Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/41A312C684BB11EC95CF1D6DC4F9AE02.roa
File:                     41A312C684BB11EC95CF1D6DC4F9AE02.roa (raw, json)
Hash identifier:          d5iSZj62C8juxE8auMNyD5ksUnuDKMjscM3w2qSQY9g=
Subject key identifier:   53:44:CE:3E:D3:B6:5C:43:C7:39:2D:13:33:51:71:37:E9:22:F2:52
Certificate issuer:       /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial:       046A
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/41A312C684BB11EC95CF1D6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:22:17 +0000
ROA not before:           Fri 23 Jan 2026 00:19:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149473
IP address blocks:        103.180.104.0/23 maxlen: 23
                          103.180.104.0/24 maxlen: 24
                          103.180.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
                          rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
        Validity
            Not Before: Jan 23 00:19:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44b99-ef49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:ce:12:4e:7a:cf:2d:e0:e3:dd:d4:02:8c:
                    69:ba:9b:70:95:7b:51:0c:4f:e3:da:fd:6b:65:7d:
                    13:4e:6c:57:9a:b6:5c:17:c1:7a:5c:80:b3:38:a7:
                    32:88:1d:a1:8c:1d:3d:07:eb:61:b8:f9:49:72:96:
                    00:0f:42:7f:8f:eb:c5:df:e1:97:08:a5:0d:91:49:
                    f5:c5:d2:e2:a5:ed:4e:de:87:62:53:e7:52:b0:3f:
                    ff:46:5a:f0:ca:a3:17:5f:26:2f:90:24:cf:a9:75:
                    47:5b:74:3b:2c:db:af:a8:f0:72:c1:67:a1:87:0e:
                    83:5f:6d:fb:0a:63:4d:99:e7:d5:76:32:28:7d:1f:
                    8a:2a:c1:4c:52:41:28:99:29:9e:21:e9:48:9c:de:
                    82:9e:9c:79:72:a0:39:ba:5d:ef:1d:e5:e1:f5:17:
                    1b:e1:58:68:ba:ab:8a:f8:1a:40:84:37:c6:42:67:
                    97:d4:c5:57:dd:f2:26:68:bb:d1:71:e7:27:68:ff:
                    ff:80:00:b8:34:c7:6f:51:ad:ab:6b:f1:65:8a:eb:
                    13:3e:ba:58:9e:ee:85:4d:ca:2c:fc:48:ed:0a:c0:
                    3b:66:d2:2c:08:fc:d8:d7:54:bf:d3:a6:65:88:a1:
                    5c:bf:26:d6:b4:1c:dc:50:7d:de:07:6d:0a:80:73:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:44:CE:3E:D3:B6:5C:43:C7:39:2D:13:33:51:71:37:E9:22:F2:52
            X509v3 Authority Key Identifier:
                keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/41A312C684BB11EC95CF1D6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:c4:fd:9e:53:50:31:ba:19:d3:1f:30:e2:c5:ed:bb:d1:d3:
         b5:db:c8:65:86:cd:9a:f7:40:d5:74:73:ff:da:95:a6:c9:99:
         7e:db:5a:6e:b8:c3:bd:22:8f:41:dc:dc:7c:fe:47:6e:30:36:
         43:64:00:d5:fb:04:d1:10:51:53:59:25:46:d3:76:2b:44:02:
         42:a3:de:b1:30:4d:00:db:5e:fc:91:19:d3:ff:81:5e:fc:ff:
         ab:bd:94:a5:45:9f:86:3e:f0:7b:07:ef:b0:17:17:96:83:05:
         0f:2a:51:b2:08:cd:60:50:20:b7:50:e9:65:17:9d:89:17:75:
         1b:37:89:bf:c2:6a:52:38:2c:7b:4e:ae:13:44:a8:cd:09:9c:
         88:b2:54:46:9c:1f:0f:c8:63:4a:e5:79:f3:ea:85:a4:d3:d4:
         c6:e5:fa:aa:31:c8:2d:bc:ea:26:e1:28:6f:aa:12:11:08:bb:
         76:35:cf:45:8d:47:81:bb:28:48:8f:66:55:62:6f:bd:05:71:
         95:0a:2d:df:f5:be:47:78:fd:c0:1b:83:31:53:90:c3:cc:10:
         71:c0:b9:f1:6d:22:40:94:36:9f:2a:6c:89:fd:fa:5f:d3:cb:
         39:c7:f2:f0:6e:f0:c7:d3:17:fa:fc:16:38:5c:a5:bb:12:24:
         ec:1a:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:28 2026 by rpki-client