C911EE9F1D5F41C4F9AE02.roa (raw, json)
Hash identifier:          OaAKfIcON2XRzyks5YJKaHnYYgiadPipJMC0EisFwRU=
Subject key identifier:   D9:7B:95:FC:F3:24:9B:80:2A:32:CC:13:B8:2E:D9:FA:D0:65:92:6C
Certificate issuer:       /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial:       11AA
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/595310E440C911EE9F1D5F41C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:08:54 +0000
ROA not before:           Thu 26 Feb 2026 17:15:07 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135413
IP address blocks:        103.132.248.0/22 maxlen: 22
                          103.132.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
                          rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4522 (0x11aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
        Validity
            Not Before: Feb 26 17:15:07 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a472a6-034e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:34:24:d2:d6:c4:e4:54:44:f2:27:09:ea:
                    1f:54:f9:e9:7c:0e:f4:ce:98:c8:45:d6:01:f0:2b:
                    33:b5:fd:4d:7a:f7:fa:b1:b0:98:e9:9d:03:d4:5b:
                    09:b7:48:49:77:bc:ef:a0:77:67:d4:32:ef:db:28:
                    29:e2:fc:a6:7b:f5:fb:67:c3:2e:95:26:3c:b1:64:
                    52:3a:51:ec:dc:e8:e2:c5:40:40:da:3d:bc:51:2f:
                    d4:60:7b:a4:b9:d4:1b:86:c3:90:f3:a6:44:48:61:
                    5d:eb:d5:df:16:24:60:4b:9f:41:c2:d3:8a:a0:81:
                    68:4a:ba:da:1e:90:2a:ec:11:2e:89:bf:f3:84:8c:
                    2b:68:0b:c1:a0:00:40:20:0b:47:00:8d:19:c3:2e:
                    bc:e7:6b:cf:73:cb:ce:87:fd:0d:9e:7e:8b:16:36:
                    66:be:86:81:62:ac:43:54:92:5b:62:8d:c6:c3:33:
                    5e:37:a9:b4:1a:5a:86:94:dd:b0:ba:be:d9:42:c5:
                    28:a7:14:6f:39:06:bf:a1:69:a8:0f:46:60:ab:83:
                    60:84:9b:67:a5:53:b6:ce:1c:a0:37:83:20:35:3c:
                    38:54:b8:7e:58:9e:8c:1f:0c:8f:0b:af:a1:0c:b3:
                    51:67:c0:88:90:c5:99:39:3e:07:84:d3:f2:b4:d5:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7B:95:FC:F3:24:9B:80:2A:32:CC:13:B8:2E:D9:FA:D0:65:92:6C
            X509v3 Authority Key Identifier:
                keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/595310E440C911EE9F1D5F41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:69:f0:aa:10:95:ea:ac:0b:d2:83:79:49:af:f4:7c:8a:36:
         ea:41:57:79:79:7e:32:ac:3f:fa:c1:da:44:e4:b3:0c:52:45:
         fc:a3:b4:7d:ca:ad:77:32:8e:e8:c4:0c:c6:20:af:02:f5:02:
         3a:b4:46:c3:29:17:0e:c0:84:ce:aa:15:dd:c3:a7:6c:07:69:
         c6:fa:31:81:c3:94:c9:3d:05:db:6c:a7:2c:a3:0b:b0:3e:45:
         c8:11:4b:c0:74:24:1f:4b:07:21:cf:24:1d:ba:f4:b6:a1:0d:
         16:81:f0:95:08:1a:e8:92:aa:95:90:d5:2c:ec:d6:6c:3a:a1:
         0b:a3:cf:bf:45:d5:56:61:01:c7:a7:7a:e1:22:3e:a9:f4:5a:
         0f:26:d5:2f:a3:f0:ef:45:6a:74:dd:f1:40:07:57:da:33:40:
         d4:71:a5:8c:97:e1:3d:e8:07:ef:05:6d:98:19:65:f2:ab:87:
         6d:ce:bc:d5:38:74:2c:f2:67:0b:d7:ba:e0:b2:63:c6:c3:80:
         ad:46:b9:7a:32:d8:f2:8f:a2:e7:79:71:60:71:01:e8:d5:73:
         ac:56:f5:b0:58:2a:45:ee:f0:bc:b1:8d:16:c1:2f:8a:ba:0f:
         70:a2:ca:00:f7:21:7c:80:c8:32:91:8c:0b:d0:f4:77:8c:06:
         b3:ef:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:19 2026 by rpki-client