Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/8EDB9CFA36E811F1BFFA812CB6833773.roa
File:                     8EDB9CFA36E811F1BFFA812CB6833773.roa (raw, json)
Hash identifier:          7OAf1fWcU7Eizq1lk/uIcYv6M0vx4v2n1MAZJsR+jr8=
Subject key identifier:   A0:C2:3D:F9:0B:E3:2C:4A:4A:F5:5F:9D:FE:58:52:E1:57:86:39:6B
Certificate issuer:       /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Certificate serial:       0546
Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/8EDB9CFA36E811F1BFFA812CB6833773.roa
Signing time:             Mon 13 Apr 2026 03:26:28 +0000
ROA not before:           Mon 13 Apr 2026 03:26:28 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     136009
IP address blocks:        103.175.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl
                          rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350 (0x546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
        Validity
            Not Before: Apr 13 03:26:28 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69dc6264-53a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:63:c0:c1:9d:79:59:24:62:e1:00:1b:a9:
                    b6:98:c9:27:86:15:2b:9f:58:a5:7e:72:d9:f2:08:
                    07:6d:9e:63:42:29:34:0e:e9:43:d0:7f:a8:23:39:
                    c7:d8:a1:79:56:4b:0f:ef:1b:25:ea:a8:25:ea:2b:
                    82:e3:e0:55:bc:fd:d0:74:7b:ec:57:1b:67:0a:ec:
                    0b:01:52:81:a1:a9:f7:00:1a:5f:51:62:01:04:0d:
                    94:17:f5:d1:43:78:84:66:0d:e3:d7:7e:63:a2:56:
                    31:e8:0e:38:01:0e:4e:fd:eb:a4:4e:9c:e8:6c:0f:
                    b1:d4:d1:74:7e:ff:37:2a:67:d6:61:af:05:f1:79:
                    27:01:af:d9:93:bb:2d:de:18:f0:fb:ed:d2:46:fa:
                    d9:b9:84:14:0b:a3:f5:9e:96:e2:16:ae:cb:35:a6:
                    ac:bc:c6:13:74:b7:49:6d:02:84:d3:37:28:a3:0b:
                    8a:9f:d9:e7:2b:7f:8d:94:97:7e:d1:d0:78:e8:28:
                    ed:ec:5e:da:80:6e:a5:a9:ac:52:1c:d7:4c:b1:2d:
                    a0:d3:4a:d9:5a:c5:10:fa:31:1e:ce:64:87:da:bd:
                    30:1c:58:d4:43:06:e4:e1:79:63:4a:7c:04:0a:cb:
                    53:42:ce:65:f5:48:e4:35:68:6d:0f:0f:71:08:02:
                    ad:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C2:3D:F9:0B:E3:2C:4A:4A:F5:5F:9D:FE:58:52:E1:57:86:39:6B
            X509v3 Authority Key Identifier:
                keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/8EDB9CFA36E811F1BFFA812CB6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:58:a2:57:2a:dc:67:4e:c0:e9:cd:e5:a7:ae:17:86:b2:f8:
         8b:3a:68:57:7f:b3:a1:dc:c8:2d:a9:c3:2e:6d:3a:97:58:2b:
         a0:db:ae:af:24:0b:31:ea:9a:9c:e7:d2:29:e4:70:7f:54:27:
         26:c6:7d:08:b4:59:8b:90:11:93:f4:89:34:20:1e:3c:df:1b:
         85:c0:a6:dc:cb:58:e1:92:c9:57:c7:45:b1:6b:1d:d5:7d:e9:
         c4:f9:de:8b:8a:58:d0:76:f8:3d:42:db:39:75:98:a1:7f:95:
         97:31:ee:43:27:b4:dc:04:8e:81:6b:d7:8f:3f:70:d9:66:76:
         71:ec:85:1f:21:6a:5a:41:42:89:0e:15:27:9a:5a:3e:02:53:
         7c:0c:55:6f:6d:ac:0d:5f:c8:5c:6f:4b:c8:33:af:42:2e:d5:
         95:6b:fb:09:e4:9f:f5:f0:4e:29:66:33:35:dc:fe:4c:a6:23:
         ee:ea:e6:12:94:4e:28:b3:77:40:87:17:bb:e6:85:c1:f7:35:
         4d:7d:67:14:b5:95:ff:13:6f:fd:43:5e:22:ff:73:e3:41:77:
         46:5c:c4:0a:f2:aa:2c:b9:7a:50:d7:5c:6d:75:43:9a:e9:de:
         d3:4b:2d:51:f5:e9:ef:b7:e7:91:fa:fa:36:6b:53:1d:58:a0:
         47:17:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:56 2026 by rpki-client