Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa
File:                     BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (raw, json)
Hash identifier:          YLl0P9jlwEhhHZ25T2nyiDfkAV9RXLStwFdD/BEgbUk=
Subject key identifier:   3B:DC:FA:29:AD:FC:25:82:30:B5:3D:8F:4F:BB:02:4A:53:A5:33:3D
Certificate issuer:       /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
Certificate serial:       0570
Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:42:17 +0000
ROA not before:           Fri 17 Oct 2025 01:35:17 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     147029
IP address blocks:        103.173.60.0/23 maxlen: 23
                          103.173.60.0/24 maxlen: 24
                          103.173.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
        Validity
            Not Before: Oct 17 01:35:17 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a43429-926e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:54:c2:fe:c6:fe:7f:e0:3a:7b:f9:24:f2:
                    30:cb:5f:c4:11:78:06:f3:db:50:ad:43:3e:a8:df:
                    6d:28:4d:42:cd:cc:c3:a2:8f:ce:5e:6a:12:95:ff:
                    8e:bc:e9:9b:53:9e:89:5c:af:ee:c4:2e:38:7b:05:
                    1a:aa:4f:07:f3:89:a6:26:e8:3b:2c:b0:48:ca:e4:
                    9b:62:c8:32:0f:06:ee:c9:a1:d8:cf:9e:32:9e:c4:
                    5c:17:ec:5e:e3:b0:a4:c5:6a:ea:d2:3e:14:79:46:
                    e0:6f:c5:8a:5c:c9:3b:9d:89:73:c1:9d:5a:7a:40:
                    6c:05:ee:3b:0d:8a:bc:f1:24:99:c5:df:1a:16:ff:
                    48:38:c1:91:f8:c0:be:c4:4d:38:4a:8d:f8:aa:42:
                    63:d1:fa:d7:cd:06:5b:ba:49:dc:ce:0f:b2:ab:9c:
                    eb:8a:40:df:74:c1:67:96:ac:7a:1e:fa:87:be:11:
                    ba:a6:a2:af:86:da:69:ef:ed:c9:40:8e:03:6a:5e:
                    af:62:c8:f9:bc:20:0a:41:73:2d:04:0b:fc:2f:7b:
                    6e:9d:2b:79:5b:60:02:b3:8c:4d:a9:0a:c9:1d:11:
                    84:38:92:55:d7:62:a3:5b:05:c4:ca:47:f9:b8:26:
                    52:02:13:eb:d8:20:d6:37:56:a7:cb:7f:3a:55:e8:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DC:FA:29:AD:FC:25:82:30:B5:3D:8F:4F:BB:02:4A:53:A5:33:3D
            X509v3 Authority Key Identifier:
                keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:5b:f1:74:c4:2a:7d:87:09:d1:66:39:e2:15:99:ab:7c:
         6f:91:68:06:7e:4b:7a:f8:04:6b:f6:c2:de:ce:d3:a8:56:b0:
         3d:f7:6f:6c:ef:56:3a:33:03:a9:60:bb:58:cc:87:d6:a4:63:
         f6:66:f4:49:0c:a8:b2:61:bd:a3:9c:7b:3d:da:14:0a:62:3e:
         cd:45:59:b1:12:34:c4:18:09:c0:75:82:46:0d:62:23:96:cb:
         67:ac:8a:8c:4a:10:6a:7b:e7:75:a7:90:c2:d8:80:37:4a:a7:
         4e:ec:cc:a5:5e:9c:55:31:d8:7f:65:51:6a:e3:7f:7c:54:9f:
         96:e7:1f:77:73:ab:b5:4d:d4:a5:42:fb:ff:67:35:5c:06:0c:
         d2:8c:1d:22:63:6d:38:fd:73:6f:9f:ef:90:69:cb:8d:d0:f9:
         81:e0:40:39:6c:d0:40:15:85:c9:fd:95:8d:cd:f3:95:2b:85:
         88:11:f4:f2:4e:6f:87:ff:a4:b3:91:b0:1e:0a:9c:40:55:ce:
         f8:c4:ae:14:ef:73:bd:1d:e3:60:3e:14:4a:14:c3:0c:bd:ba:
         64:5b:60:7c:a5:93:0c:e7:a6:05:57:d4:5d:88:28:b4:69:84:
         4c:99:57:e0:7b:cf:df:42:5a:5b:7d:cb:88:d6:11:d5:2b:43:
         66:a8:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:18 2026 by rpki-client