Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/86080D8A940511EE8A83F00DC4F9AE02.roa
File:                     86080D8A940511EE8A83F00DC4F9AE02.roa (raw, json)
Hash identifier:          Vbr5tSAUt1o9rWvWC45nwleB9ODJmGpA18ZNisnMw58=
Subject key identifier:   31:57:6B:B3:2C:D1:4C:BF:3F:29:54:27:B5:0B:96:20:73:1B:97:69
Certificate issuer:       /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial:       01B4
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/86080D8A940511EE8A83F00DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:01:55 +0000
ROA not before:           Tue 11 Nov 2025 02:19:30 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135652
IP address blocks:        103.78.40.0/24 maxlen: 24
                          103.78.42.0/24 maxlen: 24
                          103.78.43.0/24 maxlen: 24
                          2001:df6:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
                          rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
        Validity
            Not Before: Nov 11 02:19:30 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a41ca2-6c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:6d:6a:1f:bd:df:66:6f:a7:3c:be:72:bc:
                    fa:66:f3:8f:6e:9b:e4:61:f8:f7:3b:06:64:0c:59:
                    35:33:64:93:97:75:de:a4:fe:66:60:5c:ed:f1:f6:
                    d8:38:a9:8e:e3:8b:9d:3e:3a:91:9e:88:a0:fe:c0:
                    ba:7b:b6:00:0f:22:bb:eb:6e:f0:16:12:17:c8:04:
                    de:69:01:8f:72:68:ce:5a:c4:22:e8:43:cf:91:b1:
                    02:13:b6:57:29:71:b4:bd:61:4d:76:9a:af:ad:2d:
                    28:3b:48:7e:e7:41:4e:47:3b:ab:f9:a8:c9:db:86:
                    b9:fe:f2:28:60:0f:a1:14:01:72:66:0e:e4:77:15:
                    ea:25:8f:6e:6f:c4:a6:c1:44:f7:9e:77:1c:ee:a6:
                    70:dc:ea:46:a6:c4:ef:1f:12:a9:97:41:e3:db:e6:
                    70:2a:e2:80:f4:9f:e0:9d:69:47:c4:fe:80:4b:c8:
                    73:e7:70:92:af:e6:f7:22:e5:7a:1c:d5:1a:84:2b:
                    83:d8:54:e1:59:9c:45:2f:e1:dd:bf:56:5a:be:5f:
                    3b:d0:5f:d8:9f:65:6d:a8:2a:49:d4:a6:3a:b6:a7:
                    27:66:b3:fe:26:97:28:fd:79:bd:ec:8e:9a:da:df:
                    dc:c8:d5:7c:6a:c2:b0:e0:f0:c3:17:ff:7d:34:71:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:57:6B:B3:2C:D1:4C:BF:3F:29:54:27:B5:0B:96:20:73:1B:97:69
            X509v3 Authority Key Identifier:
                keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/86080D8A940511EE8A83F00DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.40.0/24
                  103.78.42.0/23
                IPv6:
                  2001:df6:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:97:d4:b9:96:49:02:d5:c2:b5:14:6c:3c:e7:23:31:f3:4c:
         15:71:14:52:a7:6d:25:8a:6a:0c:33:8e:8f:f0:b9:3d:b7:49:
         79:c6:47:5b:86:a9:ec:25:80:b0:80:c2:d2:f9:6d:2c:96:88:
         71:b5:ce:65:11:3e:c1:3c:b1:37:ae:82:64:c0:44:b9:f2:e0:
         bb:61:af:80:96:04:50:34:25:0b:c1:02:ec:1f:a0:d9:d0:23:
         a7:9d:eb:97:67:1c:3c:30:1e:40:12:af:75:39:d0:b6:f0:78:
         05:71:e6:fd:a4:59:2c:3a:db:68:f4:82:97:0b:0b:74:ec:d0:
         57:07:69:1a:07:be:fe:63:78:e2:c6:c4:95:6a:f9:ed:22:fa:
         9a:08:63:17:5f:2c:be:d4:cc:d1:8f:36:ae:9a:62:90:69:6f:
         b9:42:24:75:bb:9d:b4:63:a0:1c:6f:ec:70:10:80:0d:fa:c7:
         ca:37:4f:1d:b3:6e:82:93:6f:0d:39:e8:e8:1f:83:f6:ff:92:
         94:c1:ad:52:49:2a:4b:11:77:ed:e1:96:be:be:29:f4:f7:4c:
         13:34:64:27:98:33:a7:2b:d1:fb:99:3b:77:4c:57:4f:8e:17:
         52:f5:95:e3:54:9e:ea:75:7c:b7:a0:94:43:ca:7a:a7:67:4f:
         34:c5:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:11 2026 by rpki-client