Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/E135D94C04A511EF84B5D783C4F9AE02.roa
File:                     E135D94C04A511EF84B5D783C4F9AE02.roa (raw, json)
Hash identifier:          mxa8tydWQjiy2bpcgk7RtwgTSB1dfJQU4fJvs9xpLbE=
Subject key identifier:   E1:14:78:2F:5B:49:70:40:FB:48:52:A4:C6:68:64:8F:CA:C3:8F:73
Certificate issuer:       /CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Certificate serial:       019A
Authority key identifier: 54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/E135D94C04A511EF84B5D783C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 05:35:49 +0000
ROA not before:           Fri 05 Jun 2026 05:35:49 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152709
IP address blocks:        103.39.120.0/23 maxlen: 23
                          103.39.120.0/24 maxlen: 24
                          103.39.121.0/24 maxlen: 24
                          2001:df3:b740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
                          rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165556, serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
        Validity
            Not Before: Jun  5 05:35:49 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a226035-86f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:d4:1a:b4:ea:53:e5:93:f6:1a:59:cb:b3:
                    ae:7d:4b:d0:a0:b9:6b:7c:67:80:33:5c:50:27:9c:
                    55:aa:9c:85:4e:eb:ec:60:bf:cf:f0:c5:c3:88:54:
                    1e:90:a2:82:31:53:25:5e:cf:e1:21:08:e5:e7:2e:
                    a7:bd:b0:24:72:1d:af:3c:b2:0a:ef:0f:55:ca:bd:
                    56:ce:e8:a6:99:6e:96:d0:31:1d:a5:95:1a:f5:f6:
                    ae:7d:d3:78:ab:98:7c:01:24:34:9e:cd:1e:6c:0c:
                    6d:86:11:be:fa:0c:b2:09:fc:fb:a9:b9:fc:d1:df:
                    f7:95:2b:ce:49:7f:b6:79:c2:a5:4d:0e:97:d7:33:
                    43:05:82:dc:51:a5:b5:fd:d7:f4:50:ac:dc:e6:8e:
                    31:ed:fd:4b:8d:d1:f7:b2:18:e0:cf:d9:f1:30:8a:
                    b8:98:8d:8b:37:a8:6a:05:28:25:a7:c0:0d:e3:56:
                    29:75:b3:f9:f2:82:fb:be:f1:e6:15:93:0c:28:fe:
                    5f:5b:8d:31:7e:b4:e2:9e:9e:96:fe:92:1a:06:b0:
                    8a:e0:c0:f4:cf:4f:23:dd:4e:16:ec:cf:88:fb:fc:
                    28:4b:2a:18:9a:ec:65:76:49:49:18:87:87:77:63:
                    c4:30:c4:a1:81:0c:9a:2e:22:6e:2d:60:a4:c4:7a:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:14:78:2F:5B:49:70:40:FB:48:52:A4:C6:68:64:8F:CA:C3:8F:73
            X509v3 Authority Key Identifier:
                keyid:54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/E135D94C04A511EF84B5D783C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.120.0/23
                IPv6:
                  2001:df3:b740::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:a1:62:cf:26:eb:dc:4b:a2:35:75:9a:27:99:05:64:eb:
         f6:88:f6:8c:2c:e5:07:65:17:d9:24:11:a7:f5:2b:98:b5:8e:
         c8:85:a0:30:bb:bf:fe:f3:0b:de:be:4d:5d:13:86:a7:12:64:
         fe:ee:3e:33:ee:b7:5c:e0:7f:00:43:3b:e5:0e:c2:ab:48:ed:
         20:fa:4d:db:ba:a9:b4:b4:02:4c:26:0b:50:9a:d1:7b:25:94:
         e0:ec:aa:86:0e:bd:58:4f:2a:fe:e6:a9:76:13:30:5f:7a:a0:
         c2:2e:7a:9b:e5:c4:32:3c:41:d8:34:f4:c3:80:f9:c7:ef:41:
         6d:b6:4c:3e:db:44:d3:4e:2f:31:e5:f9:03:b5:3e:2f:24:35:
         78:0c:91:4d:08:07:db:b1:28:a4:79:40:37:06:67:b6:5f:be:
         09:b1:57:3f:54:77:b3:eb:9a:41:77:22:66:f9:a6:43:62:3c:
         5a:e6:39:b4:cd:78:b8:50:ee:6d:ad:da:87:30:b3:cf:12:74:
         02:72:a7:31:60:16:22:69:5a:d6:a6:73:50:00:96:3c:7e:7b:
         7c:15:80:51:9b:78:01:20:af:59:8b:da:a8:df:5e:88:aa:2d:
         a6:20:b9:70:55:93:8d:50:db:cb:1b:4b:42:aa:2d:f4:e6:5b:
         d7:28:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:31:41 2026 by rpki-client