Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/CA04831060B811F19C6DC3147F47A888.roa
File:                     CA04831060B811F19C6DC3147F47A888.roa (raw, json)
Hash identifier:          rOz2RbSRemVOFrRimoMVT6/+5tzDGcbwoE9kdakjgFA=
Subject key identifier:   A8:BE:39:C5:CF:56:E3:46:8E:34:12:23:01:B2:24:21:6B:99:1B:E3
Certificate issuer:       /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial:       1341
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/CA04831060B811F19C6DC3147F47A888.roa
Signing time:             Fri 05 Jun 2026 08:30:21 +0000
ROA not before:           Fri 05 Jun 2026 08:30:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.104.19.0/24 maxlen: 24
                          103.125.244.0/22 maxlen: 22
                          103.125.245.0/24 maxlen: 24
                          116.89.244.0/24 maxlen: 24
                          2401:fdc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
                          rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4929 (0x1341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
        Validity
            Not Before: Jun  5 08:30:21 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a22891c-ed8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:c1:ea:32:8b:0c:1b:9a:fb:1d:85:71:4b:
                    07:dc:31:58:9a:65:d3:97:eb:25:3b:eb:a9:ac:d7:
                    e6:38:32:06:6c:27:23:8a:03:6e:f9:ae:92:76:53:
                    0a:99:ad:65:99:38:0e:9c:cb:af:0f:5d:af:13:c8:
                    8b:1d:81:b7:dd:d0:c4:8b:43:55:4a:c0:e6:d4:dd:
                    50:2f:72:fb:a6:3f:f1:ae:a0:f5:8f:96:4d:c4:33:
                    85:1a:8f:68:56:48:bf:27:8a:30:c7:6c:5b:fa:64:
                    bd:73:76:02:30:6b:af:a8:a9:96:c0:7b:12:c4:ee:
                    e4:22:c8:59:9c:4c:45:4e:0b:9b:54:90:52:cb:c2:
                    ec:ae:c0:d7:e3:f1:41:42:39:bd:b1:00:93:a5:43:
                    8f:7b:ab:32:2b:24:e8:40:b5:cc:19:dc:a6:70:cd:
                    ac:e9:6a:0c:49:45:97:d8:84:cd:b5:c5:a7:97:11:
                    be:6c:99:d7:eb:c4:9c:9b:60:d3:f4:b7:d8:ef:5b:
                    44:3a:29:2c:1e:9b:46:d1:b6:d9:cb:ff:1b:70:dd:
                    e5:65:aa:0b:aa:ad:75:0e:50:ac:18:29:34:08:53:
                    96:19:62:03:c9:8f:0c:40:6e:4d:24:3e:1d:1c:55:
                    70:1f:0e:34:65:4c:8f:19:60:3a:6a:73:84:14:49:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BE:39:C5:CF:56:E3:46:8E:34:12:23:01:B2:24:21:6B:99:1B:E3
            X509v3 Authority Key Identifier:
                keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/CA04831060B811F19C6DC3147F47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.19.0/24
                  103.125.244.0/22
                  116.89.244.0/24
                IPv6:
                  2401:fdc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:31:d0:55:0d:94:04:5d:e4:e9:23:7f:7d:21:f0:d7:00:
         fe:b7:5b:a5:e6:2f:93:a4:c6:4b:bd:b3:3d:03:df:b7:c4:e1:
         4c:51:30:61:55:da:91:62:26:cc:5e:6f:88:02:a4:1b:3e:ea:
         89:25:bc:65:c1:88:10:48:8e:eb:0a:be:0f:ac:f5:b4:87:60:
         02:fd:58:d3:3f:35:35:f2:cf:30:d3:a2:9f:7e:8d:de:53:f5:
         21:90:f5:6c:d9:8d:7d:de:41:7a:3f:34:91:9b:0e:82:56:4b:
         8f:9f:a5:31:97:5e:c2:cf:96:3c:8b:83:f1:a9:17:18:0c:ff:
         29:07:38:80:63:3b:c4:a9:42:39:a6:11:08:dc:0e:0a:19:8d:
         26:58:b2:8b:f0:38:79:64:c4:83:a3:ba:4c:21:71:ae:40:fd:
         2a:81:ec:5c:45:83:a0:b0:55:d5:72:3e:64:9f:2d:cd:c3:f7:
         f3:81:35:d3:97:1a:2c:60:0e:0c:c7:59:b0:03:71:58:e0:6c:
         ba:d1:47:5c:d8:fc:d4:2c:3e:55:3c:9c:36:d3:e2:8f:73:8f:
         25:c1:03:45:27:9d:c7:96:b0:a8:08:8d:07:35:76:dc:84:0f:
         11:e6:5d:42:66:51:ef:35:fb:95:a4:eb:f2:f4:a3:f1:f9:fe:
         47:9c:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:24:01 2026 by rpki-client