Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/CB09977AFB0D11F08355CD12746F56BC.roa
File:                     CB09977AFB0D11F08355CD12746F56BC.roa (raw, json)
Hash identifier:          Y6DTASD2URCdLE3oTBxAyH1XxTWqmt689U3qro6bvnY=
Subject key identifier:   6B:48:89:69:ED:7D:A4:82:74:5D:77:5C:32:BD:4D:98:8D:2D:38:6A
Certificate issuer:       /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial:       80
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/CB09977AFB0D11F08355CD12746F56BC.roa
Signing time:             Sun 01 Mar 2026 17:32:38 +0000
ROA not before:           Mon 26 Jan 2026 23:21:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     32043
IP address blocks:        103.95.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
                          rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
        Validity
            Not Before: Jan 26 23:21:51 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47835-6c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:66:d8:1c:60:f0:ca:00:57:5b:49:82:4b:
                    30:7d:77:2c:4b:a2:60:05:64:b0:6d:6c:ec:fa:4d:
                    08:32:f9:4a:77:ef:5f:e0:a7:a2:55:fa:ff:be:c7:
                    af:80:09:06:3f:0a:70:bb:95:ce:b4:d5:ee:0f:0b:
                    4d:d6:90:b1:39:68:32:f0:a3:7e:4f:da:66:16:9f:
                    7b:40:69:2e:5d:2f:c4:cb:40:3e:91:1b:35:e6:03:
                    d9:cd:8e:96:0e:0e:df:a8:15:63:2b:03:3e:42:f3:
                    85:4f:32:8d:4b:d1:49:16:59:3e:9a:87:60:78:4f:
                    2d:d0:2d:32:11:c9:22:b9:c6:f2:30:97:5d:66:dc:
                    d0:c4:55:ea:bf:e7:81:ab:ff:17:06:45:05:b7:36:
                    78:b3:92:80:1d:69:d0:c6:ee:58:f5:62:09:9b:b7:
                    06:64:34:7f:34:ca:92:e8:4f:f2:5e:2b:26:27:a0:
                    2c:fc:3a:fd:e5:c3:14:51:e2:b4:ad:73:7b:0e:85:
                    bc:50:51:fb:e7:19:48:60:78:a7:91:4c:2c:65:3e:
                    3c:13:db:9f:e1:ba:b1:74:ed:29:9d:5f:ed:d9:d0:
                    10:8a:74:a7:45:16:d3:a3:89:52:6c:50:12:57:b5:
                    1d:6f:2f:28:12:b3:ce:03:d0:1d:51:3f:bc:6d:fd:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:48:89:69:ED:7D:A4:82:74:5D:77:5C:32:BD:4D:98:8D:2D:38:6A
            X509v3 Authority Key Identifier:
                keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/CB09977AFB0D11F08355CD12746F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:3b:70:33:4a:15:57:11:03:5e:cd:a2:4e:57:f2:40:9e:ec:
         7d:92:d4:00:3e:f0:3f:bc:29:83:d5:72:30:ee:dd:14:e9:e3:
         ff:17:67:8a:3e:d2:75:ae:8c:6f:92:47:ca:10:fa:07:e6:40:
         72:2c:16:76:95:ea:8e:4e:8e:d6:4a:f8:4e:e9:ba:cb:9a:6d:
         2e:59:29:d8:fc:de:87:d9:07:17:e6:1c:b3:02:05:1c:5d:6c:
         74:d9:6b:d4:88:a2:60:5e:3b:72:99:7c:ad:c7:46:86:27:31:
         6a:cd:bb:82:e6:9f:ad:e7:ab:b1:8a:a3:de:cd:13:2a:a0:df:
         51:c5:60:6f:79:7f:73:5d:ee:4a:55:17:18:04:86:ea:6f:83:
         71:cd:fe:fb:aa:d1:2f:14:1e:f3:e6:9e:ef:1a:4d:eb:fd:47:
         b8:db:cb:8b:29:d1:20:2b:06:9c:bc:ed:a3:4a:7e:de:c3:3d:
         0f:aa:98:d3:be:95:59:d6:0f:73:a4:aa:24:aa:e2:d6:65:7e:
         b4:76:6f:aa:58:f7:a3:36:13:76:5d:c3:55:21:99:48:87:c9:
         31:c3:e2:c5:a3:3a:c9:e1:98:29:5e:58:ea:ca:41:00:f6:45:
         ef:20:27:27:44:f7:d5:7e:7c:ac:59:c4:63:ba:52:87:0a:8b:
         1b:6a:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:35:06 2026 by rpki-client