Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa
File:                     A7B015CEF1DC11EEA578C27DC4F9AE02.roa (raw, json)
Hash identifier:          rQ+1OcyjHezWFqWYZ65A+pce2X8sBRkVZ+HRYo38KSk=
Subject key identifier:   D6:48:07:38:A3:18:CE:CE:05:53:23:D2:53:04:F2:06:9B:6B:88:81
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       01FA
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:17:28 +0000
ROA not before:           Tue 09 Sep 2025 03:39:38 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151343
IP address blocks:        103.204.30.0/23 maxlen: 24
                          2001:df2:75c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Sep  9 03:39:38 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3f618-53be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:35:84:17:28:5f:9e:e5:15:5a:76:4b:13:
                    5f:e0:6f:c0:74:64:2e:ae:59:c0:ae:86:43:e8:08:
                    93:2e:41:df:b9:40:88:c6:e6:0a:f1:71:4c:52:cf:
                    9b:68:bf:b7:ef:2d:e4:03:ce:a1:ff:ac:d9:02:dc:
                    a3:a8:63:69:5c:d0:fc:ea:40:d7:35:fe:8e:7e:fc:
                    bc:96:ea:ed:9c:8b:03:6b:d7:2e:0d:ee:b1:a5:9d:
                    4d:dc:6f:5e:10:4a:cb:4d:32:3d:72:92:16:e2:4c:
                    61:09:57:1d:1c:55:c7:5f:7b:9a:32:54:0a:66:c6:
                    87:9a:f4:ad:f2:0b:82:b7:bd:82:25:80:7d:16:85:
                    e8:0c:60:7d:ac:2f:6c:cf:bb:4f:84:c9:82:c2:9f:
                    95:c9:57:e6:f4:a0:f3:e8:f3:d0:cd:8a:c2:17:3b:
                    c1:d3:49:5e:94:23:0f:cb:d4:09:31:14:83:14:81:
                    e4:95:3b:8c:e0:6c:3b:48:6b:63:31:90:18:77:e6:
                    99:1d:41:bd:8c:4f:f6:e5:ec:51:e0:c0:21:8f:7d:
                    8e:53:f3:c0:b2:40:68:d8:3d:88:dd:ad:cc:eb:2a:
                    80:83:2e:32:27:11:a5:19:5d:2b:45:db:2b:8d:c6:
                    55:24:cb:0b:a7:ba:41:ee:30:69:9c:37:41:6f:0d:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:48:07:38:A3:18:CE:CE:05:53:23:D2:53:04:F2:06:9B:6B:88:81
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.30.0/23
                IPv6:
                  2001:df2:75c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:b8:28:29:46:54:85:c2:d2:5a:5e:e1:4d:bd:3b:11:fc:67:
         78:0b:00:71:f6:c3:41:e0:bc:ef:5e:0a:a3:40:b3:42:76:1a:
         6e:9f:83:6c:d6:1f:20:a0:78:fd:39:bf:a7:e5:74:4a:7d:99:
         7d:de:c4:f8:8d:58:69:fa:b3:cb:ed:d0:b1:d0:db:fa:98:b2:
         6f:09:3d:3b:a0:c4:93:4e:de:84:fd:d8:34:95:b4:af:5e:ba:
         7b:38:be:a5:f2:43:b0:17:72:be:0f:32:1a:50:7d:d2:02:c0:
         93:5d:f1:bc:dc:b9:65:a5:14:3e:25:6c:af:bf:a1:b4:09:bc:
         96:4e:46:ab:fd:4e:ae:9a:51:91:48:70:65:5a:33:12:b5:e3:
         2b:ea:78:a9:21:fd:bd:42:9d:aa:a6:31:14:08:4b:82:b6:01:
         61:20:b2:5d:75:0f:b2:a5:a1:29:53:0b:26:49:9d:c3:8b:a6:
         68:7a:68:ae:74:68:4f:f5:9d:7d:00:64:13:56:d2:32:f8:a9:
         99:b4:be:bb:82:07:e2:4e:18:9c:ec:5d:37:0e:ae:86:66:a5:
         07:3e:05:2a:b2:0a:6b:0a:47:ef:fc:dc:4f:c2:dc:7c:90:f8:
         5a:7b:03:e1:63:d5:e6:9f:fd:ae:db:f6:eb:ab:79:39:ad:4e:
         86:f4:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:58 2026 by rpki-client