Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/6CE24548425E11EAB623F258C4F9AE02.roa
File:                     6CE24548425E11EAB623F258C4F9AE02.roa (raw, json)
Hash identifier:          H0qqK0ftqlCO4iGmc0hYXhGbYS0nJ+mVr0nn6HNSQfs=
Subject key identifier:   3F:32:70:6C:B6:FC:D8:88:42:2B:A1:26:D2:86:7F:D8:92:C0:1E:F6
Certificate issuer:       /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial:       0C9C
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/6CE24548425E11EAB623F258C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:54:30 +0000
ROA not before:           Tue 22 Jul 2025 18:58:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139276
IP address blocks:        103.140.158.0/23 maxlen: 23
                          103.140.158.0/24 maxlen: 24
                          103.140.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
                          rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3228 (0xc9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
        Validity
            Not Before: Jul 22 18:58:46 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a44516-66c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:e2:a5:af:53:ee:e8:b5:b2:ad:8a:15:d9:
                    cb:86:fa:39:c4:fc:ea:3a:30:5f:14:a7:e1:38:c4:
                    76:be:46:23:a8:dd:ef:f8:9b:e7:83:48:94:f9:9d:
                    eb:01:f6:10:60:6b:f0:f2:bd:e8:e0:6c:2c:a8:68:
                    55:c0:59:5b:df:ce:fe:82:f2:7a:52:b0:32:20:e6:
                    cc:ec:ee:81:05:e1:ba:48:3d:6d:58:07:20:f3:30:
                    33:54:ca:ab:d0:02:7b:50:13:9c:0f:2b:e5:1e:93:
                    39:d9:49:b5:ee:49:69:b6:c5:ee:a5:ba:bc:42:d8:
                    25:0d:75:51:69:5a:91:62:42:9e:77:18:ed:7e:b7:
                    f3:43:2f:b7:55:04:82:1b:29:70:ab:4a:67:45:74:
                    dc:76:de:9a:74:70:39:ca:f0:01:7f:de:d8:f3:91:
                    38:d0:c8:0f:1c:03:1d:47:01:b4:b5:1e:93:d7:67:
                    3e:ce:c2:30:7e:48:b6:11:e3:c5:d2:ae:64:63:95:
                    c4:b0:d4:9b:a1:1d:fb:35:b9:74:f3:8b:d5:a6:6d:
                    f8:8f:27:98:68:4a:2a:a5:2b:9c:10:e7:2c:a6:0c:
                    2c:78:20:f8:dc:dc:e8:49:ca:4a:e4:00:f8:f5:4c:
                    6f:58:39:f0:06:b5:11:3c:ae:a6:61:87:9d:ac:bc:
                    37:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:32:70:6C:B6:FC:D8:88:42:2B:A1:26:D2:86:7F:D8:92:C0:1E:F6
            X509v3 Authority Key Identifier:
                keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/6CE24548425E11EAB623F258C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:42:a6:38:02:a9:a2:fa:83:04:bf:bf:4a:e2:f0:cd:2f:
         c6:8e:60:50:b1:c3:e4:f1:60:05:b3:5a:b6:11:6d:59:cd:55:
         44:22:27:5a:38:2d:d6:65:15:c8:a6:17:62:e8:fd:2c:ae:88:
         2e:41:f9:3e:9e:88:4d:a6:63:5f:4f:7e:85:ca:b6:32:ad:a1:
         0c:19:05:8f:0d:ad:a9:09:92:f6:81:20:af:2e:a1:ab:10:28:
         1b:7e:ec:13:7d:b3:63:96:ef:5a:bf:6a:2a:16:da:28:e3:fe:
         a6:b3:39:82:77:c4:d1:42:18:80:10:d3:57:8e:2f:a0:a2:56:
         3f:4a:31:f2:f8:3f:6c:15:c0:1a:23:ef:96:10:ea:d4:fd:71:
         00:84:af:c0:fa:af:7a:35:6f:da:36:1b:45:d4:8a:2f:29:c2:
         65:84:79:a0:dd:f5:1d:a8:2c:21:8e:b6:69:69:0d:2e:8e:0c:
         6b:10:e4:fb:9b:a7:c5:bd:d3:10:f5:1a:ad:6e:47:0e:b3:bd:
         27:ce:9e:6c:22:06:23:ef:a6:a7:9e:23:22:ed:9f:c2:ad:6a:
         eb:78:f3:54:ab:a8:65:57:0f:eb:4e:9d:9f:43:55:39:80:b6:
         a8:52:68:c7:44:4f:f0:14:11:d4:6d:39:09:1f:b2:1c:c7:e7:
         93:d7:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:40 2026 by rpki-client