Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/26C39BB6010511EE8C750D39C4F9AE02.roa
File:                     26C39BB6010511EE8C750D39C4F9AE02.roa (raw, json)
Hash identifier:          s6oc6i5VVJxtF+Wn79gzllXYmJLcagL3yLCjjHB1Er0=
Subject key identifier:   6C:D9:A8:9E:B4:6D:43:9D:BA:77:5C:85:76:9E:15:6E:FC:31:F5:0B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C1E
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/26C39BB6010511EE8C750D39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:31 +0000
ROA not before:           Fri 04 Jul 2025 14:50:42 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38393
IP address blocks:        103.143.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15390 (0x3c1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul  4 14:50:42 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4af07-d5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:69:c2:1f:73:5d:a3:71:19:9d:83:44:3e:aa:
                    cf:1a:eb:14:df:6c:ca:f3:a2:35:cd:dd:d9:ce:bc:
                    2e:7e:25:8c:02:83:f0:37:46:65:be:55:a2:79:8b:
                    7e:aa:2f:1a:4b:e2:44:e9:49:24:7c:f3:73:7a:be:
                    8a:0d:9c:17:6b:1d:fc:d0:99:d8:1d:65:56:e6:d9:
                    3b:bf:61:05:5b:39:6c:01:d8:fe:fd:a8:2d:54:9f:
                    00:ad:5b:87:04:6d:e1:18:c1:4d:19:af:4a:f2:e4:
                    93:e2:bd:dc:1a:e2:8c:8b:21:84:b4:3a:a4:d8:03:
                    69:c1:21:1b:50:73:d1:89:e5:71:6d:ad:28:cc:36:
                    b1:f2:93:26:fe:7f:0e:d7:6c:a9:a1:fd:7e:63:6a:
                    c8:66:d7:cc:f3:90:85:b0:23:1d:e4:81:f0:1a:8d:
                    8f:02:a3:8a:26:a9:73:d4:b7:c1:a4:ca:a5:65:3e:
                    9b:cd:b1:83:f0:1c:29:44:6b:3e:1c:12:9a:c8:af:
                    2a:be:15:3f:64:f2:f5:4f:4b:87:c3:bd:68:24:c2:
                    fa:60:82:4a:9a:63:7e:17:c5:2f:97:8a:1a:51:ff:
                    cd:1e:f1:c6:79:94:68:99:34:74:d4:14:93:e4:02:
                    07:7e:a5:00:7c:2d:6d:d1:c1:83:23:6e:67:20:45:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D9:A8:9E:B4:6D:43:9D:BA:77:5C:85:76:9E:15:6E:FC:31:F5:0B
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/26C39BB6010511EE8C750D39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:99:12:fd:04:81:16:51:0a:5e:05:80:e9:17:98:d2:19:89:
         7b:48:17:20:4c:90:44:e4:bd:00:59:0a:2f:26:a2:e8:3d:2c:
         91:ad:d6:2e:ef:0f:02:69:94:57:0b:a5:36:32:b0:ba:5c:e1:
         84:f0:ef:6c:ba:63:d8:7f:23:5d:0e:33:cf:0a:25:c3:4b:88:
         87:bc:e5:19:88:af:60:c0:ed:fc:29:cd:ca:37:f6:66:53:40:
         54:18:63:00:a5:98:fe:d0:63:00:ad:27:29:b9:50:62:5d:c6:
         62:c0:6f:13:48:06:29:29:33:48:d8:4c:ed:6a:f6:1f:f3:5b:
         7c:a7:f1:8b:42:39:00:28:a1:14:cd:7e:6b:ec:5e:91:d3:bc:
         d6:64:e5:c4:ea:1f:7e:4e:0b:27:ef:66:2f:ea:0e:c4:fd:4a:
         d4:6a:04:10:f1:0c:b6:34:3a:62:e7:cc:48:d6:64:91:5e:3f:
         76:ab:1d:2b:bf:0f:7c:a2:18:aa:fc:e7:2c:34:47:6b:f0:f0:
         d7:42:0d:2e:28:fd:8c:75:b8:fb:15:51:4d:74:f3:d5:3c:a5:
         13:7d:fc:a7:a5:38:4d:6f:af:9d:f7:6e:f8:ca:4a:1a:9e:f5:
         c8:57:6c:20:a8:18:02:c6:d1:ea:e7:33:d5:fe:d5:63:ed:20:
         41:2e:2c:f3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDQyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWYwNy1kNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4mnCH3Ndo3EZnYNEPqrPGusU32zK86I1zd3ZzrwufiWMAoPwN0ZlvlWieYt+
qi8aS+JE6UkkfPNzer6KDZwXax380JnYHWVW5tk7v2EFWzlsAdj+/agtVJ8ArVuH
BG3hGMFNGa9K8uST4r3cGuKMiyGEtDqk2ANpwSEbUHPRieVxba0ozDax8pMm/n8O
12ypof1+Y2rIZtfM85CFsCMd5IHwGo2PAqOKJqlz1LfBpMqlZT6bzbGD8BwpRGs+
HBKayK8qvhU/ZPL1T0uHw71oJML6YIJKmmN+F8Uvl4oaUf/NHvHGeZRomTR01BST
5AIHfqUAfC1t0cGDI25nIEXXVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGzZqJ60
bUOdundchXaeFW78MfULMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMjZDMzlCQjYw
MTA1MTFFRThDNzUwRDM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ49PMA0GCSqGSIb3DQEBCwUAA4IBAQCmmRL9BIEWUQpeBYDpF5jS
GYl7SBcgTJBE5L0AWQovJqLoPSyRrdYu7w8CaZRXC6U2MrC6XOGE8O9sumPYfyNd
DjPPCiXDS4iHvOUZiK9gwO38Kc3KN/ZmU0BUGGMApZj+0GMArScpuVBiXcZiwG8T
SAYpKTNI2EztavYf81t8p/GLQjkAKKEUzX5r7F6R07zWZOXE6h9+Tgsn72Yv6g7E
/UrUagQQ8Qy2NDpi58xI1mSRXj92qx0rvw98ohiq/OcsNEdr8PDXQg0uKP2Mdbj7
FVFNdPPVPKUTffynpThNb6+d9274ykoanvXIV2wgqBgCxtHq5zPV/tVj7SBBLizz
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:18 2026 by rpki-client