Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
File:                     9BC8AC96555C11F0AF866966C4F9AE02.roa (raw, json)
Hash identifier:          7XzmkN2DLLb46lM9Dts1BCuPWrVmzVCUR26P5kPn0Qc=
Subject key identifier:   F4:19:EB:2A:1D:B1:8E:D8:5C:6E:A3:39:F5:BD:52:D6:17:61:D4:11
Certificate issuer:       /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial:       88
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:21:45 +0000
ROA not before:           Thu 01 Jan 2026 01:20:12 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     148976
IP address blocks:        103.175.34.0/23 maxlen: 24
                          2400:9de0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
                          rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
        Validity
            Not Before: Jan  1 01:20:12 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a491c9-cc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:b3:4e:08:10:14:74:9a:fb:2f:3c:38:65:
                    e4:7f:5f:90:b3:0d:80:67:43:80:07:05:95:f4:9e:
                    f4:9a:ae:ff:cc:37:5e:65:20:84:50:fd:18:74:14:
                    73:46:14:3e:d6:bb:4f:fb:08:a7:72:a6:4d:f5:9c:
                    59:08:75:ce:88:93:30:6d:86:92:26:a5:50:73:23:
                    f4:85:02:d9:bd:fe:1e:ce:49:7c:ef:85:bd:1b:2f:
                    9b:af:10:73:5d:1a:58:16:ee:f7:14:79:ec:52:0f:
                    29:13:3c:b6:30:d8:d6:2e:dd:cf:65:a2:01:07:8c:
                    1d:25:11:7b:d9:23:67:a3:4a:e2:19:55:2c:f4:4a:
                    20:4b:52:b7:04:2f:f5:7a:35:3a:85:36:7c:b9:5b:
                    bb:a4:a1:07:11:37:83:19:8c:cc:e6:d4:ad:f6:35:
                    09:41:51:f2:be:9f:88:f6:82:b4:f7:db:4e:45:26:
                    f3:b7:80:4d:26:20:7c:8f:f4:f4:57:ab:7a:bc:f3:
                    a9:10:fb:fb:90:ba:af:20:3f:84:80:6e:2e:80:67:
                    44:a1:56:50:89:e8:28:20:3d:c8:74:cb:23:85:a0:
                    09:5b:cf:9c:d2:90:99:3a:84:5c:c6:fa:11:5e:f0:
                    8e:f3:90:65:01:b0:4b:93:35:3c:6e:97:fe:5b:be:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:19:EB:2A:1D:B1:8E:D8:5C:6E:A3:39:F5:BD:52:D6:17:61:D4:11
            X509v3 Authority Key Identifier:
                keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.34.0/23
                IPv6:
                  2400:9de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:74:9d:2e:01:1a:ee:4e:3c:6e:32:d1:48:76:c1:ea:4e:a9:
         87:9a:a9:0b:cc:76:ea:80:3e:15:18:1a:55:23:7b:68:76:a2:
         49:f5:8d:59:7f:be:8a:cd:49:b8:5e:8f:6d:01:bf:e5:13:8f:
         bb:25:48:45:c4:e7:ef:4f:e4:b9:49:9a:1f:12:3a:1d:e6:07:
         33:f7:17:19:74:58:d8:a5:33:f7:64:52:86:4d:27:fa:c6:b3:
         f4:de:ea:7e:c4:42:93:ae:77:79:d1:1d:52:09:01:3c:ed:ef:
         e2:a1:fa:d3:e8:33:b8:5f:a4:09:e7:2a:5c:1b:b9:7c:46:79:
         ff:61:06:c7:d4:bc:e0:bb:05:45:45:8d:f0:0a:ce:89:aa:e0:
         8e:4d:ea:a8:72:18:5d:59:52:6c:10:7f:bd:6e:b8:d5:4a:5d:
         a6:aa:be:67:8b:65:ef:82:04:89:d7:4a:a7:8e:1c:c1:74:2f:
         43:df:9a:39:4a:d6:ba:a4:06:04:39:04:15:c7:f6:f1:d9:6e:
         fd:fc:44:7b:7d:db:4f:90:0a:8d:ef:d6:0b:9b:02:d4:3d:77:
         0c:98:1f:60:66:64:32:61:99:de:56:83:ea:7b:1b:9b:a7:5a:
         20:81:e1:e6:42:2e:0a:9c:59:8d:2a:93:f1:33:1a:a2:92:12:
         0c:d4:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:53 2026 by rpki-client