Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/1523921276EF11EDB8F27034C4F9AE02.roa
File:                     1523921276EF11EDB8F27034C4F9AE02.roa (raw, json)
Hash identifier:          xf1zNOGWmI0NSOQnM0W9wWka4ZzsBm8XfGy09ZatIOs=
Subject key identifier:   AC:63:42:7D:AC:09:9A:ED:64:D8:E3:19:99:B0:C3:AA:A4:7B:5B:38
Certificate issuer:       /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial:       0431
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/1523921276EF11EDB8F27034C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 00:31:20 +0000
ROA not before:           Fri 05 Jun 2026 00:31:20 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     59239
IP address blocks:        103.186.56.0/24 maxlen: 24
                          103.186.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
                          rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
        Validity
            Not Before: Jun  5 00:31:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2218d8-afd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:5c:b1:03:23:aa:8d:18:e7:1c:b8:65:20:b1:
                    f9:bb:03:c7:26:93:18:c6:4c:39:ba:8a:51:76:4b:
                    81:59:6c:60:b6:2b:d9:2f:a1:ad:0f:db:28:f4:41:
                    d5:45:51:67:6a:5c:9a:a1:a5:a5:c6:ad:32:b5:da:
                    29:df:e4:92:a2:a1:5b:41:41:02:d9:5f:d5:b2:04:
                    22:22:e6:2b:ae:c2:ff:b5:00:8c:37:68:e1:c2:7c:
                    70:c2:26:a6:6d:8c:78:b4:30:60:c4:c2:48:28:10:
                    b1:9f:34:96:88:06:61:ed:96:10:f3:58:2c:71:61:
                    54:6b:ad:74:af:db:f3:b0:a5:f5:28:b3:46:e9:9a:
                    71:dc:9d:59:ec:38:07:9d:26:93:7d:7a:a4:0f:d8:
                    4c:c2:90:1b:95:a7:0e:b0:41:10:77:00:34:e4:ea:
                    60:e2:96:58:35:e0:65:e9:8d:3e:d1:0d:91:3b:6c:
                    ee:cb:ac:de:fe:b5:13:6e:63:f1:1c:62:8f:1c:64:
                    bf:ae:70:fd:97:9e:e0:7b:5e:d4:cb:32:77:5f:ad:
                    cd:ad:d4:37:9c:11:9e:8e:4c:25:33:f6:16:7c:a1:
                    66:bd:f5:10:6b:33:cc:21:96:17:67:97:6e:a3:e3:
                    34:36:ad:72:48:5f:0a:6d:43:82:63:a7:84:08:18:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:63:42:7D:AC:09:9A:ED:64:D8:E3:19:99:B0:C3:AA:A4:7B:5B:38
            X509v3 Authority Key Identifier:
                keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/1523921276EF11EDB8F27034C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:9d:81:d4:1c:23:50:a1:5c:1f:96:43:90:cf:3f:9a:1c:
         17:3c:b6:df:b8:66:74:16:a4:6f:85:1c:1c:b3:0a:b4:b4:5f:
         32:73:53:63:39:ac:a6:5b:97:ba:00:e3:91:78:05:b9:a7:bc:
         58:fc:b5:73:3f:47:8b:cc:c5:f4:78:ea:6c:b4:63:1e:f8:60:
         c3:b6:99:ae:ba:6c:c0:59:ea:cb:56:9a:c4:93:f0:de:6f:5e:
         68:74:96:f6:22:b9:fe:1e:b1:e4:4d:95:23:e1:1f:ea:a4:49:
         1b:14:5b:32:41:53:d1:33:d2:93:e4:1f:76:05:4b:0a:8c:e2:
         23:ca:8f:f1:e1:4e:77:e5:d7:12:25:6f:ef:7c:24:0a:c7:2b:
         2d:d3:e0:11:d9:69:53:fa:b4:20:f4:f2:ef:07:d0:c6:e0:72:
         c7:ba:37:d2:05:84:2e:85:4e:fd:db:ea:28:de:b6:5a:c6:8e:
         7e:1b:9b:e6:a7:ce:54:f2:4e:87:59:01:c4:95:22:59:85:88:
         4c:57:c5:cb:df:68:ee:62:46:08:5e:97:c3:84:1c:0c:05:95:
         f1:e7:aa:b2:7a:0d:21:71:c8:64:a3:80:c2:51:51:4e:ee:36:
         d1:0f:52:34:dc:9a:c1:0a:31:fe:58:35:c0:f9:c2:77:73:fa:
         5b:bb:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:09 2026 by rpki-client