Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/88E1581E93C611F093DD4E26C4F9AE02.roa
File:                     88E1581E93C611F093DD4E26C4F9AE02.roa (raw, json)
Hash identifier:          /voKyazUys3+SCuvprRad6peYAmU9/zZXHb+lbxgXpY=
Subject key identifier:   E0:86:A8:4E:05:DA:A9:BC:82:F8:0A:AB:45:35:95:61:66:B3:2C:BB
Certificate issuer:       /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial:       0384
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/88E1581E93C611F093DD4E26C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 01:33:16 +0000
ROA not before:           Fri 03 Apr 2026 01:33:16 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     54801
IP address blocks:        103.40.8.0/22 maxlen: 24
                          103.180.160.0/23 maxlen: 23
                          103.180.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
        Validity
            Not Before: Apr  3 01:33:16 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf18dc-72fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:a4:96:f1:de:a8:cf:52:a1:88:53:a2:8b:
                    7c:b4:30:b5:03:11:e4:54:6a:cf:d8:78:33:ff:af:
                    a5:29:6c:18:2d:7e:04:58:c8:e7:47:64:52:f7:50:
                    52:24:dc:07:1b:3b:3f:a8:40:7d:34:29:fa:17:ed:
                    31:6d:8a:39:cd:3d:a0:18:16:58:82:de:27:5a:5a:
                    71:91:86:03:c8:9a:cc:bd:9d:b2:e3:3d:89:cd:63:
                    53:84:cf:4b:c5:6c:49:3c:b6:03:ca:1a:17:3c:48:
                    8d:78:9c:66:fb:e6:f5:c4:c8:be:14:84:cb:0e:1a:
                    ca:c6:2f:10:70:cd:3c:75:83:25:6a:98:14:18:14:
                    87:b5:a5:0c:98:0b:e7:dd:70:e4:1f:5e:ca:9c:cc:
                    8a:e3:12:34:a2:7a:b8:0d:27:28:89:05:1c:e5:3d:
                    7f:a4:c5:8f:8d:c9:0d:5a:5b:a9:c5:c0:ad:d2:f6:
                    04:ad:1b:95:57:d7:86:67:3f:61:55:44:8b:df:54:
                    b7:18:d7:dc:96:79:39:9a:b2:3c:64:fd:1c:3e:6f:
                    60:0c:6e:df:9b:5a:ec:20:e5:2b:7e:bc:70:da:ec:
                    9c:07:6c:6d:bb:9e:2f:67:c6:58:a6:91:5c:d7:e3:
                    74:00:88:f3:39:23:64:da:86:30:68:7b:91:9c:92:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:86:A8:4E:05:DA:A9:BC:82:F8:0A:AB:45:35:95:61:66:B3:2C:BB
            X509v3 Authority Key Identifier:
                keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/88E1581E93C611F093DD4E26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.8.0/22
                  103.180.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:e4:f5:95:78:d4:3b:ad:55:b1:af:6d:71:a2:53:87:b5:1b:
         c4:7f:82:e9:de:e9:9f:ff:6b:27:74:2c:ba:7f:df:5b:ab:ac:
         0b:a6:d8:92:c3:13:e6:85:d7:cb:6b:c7:26:0a:a2:dd:35:6b:
         5c:37:34:c3:42:70:be:f3:65:fe:ce:fa:7f:6f:d8:13:d8:c8:
         81:0c:e3:4d:73:20:af:bf:53:28:a6:db:aa:69:56:4a:1b:cf:
         9a:1b:2e:6f:bf:a8:5b:ad:95:07:3a:29:c3:50:71:57:e2:bd:
         92:0c:57:cf:c6:d0:ed:b1:0b:39:79:1c:89:70:e4:08:e7:c4:
         f2:92:50:35:28:b4:00:94:62:e2:f8:f1:1f:15:47:02:79:ce:
         cf:c5:9c:49:2c:82:1f:c1:31:e5:d8:3e:b3:63:76:14:46:cd:
         35:b8:07:c7:68:0b:3e:01:54:50:5f:67:a8:b9:2c:b4:79:a5:
         f6:fc:fe:e0:ad:1e:27:4f:d9:bd:dd:66:47:da:f6:ea:c7:9a:
         a6:14:f6:3d:31:46:c4:63:72:83:3a:ee:03:73:8f:87:53:51:
         ee:6d:c1:e2:9c:0e:ea:68:e9:67:eb:78:35:2c:ac:5a:ba:cf:
         9a:01:6a:3f:d9:07:21:62:bf:96:b8:14:60:1f:c0:7f:97:16:
         47:9e:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:50 2026 by rpki-client