Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/A1418C5E68C411EF841B7987C4F9AE02.roa
File:                     A1418C5E68C411EF841B7987C4F9AE02.roa (raw, json)
Hash identifier:          n0CCMGeumZCWwdmJVTlhf90Hp7n5mmj7hMl5rFGb2ZA=
Subject key identifier:   4D:F6:52:F8:B0:BC:00:02:15:E9:A0:E4:FE:2C:24:12:F6:AC:B0:E5
Certificate issuer:       /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
Certificate serial:       011E
Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/A1418C5E68C411EF841B7987C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:41:14 +0000
ROA not before:           Fri 27 Feb 2026 05:24:05 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        103.247.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl
                          rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F12, serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
        Validity
            Not Before: Feb 27 05:24:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a417ca-a1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:25:92:d4:d4:4e:7a:f9:1e:06:cd:f3:19:
                    a6:46:bd:01:f1:17:17:92:24:e6:5a:58:1a:5c:18:
                    5e:f9:a7:26:26:32:9e:e9:ff:77:36:c9:b8:ed:97:
                    b4:d1:a4:3a:fc:15:5d:bd:92:21:ed:90:7a:23:4b:
                    d7:54:61:17:2e:fd:41:ea:a1:5b:01:3f:a4:72:14:
                    4c:94:e8:43:a2:ee:36:ff:44:02:a5:65:62:29:2d:
                    b8:b6:20:98:a1:80:48:bb:54:63:ba:a4:7d:eb:b4:
                    d4:40:7e:69:4d:8e:18:fc:84:3b:94:41:b4:bf:1b:
                    02:17:c8:53:07:59:08:65:77:5f:9f:98:b5:32:5a:
                    b9:22:a1:04:8d:3e:01:2c:30:57:8f:7e:97:f4:1b:
                    1b:4d:0e:b0:98:c2:2f:53:55:3f:8c:78:fc:2a:f2:
                    3e:ae:3a:e1:26:a6:eb:85:d1:ca:b0:66:93:67:f3:
                    89:c0:7b:19:19:0b:14:4b:be:9d:8b:f1:6a:5d:7a:
                    4e:86:a7:51:d0:c6:29:63:4e:fd:6d:c3:43:04:c4:
                    a1:71:bd:7f:9f:b7:65:27:d4:71:76:a9:e3:a2:70:
                    59:16:26:d0:9d:3c:6b:74:ae:1e:05:85:66:46:f9:
                    41:f0:27:4e:a0:ff:77:87:24:f9:a7:69:54:77:18:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F6:52:F8:B0:BC:00:02:15:E9:A0:E4:FE:2C:24:12:F6:AC:B0:E5
            X509v3 Authority Key Identifier:
                keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/A1418C5E68C411EF841B7987C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:32:5d:79:79:bf:c5:45:a3:08:c7:01:22:b9:a4:b4:33:73:
         39:bb:52:48:87:30:19:dc:36:ee:13:c9:1b:c1:67:1a:1d:a1:
         fd:95:47:e2:51:a4:5f:56:1d:35:85:58:af:9f:8d:f9:a7:65:
         0f:94:6d:44:e1:e2:1e:4e:48:55:d3:95:16:79:02:9c:95:7b:
         07:7d:d5:32:86:ee:e8:58:d2:15:cb:de:03:29:a3:9e:74:16:
         56:be:33:1c:f4:4d:df:91:2d:78:80:fb:e6:77:d2:85:6a:04:
         86:79:71:82:3b:a8:ea:ff:70:14:70:89:75:b1:89:2d:b9:e9:
         31:33:fa:ed:96:b9:cc:c3:8a:aa:f2:ff:bf:00:9c:0f:74:23:
         39:65:a9:0c:63:31:de:67:17:eb:00:74:b6:92:5c:d5:08:64:
         1a:2f:fc:42:d0:41:fb:a7:c1:76:31:b6:77:60:0a:c9:b6:95:
         0f:db:99:e3:bc:54:b3:fc:b7:77:a3:7d:37:11:96:58:b3:35:
         60:10:21:3c:27:a1:14:ff:73:7f:6e:ca:6c:62:d5:a2:c9:cc:
         33:d9:0d:17:25:70:f5:76:e4:42:9f:df:a2:58:dd:39:ce:04:
         fa:08:58:dd:2f:33:bc:34:1e:b4:a5:08:61:cb:f7:1a:7d:ec:
         06:8f:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:58 2026 by rpki-client