Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/8818EDF88F2C11EDA558DE4DC4F9AE02.roa
File:                     8818EDF88F2C11EDA558DE4DC4F9AE02.roa (raw, json)
Hash identifier:          PA2mkLdDXnNHB1sn/98JmRqRd0SL8RFnOSlQl5U7aqk=
Subject key identifier:   8D:2B:71:47:5F:40:91:43:93:72:EB:05:3C:54:40:C5:1F:0D:68:A0
Certificate issuer:       /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial:       11AD
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/8818EDF88F2C11EDA558DE4DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:08:57 +0000
ROA not before:           Thu 26 Feb 2026 17:15:13 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     58689
IP address blocks:        103.132.248.0/23 maxlen: 23
                          103.132.248.0/24 maxlen: 24
                          103.132.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
                          rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4525 (0x11ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
        Validity
            Not Before: Feb 26 17:15:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a472a9-843f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:6b:ff:5a:9b:8b:dd:58:68:f9:c1:07:93:
                    2d:20:24:83:9a:e4:40:a6:79:bf:20:b6:ce:15:c6:
                    62:e4:32:c2:bc:7c:f6:bf:90:34:ef:dc:8e:5a:40:
                    7f:a5:f3:50:e5:e9:2b:85:3e:4c:d8:cf:24:bd:0e:
                    ed:5c:a9:31:c7:fd:89:1e:73:80:8b:f6:27:08:ee:
                    18:76:9b:8d:17:c9:6e:1f:b1:63:b3:05:13:5e:03:
                    a4:62:7b:16:69:06:cd:c5:90:59:35:67:8d:83:a7:
                    ea:e2:06:6a:85:c9:4d:37:64:36:d8:ed:d7:a7:2a:
                    ff:88:fd:f9:a5:4b:7e:6a:9c:f6:c9:a4:73:47:50:
                    6d:13:55:11:82:a4:9f:70:52:49:88:77:f0:da:0e:
                    e7:e2:96:df:3f:01:08:39:6a:db:23:fb:b0:39:8e:
                    c4:2c:a5:65:c4:36:8b:9b:2f:6b:d3:b9:61:2a:a3:
                    4d:de:88:37:2b:bd:8d:de:6e:ae:fc:9e:1a:5a:67:
                    ff:6e:e3:ed:c2:19:df:5e:b5:b1:fa:fb:5b:00:4f:
                    74:b4:3d:c4:09:b4:e9:c6:83:97:b6:42:a8:c0:8b:
                    a1:5b:4b:29:47:a3:da:c3:aa:36:22:4d:48:cc:56:
                    86:fd:dc:18:a3:37:5d:35:5c:25:22:2b:11:b0:ea:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2B:71:47:5F:40:91:43:93:72:EB:05:3C:54:40:C5:1F:0D:68:A0
            X509v3 Authority Key Identifier:
                keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/8818EDF88F2C11EDA558DE4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:d3:2a:ea:4f:fd:68:1f:4a:33:c4:b4:f9:9a:14:d2:d4:
         71:3d:c4:c8:eb:00:94:c8:7e:4f:94:22:8e:75:75:43:79:06:
         da:e1:20:a5:13:b8:3b:7c:8a:e7:54:d7:cb:55:44:e5:3e:12:
         8b:14:1f:cb:06:32:c3:ab:6e:7f:f1:c7:6e:45:ba:a2:22:bb:
         99:f9:fe:7f:fc:4a:ac:6e:96:00:02:6c:b3:cd:ea:13:a7:17:
         82:15:90:c0:12:95:35:60:dc:c4:52:13:e4:3f:ff:12:48:11:
         83:a2:97:5e:7f:58:d4:da:32:94:a4:56:fe:a3:85:d3:d6:47:
         31:32:95:80:2e:ac:05:c8:bd:ba:3d:28:f8:cc:24:93:5b:86:
         aa:30:79:9f:52:d5:db:87:5d:c3:cf:1a:db:e5:2b:a8:b0:26:
         6f:2d:72:a3:85:76:c5:2f:e6:be:7a:ca:c3:be:16:f5:87:1a:
         69:6d:9e:3b:5a:97:9d:cf:d3:e4:94:d9:e4:d3:af:32:74:21:
         cb:3d:29:57:65:76:03:d4:de:ab:d7:3a:b7:5a:e9:3f:69:3a:
         e4:4a:26:ad:10:0a:ef:7d:d1:86:0d:c0:7e:48:a2:6a:59:d9:
         bf:a1:8c:d8:64:1f:b5:96:cd:72:30:a7:de:e7:b4:e9:2b:5d:
         85:94:a1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:55 2026 by rpki-client