Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/A5465844546711F18E89C651B3833773.roa
File:                     A5465844546711F18E89C651B3833773.roa (raw, json)
Hash identifier:          gMXHJxaR0nvtlkJPCuRN1IgaESwrx+pWszPBkIn6wyU=
Subject key identifier:   DC:E5:FB:9C:67:CB:A0:39:92:62:26:F9:EF:99:8C:E2:E2:8B:E8:6C
Certificate issuer:       /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Certificate serial:       0578
Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/A5465844546711F18E89C651B3833773.roa
Signing time:             Wed 20 May 2026 16:19:45 +0000
ROA not before:           Wed 20 May 2026 16:19:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     148974
IP address blocks:        103.175.17.0/24 maxlen: 24
                          2001:df7:e680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl
                          rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
        Validity
            Not Before: May 20 16:19:45 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a0ddf21-17c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:58:85:5b:d7:19:a0:58:2a:40:5c:6e:ef:
                    70:52:f8:99:6a:eb:ab:73:e5:a7:18:8c:c2:1a:72:
                    10:9d:18:84:8a:94:9a:c4:10:27:d2:f5:38:c1:ab:
                    27:f0:35:52:29:95:f9:19:6c:93:2e:5c:f0:89:28:
                    d2:5a:69:1a:d0:f6:f1:fe:4d:a1:cf:bb:3e:e2:f7:
                    67:08:86:77:1e:d9:6f:f6:c2:84:fe:53:3a:f5:09:
                    83:33:38:dd:29:7c:b7:0a:29:c1:34:bc:5c:d3:2b:
                    1b:d5:97:ed:4c:01:ba:d2:e2:71:f3:f6:1e:75:67:
                    d7:74:e5:14:24:cf:82:d2:09:50:b2:78:da:32:b8:
                    c2:f2:46:11:73:29:4d:3a:71:39:62:22:df:04:5d:
                    87:18:85:9c:c0:a9:c2:8a:dc:71:a3:f4:af:3c:2f:
                    6d:29:b7:88:c4:43:05:55:d3:06:34:16:ae:17:51:
                    22:27:09:96:a6:68:7e:c6:0c:64:a7:4e:ec:48:8f:
                    ab:ba:04:b6:db:b1:4e:e7:bc:bb:1c:d5:3b:7e:df:
                    67:76:56:2a:78:1f:ae:a0:0c:72:4b:c5:98:08:5a:
                    23:e0:9f:b8:51:23:15:77:86:72:ee:8e:1d:99:13:
                    85:ee:fd:90:77:7c:45:63:de:1a:db:0e:f3:4f:c6:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E5:FB:9C:67:CB:A0:39:92:62:26:F9:EF:99:8C:E2:E2:8B:E8:6C
            X509v3 Authority Key Identifier:
                keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/A5465844546711F18E89C651B3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.17.0/24
                IPv6:
                  2001:df7:e680::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:24:c2:d0:ec:e5:e6:e7:a9:29:b1:a8:e3:bc:35:45:d5:36:
         92:11:58:6b:4e:29:1c:c4:74:45:c3:a7:a7:52:7c:10:b7:e8:
         74:e1:95:fb:3f:da:ab:d8:f2:2d:af:a7:b4:1b:f2:dc:9e:25:
         62:cb:e3:12:ab:7e:8e:f4:ef:19:1d:d5:10:43:e5:5a:9a:e5:
         26:8f:10:aa:c7:21:dd:20:53:da:d4:bc:e9:99:75:af:92:f6:
         c2:73:61:36:16:59:21:dd:cc:e6:1d:ef:7e:e9:52:28:f1:71:
         45:18:e0:53:2d:6b:e9:34:d1:c2:06:da:7b:eb:22:dc:c0:d4:
         dd:20:92:21:68:cf:37:1a:e6:a5:de:16:33:67:47:e8:7b:61:
         54:92:ac:05:56:06:ca:ca:32:c6:58:e7:f3:2e:e3:51:db:cd:
         d0:16:88:52:59:91:d3:9e:e5:84:65:a2:68:4f:f7:cf:28:79:
         da:44:81:26:e1:8c:f2:eb:87:35:15:78:a4:e8:7b:e2:39:e9:
         31:fa:13:e9:3e:59:4f:e2:58:d8:17:16:03:36:7b:69:c1:ea:
         34:cf:dd:fa:22:11:7d:2e:9b:31:a9:61:b5:07:01:28:9a:d8:
         be:64:94:d6:1a:19:3d:3c:cc:ec:67:d2:0d:b4:b6:58:8f:62:
         07:44:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:53 2026 by rpki-client