Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/51B6AD3E03B211F0BDAF273BC4F9AE02.roa
File:                     51B6AD3E03B211F0BDAF273BC4F9AE02.roa (raw, json)
Hash identifier:          UuKJK26jX3Rl7RcP2M0fqflfBMPRZn8fZfrjbt0GlvM=
Subject key identifier:   8B:07:52:31:65:A3:ED:1D:58:C8:04:4D:0F:1C:18:E1:98:BF:6F:05
Certificate issuer:       /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial:       0240
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/51B6AD3E03B211F0BDAF273BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:06:55 +0000
ROA not before:           Sat 13 Sep 2025 03:09:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153656
IP address blocks:        103.209.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
                          rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
        Validity
            Not Before: Sep 13 03:09:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4560f-7ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:6a:ee:ec:8f:eb:f2:13:c8:6f:6b:5a:65:
                    c4:48:ff:44:b7:57:52:4e:6e:8f:17:5a:b0:02:97:
                    cd:df:b2:da:b6:b8:e3:59:c3:55:ce:76:3e:11:55:
                    a4:a2:1d:c6:50:bd:c7:4e:2e:11:1d:96:b6:25:07:
                    32:3e:50:1b:63:a1:2d:76:20:cd:d0:35:a4:61:93:
                    e6:ca:2c:e9:b5:3c:fb:42:f6:3c:a1:28:41:46:cd:
                    f5:2a:6f:10:28:48:7b:17:0b:92:f0:f7:32:56:89:
                    f3:1f:a2:b9:f2:55:89:3c:f0:7e:47:26:89:c9:74:
                    aa:d2:6e:e7:7c:79:55:74:e3:e3:fc:52:e2:53:3f:
                    c5:5d:d3:28:44:13:c1:41:6d:5e:6e:97:76:40:6a:
                    1e:80:8e:3d:e1:f2:84:e4:0b:28:9e:1f:01:96:6d:
                    6c:ca:a7:75:c0:b6:bb:32:d5:33:3b:f0:8a:0e:22:
                    08:83:52:51:d0:9f:ab:c0:44:5c:b3:c8:f0:81:62:
                    c2:ce:d5:27:2c:bc:a1:89:01:7d:e6:b9:12:7f:6e:
                    41:a6:71:ae:7e:5f:54:3f:e8:79:57:c4:49:80:46:
                    de:91:08:39:cb:2c:38:e5:01:ac:52:9e:54:ec:e5:
                    0a:f4:71:8c:4f:7c:66:36:a4:c3:f5:29:5f:22:1e:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:07:52:31:65:A3:ED:1D:58:C8:04:4D:0F:1C:18:E1:98:BF:6F:05
            X509v3 Authority Key Identifier:
                keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/51B6AD3E03B211F0BDAF273BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:1d:01:2c:43:b5:3e:25:f1:4d:9a:51:55:4f:0a:30:4d:cd:
         b2:fc:83:8f:eb:dd:ea:ec:97:05:71:fc:d1:20:75:9d:02:2a:
         e4:ee:c6:73:87:2b:31:2c:c5:f8:8e:c1:ab:0c:f8:f9:f9:7d:
         fc:9d:0b:b0:be:56:8c:cf:e7:fc:43:39:56:43:ed:bd:69:4a:
         ba:f9:67:80:e2:8c:58:93:23:8a:ec:9a:fc:e2:7a:b3:17:d6:
         d9:5d:b9:bf:b9:48:9e:b9:2d:b2:1d:dd:b2:c8:b4:d5:4f:2f:
         de:cd:75:8c:ad:13:01:29:f2:96:75:cd:6a:01:22:0d:bc:ca:
         2a:9a:59:7a:90:97:66:47:1c:e5:96:bc:f7:80:e2:66:36:12:
         e2:38:d1:16:bb:92:e9:6e:fd:c9:3c:74:0d:fb:9c:e8:5a:03:
         40:46:82:d7:27:1f:7a:de:2a:01:27:3c:a7:f0:f2:cd:b8:97:
         f6:81:a5:35:c6:08:08:5b:9a:e2:6a:c5:64:3e:60:2a:aa:8b:
         45:79:35:aa:af:76:0a:16:26:d4:8b:e4:66:a7:d1:ce:84:36:
         b2:01:e7:36:e6:2b:32:17:e7:66:0d:1e:87:74:96:19:7e:88:
         08:88:f8:29:d4:bd:05:eb:cc:f0:d1:49:5d:a4:4a:8b:20:c4:
         64:bd:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:22 2026 by rpki-client