Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9ADBEC30DA6411EF95F32A7FC4F9AE02.roa
File:                     9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (raw, json)
Hash identifier:          C0leLcL5XAeuq6qwaXMLO1xziKzhUjhh+w08AfqJr64=
Subject key identifier:   2D:32:BC:28:07:BE:49:2A:96:DC:C8:13:58:C7:D8:45:5D:DC:26:58
Certificate issuer:       /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial:       0713
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9ADBEC30DA6411EF95F32A7FC4F9AE02.roa
Signing time:             Mon 30 Mar 2026 22:29:11 +0000
ROA not before:           Mon 30 Mar 2026 22:29:11 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137182
IP address blocks:        103.162.102.0/23 maxlen: 24
                          2407:1740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
                          rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811 (0x713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
        Validity
            Not Before: Mar 30 22:29:11 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69caf937-a526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:fb:87:f2:74:52:c2:c9:cd:67:62:4e:14:
                    f1:36:65:01:72:a7:e6:81:8f:10:a3:c0:6d:83:a7:
                    56:6e:8e:d2:68:9c:c8:13:dd:81:1d:71:07:ea:67:
                    44:67:ce:c5:0a:7d:28:be:4d:58:03:6f:16:06:7e:
                    96:79:87:65:fa:4e:b3:16:ba:26:9e:90:4c:2c:17:
                    80:f1:73:3f:a3:fb:a6:8c:6d:4d:bb:0c:18:1a:1d:
                    56:b1:85:c6:92:a6:ab:6a:5d:4e:a6:95:49:e4:42:
                    2f:0e:de:4f:4e:f1:07:e1:eb:3b:b1:bc:0e:53:f7:
                    0a:13:10:ff:96:51:9d:57:55:b0:a2:9d:e9:36:71:
                    11:ec:88:0b:37:0a:85:f6:6d:c8:92:57:fb:47:b1:
                    1e:7a:d5:14:14:5a:83:db:02:b7:27:c2:bd:6a:8f:
                    32:ae:ca:b8:bc:51:2a:f0:a8:70:a4:66:0a:15:ec:
                    45:00:8e:e5:f2:5b:7b:73:73:24:ad:84:0c:e9:1d:
                    cc:0f:ec:03:80:3d:a1:43:35:8c:12:85:c2:e2:79:
                    30:b4:7a:2c:ae:e1:fa:ef:b1:1a:ba:9a:ca:ae:47:
                    17:ec:2a:d0:24:23:d5:60:3e:40:bd:5a:d3:a4:46:
                    ef:35:ed:62:39:94:45:b4:7f:a3:ea:9f:a5:fb:fb:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:BC:28:07:BE:49:2A:96:DC:C8:13:58:C7:D8:45:5D:DC:26:58
            X509v3 Authority Key Identifier:
                keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9ADBEC30DA6411EF95F32A7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.102.0/23
                IPv6:
                  2407:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:74:6c:ce:30:13:bb:e4:86:80:5e:cd:e4:71:97:43:95:8b:
         c4:f8:d1:32:f1:29:43:46:86:b6:a8:51:61:65:8c:12:04:d4:
         24:6c:19:73:60:13:7a:48:e9:b3:5e:41:c6:07:71:bb:88:3e:
         15:b1:bc:18:9f:78:39:e2:5d:06:ac:80:14:04:06:8e:b1:78:
         37:fc:12:31:a6:8b:44:38:ea:56:bb:52:a4:2c:3e:5f:ca:54:
         5a:31:bc:23:74:3e:3e:a6:10:59:d0:03:f0:ed:d0:e2:6a:2b:
         89:1a:f2:68:09:f7:46:3b:60:bd:82:1e:38:a1:b5:68:3a:e8:
         58:97:f7:ea:bb:1a:a9:b7:0b:e4:60:aa:55:e3:f9:70:a5:20:
         db:b3:9d:e1:43:e9:31:fd:a0:53:0c:73:1b:44:33:28:80:62:
         bb:17:9d:81:1c:10:dc:d6:45:34:97:aa:de:6c:2d:58:8a:86:
         ca:32:ba:df:cb:ad:6d:9c:b9:77:62:94:ae:cf:af:7d:3f:6d:
         9a:d7:a3:8a:f1:4a:67:90:7a:d7:86:ba:fa:31:aa:88:51:f5:
         4d:12:aa:1c:84:17:96:02:58:f7:50:a1:f1:bb:41:bf:bf:11:
         07:e2:30:8f:69:c6:26:dd:f6:e9:73:5f:f6:7e:9f:80:95:85:
         f2:7d:50:4c
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw
QTUyOEVEQzAwHhcNMjYwMzMwMjIyOTExWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNhZjkzNy1hNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj5X7h/J0UsLJzWdiThTxNmUBcqfmgY8Qo8Btg6dWbo7SaJzIE92BHXEH6mdE
Z87FCn0ovk1YA28WBn6WeYdl+k6zFromnpBMLBeA8XM/o/umjG1NuwwYGh1WsYXG
kqaral1OppVJ5EIvDt5PTvEH4es7sbwOU/cKExD/llGdV1Wwop3pNnER7IgLNwqF
9m3Iklf7R7EeetUUFFqD2wK3J8K9ao8yrsq4vFEq8KhwpGYKFexFAI7l8lt7c3Mk
rYQM6R3MD+wDgD2hQzWMEoXC4nkwtHosruH677EauprKrkcX7CrQJCPVYD5AvVrT
pEbvNe1iOZRFtH+j6p+l+/u0DwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFC0yvCgH
vkkqltzIE1jH2EVd3CZYMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw
N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI4MTIvQzFFNUREMUU4MDdCMTFFQkE4M0FDMDFEQzRGOUFFMDIvOUFEQkVDMzBE
QTY0MTFFRjk1RjMyQTdGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ6JmMA0EAgACMAcDBQAkBxdAMA0GCSqGSIb3DQEBCwUAA4IBAQBK
dGzOMBO75IaAXs3kcZdDlYvE+NEy8SlDRoa2qFFhZYwSBNQkbBlzYBN6SOmzXkHG
B3G7iD4VsbwYn3g54l0GrIAUBAaOsXg3/BIxpotEOOpWu1KkLD5fylRaMbwjdD4+
phBZ0APw7dDiaiuJGvJoCfdGO2C9gh44obVoOuhYl/fquxqptwvkYKpV4/lwpSDb
s53hQ+kx/aBTDHMbRDMogGK7F52BHBDc1kU0l6rebC1YiobKMrrfy61tnLl3YpSu
z699P22a16OK8UpnkHrXhrr6MaqIUfVNEqochBeWAlj3UKHxu0G/vxEH4jCPacYm
3fbpc1/2fp+AlYXyfVBM
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:20 2026 by rpki-client