Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
File:                     F5DED02A588511ECAC342433C4F9AE02.roa (raw, json)
Hash identifier:          zbXMrXwx1yzaHmM3iEw5RvlADnQZubhK6bBZesY2itA=
Subject key identifier:   9A:87:E2:7C:F6:00:A3:A1:AF:4B:59:45:7A:73:09:26:46:88:1F:F0
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       04DA
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:58:50 +0000
ROA not before:           Wed 13 Aug 2025 01:07:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139466
IP address blocks:        103.141.199.0/24 maxlen: 24
                          2001:df1:b80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Aug 13 01:07:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40dda-260f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bb:1a:ce:0a:af:e9:7a:9f:c6:b1:c4:56:96:
                    30:bb:c8:9b:17:90:8a:fc:99:ce:5e:19:42:74:95:
                    4d:53:bc:73:6f:28:87:14:71:6d:28:4a:2a:8e:2e:
                    29:14:a4:9c:7e:0f:2d:77:30:82:07:5f:e1:4a:d5:
                    ba:71:0e:c7:da:73:7f:0b:e3:60:e8:ef:20:93:dc:
                    58:a6:3a:0a:d2:51:d9:6a:3f:df:4e:3d:db:f5:97:
                    9d:83:3a:3b:2d:f1:6d:4d:ba:77:34:b6:3b:5d:09:
                    65:80:94:0a:58:bd:d2:92:f3:b3:0f:48:94:58:b8:
                    0c:65:f4:ec:c7:1f:51:ce:25:3f:d6:c2:21:60:7b:
                    be:d4:b7:1d:87:c2:c1:8b:20:20:28:ca:fd:39:33:
                    02:17:ad:28:5e:c8:ee:0d:f4:43:0f:d7:37:0c:5f:
                    fe:1a:0b:9e:4a:10:30:53:a0:cc:5d:53:b7:fc:4f:
                    93:fa:62:4d:fd:90:3f:bc:88:a8:51:2d:5f:65:1f:
                    ff:82:b7:a1:1d:55:22:62:56:fa:3f:be:08:67:fb:
                    7c:06:0b:4c:da:51:f9:ea:ea:7f:c8:15:21:47:8f:
                    8f:aa:ca:81:76:67:ad:ea:9b:88:fa:87:00:2f:77:
                    a3:16:78:6b:af:a2:69:16:95:a4:42:97:5b:d3:c1:
                    5d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:87:E2:7C:F6:00:A3:A1:AF:4B:59:45:7A:73:09:26:46:88:1F:F0
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.199.0/24
                IPv6:
                  2001:df1:b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:18:81:16:04:0d:f5:bc:31:f3:1d:87:94:6c:07:53:18:2c:
         53:37:d7:44:6e:25:39:5b:65:9d:52:df:19:71:71:ed:4f:55:
         2c:cf:97:78:d2:e4:92:b6:c2:40:de:44:63:c5:4e:9f:48:ef:
         47:c5:3c:a3:55:63:5c:f4:37:a8:79:e1:7a:df:ea:19:a2:ef:
         e3:0a:d6:da:84:f4:e0:16:ff:5d:5b:50:5a:05:05:56:cd:05:
         c8:55:9f:2b:46:11:bc:c9:26:73:dc:e3:ec:b2:3c:c8:2f:72:
         9c:42:5f:60:35:ad:9c:0c:dc:ee:64:ab:66:3c:b2:50:96:c7:
         e8:45:c5:1b:e8:93:27:38:b8:5a:30:54:d8:fd:4d:9f:29:09:
         9a:aa:2d:93:6f:08:0c:4d:a0:56:33:b3:14:24:94:93:07:0f:
         eb:5e:1b:03:65:63:2d:04:76:74:b6:f9:fa:b4:c2:12:53:87:
         fe:c5:31:51:f6:b4:6b:11:5e:31:3c:6d:dc:5e:7f:b9:aa:81:
         04:5e:cc:e2:b0:69:23:4d:31:db:f9:b7:3a:7e:3c:9f:3a:f9:
         68:a6:a3:95:5c:ab:5e:45:08:ee:d1:c9:d6:ab:ec:95:36:84:
         73:c5:39:04:60:4d:fb:ab:7e:46:46:5f:64:88:94:4d:59:3f:
         39:8c:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:43 2026 by rpki-client