Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa
File:                     67CDF190321211EEA6FE6D43C4F9AE02.roa (raw, json)
Hash identifier:          IPJpEJ2b1P619Sycsmd/PwlrksD/ztfD2mrryV7B1ps=
Subject key identifier:   5B:7B:43:1A:13:11:D0:CF:A2:19:3A:CE:D9:7F:E2:92:12:8A:8B:F1
Certificate issuer:       /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial:       01F7
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:08:26 +0000
ROA not before:           Wed 15 Oct 2025 06:29:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     6939
IP address blocks:        103.100.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
                          rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146ABC, serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
        Validity
            Not Before: Oct 15 06:29:55 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4566a-c4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:3e:1b:1c:cd:dc:f6:51:fa:31:70:f4:ed:
                    3b:d2:4b:d8:7f:a1:73:68:6f:c0:4b:67:0e:39:63:
                    d3:5f:3f:35:63:5b:b5:72:6b:ed:e4:27:93:eb:0f:
                    82:ab:a1:8a:8b:06:a4:a7:bd:38:65:98:bd:85:15:
                    62:22:fc:8a:68:3a:a6:c3:4f:7d:3b:ca:b3:e3:9d:
                    31:71:a9:f5:53:47:84:3c:0d:71:fd:21:95:b4:a0:
                    8d:f6:b0:21:c9:f3:6f:02:47:b7:da:cc:07:b5:de:
                    ad:0c:05:a7:d9:c9:13:b4:28:c7:53:b3:1a:df:a0:
                    25:15:0e:73:1a:b0:31:f4:69:43:02:0b:db:4d:68:
                    7d:59:77:7f:65:2f:62:13:19:89:d7:bf:b9:2f:63:
                    e0:0f:57:e6:e0:ac:5f:86:8a:1a:cb:e3:1b:3a:55:
                    47:e4:91:4d:7b:8a:90:c9:45:f4:41:d8:38:5f:12:
                    33:51:00:cd:f6:b6:9f:8e:1c:b0:c8:54:10:5a:25:
                    d6:a2:bd:52:ae:66:af:fe:5c:2e:6e:77:af:28:f6:
                    73:f8:08:dd:19:b9:c9:44:c7:be:2e:5f:6d:61:cc:
                    7b:a4:fb:42:1d:7e:9b:bf:d9:6a:b2:77:b8:73:9c:
                    b4:28:51:71:07:ee:99:29:d3:f6:09:90:be:95:de:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7B:43:1A:13:11:D0:CF:A2:19:3A:CE:D9:7F:E2:92:12:8A:8B:F1
            X509v3 Authority Key Identifier:
                keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:76:1b:21:62:08:7b:47:ca:55:2a:d3:9b:67:45:4d:fe:2d:
         49:21:66:c4:49:a4:19:43:72:98:86:9b:cd:2a:47:4c:e6:36:
         c3:ae:4a:00:41:b9:f2:03:52:b6:b4:28:78:04:dc:53:5f:95:
         04:12:80:8f:19:6f:04:64:86:78:78:23:1f:35:51:44:b5:51:
         ca:05:cb:79:9e:80:c9:b6:3d:fd:1b:c1:82:00:3c:75:d0:60:
         97:f2:be:b4:4e:eb:ec:39:ae:50:1b:c4:98:55:a5:f5:05:dd:
         5b:22:b6:da:7f:1c:f9:79:c6:5f:fb:b3:cc:95:60:2a:b7:27:
         4d:67:f9:87:5f:b0:34:1c:81:ad:d4:7b:86:9f:52:bf:d0:7a:
         21:cb:09:7a:b1:30:3b:92:16:1b:55:6b:71:52:4a:a3:d8:4e:
         31:9f:bb:ec:7f:03:7d:87:cd:20:ec:58:fa:df:45:6c:28:e2:
         b3:91:31:2b:53:fa:f8:ba:00:a7:af:ad:8c:f3:cb:5c:10:fd:
         0c:b6:9d:39:b0:08:4d:a2:0c:43:ff:84:9c:0f:77:d3:a2:52:
         de:9e:48:eb:f0:de:5c:98:11:bd:15:c2:04:d6:09:32:33:84:
         c2:c8:86:bc:97:6c:8c:07:6d:23:ec:79:ea:e2:34:d4:58:16:
         3e:ca:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:25:30 2026 by rpki-client