Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/AA9C9BB8C92C11EF86608311C4F9AE02.roa
File:                     AA9C9BB8C92C11EF86608311C4F9AE02.roa (raw, json)
Hash identifier:          L0YUjWVE6ClQnbjkSz7YliWfDv2+LcOW4hK3DI2GwKg=
Subject key identifier:   F5:ED:E7:4B:12:58:68:0C:22:0E:79:3F:9F:DB:87:AD:79:86:AE:F9
Certificate issuer:       /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial:       04C2
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/AA9C9BB8C92C11EF86608311C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:21:09 +0000
ROA not before:           Tue 24 Feb 2026 23:20:29 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138336
IP address blocks:        103.179.14.0/23 maxlen: 23
                          103.179.14.0/24 maxlen: 24
                          103.179.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
                          rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
        Validity
            Not Before: Feb 24 23:20:29 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44b55-414d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:d2:d2:9f:c9:f4:be:c3:36:55:76:57:20:
                    98:e1:9f:f2:a0:2e:f1:61:58:55:e3:84:29:6a:23:
                    58:f3:9f:cf:86:82:86:c5:e1:68:e7:02:5f:cb:cf:
                    17:30:22:a0:be:d9:1c:98:39:68:b2:d6:a1:ed:b2:
                    01:33:f7:e6:b5:95:04:2c:47:cb:57:de:b5:1b:70:
                    d1:cf:6a:9f:92:72:13:57:c3:10:b0:04:05:68:cb:
                    a7:c6:7f:eb:38:21:be:ed:84:32:2c:42:98:9e:dc:
                    25:22:80:b1:28:f8:be:c9:e2:44:7f:77:96:04:4a:
                    f8:43:cf:55:63:9f:97:e5:71:41:7b:9a:40:16:8e:
                    71:9e:dd:bb:bf:06:04:6c:6e:d1:96:89:13:c4:a0:
                    15:55:d5:3e:d8:6f:05:f4:18:1c:8c:c2:4c:5f:ed:
                    29:7f:c7:2c:47:99:69:a8:70:18:9b:d7:d0:5c:38:
                    20:07:16:14:92:62:63:51:1b:4d:48:d6:d3:d1:54:
                    2f:c1:7d:ac:eb:24:de:61:02:2f:0a:df:44:0a:7a:
                    ff:5f:bb:6c:5d:2a:d6:78:44:8d:84:88:90:1b:68:
                    e2:06:a9:58:de:62:21:14:cf:bb:1c:ad:11:58:9d:
                    24:ee:48:17:a1:e9:3e:e7:49:f5:a1:bc:bd:8a:4e:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:E7:4B:12:58:68:0C:22:0E:79:3F:9F:DB:87:AD:79:86:AE:F9
            X509v3 Authority Key Identifier:
                keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/AA9C9BB8C92C11EF86608311C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:c5:be:5f:6f:6a:8c:23:7b:a7:2f:d3:17:fb:56:b1:e6:08:
         f6:7d:de:45:66:02:20:3d:b6:df:53:57:23:46:68:5f:5c:23:
         51:ea:53:45:cd:2d:87:35:55:1c:ec:08:e7:07:f6:06:e8:21:
         a5:ec:15:de:92:47:0e:ae:84:a1:a1:10:9b:d1:54:15:0c:a4:
         f7:42:6b:fa:6b:04:25:8e:9c:d7:dd:d0:89:8a:46:ad:13:e2:
         94:85:c1:ad:ea:dc:0b:a9:9d:42:6b:c7:f1:b8:61:1e:14:d7:
         9e:62:a2:f4:42:37:46:87:4f:58:17:b8:bd:28:be:3c:43:02:
         8d:84:ab:92:6c:30:06:ee:42:9c:5f:19:c2:bd:61:9a:10:84:
         de:fd:43:1c:7b:b0:6d:cf:7c:59:bd:99:bc:d0:dd:e2:1c:4b:
         f0:a4:63:0e:19:8b:3e:d7:5a:35:ff:a0:84:d6:44:4a:ce:7a:
         61:c7:7e:76:5b:cc:85:b8:4a:16:0a:6c:7b:2b:58:d5:88:cd:
         70:9c:36:c4:83:10:64:5a:e1:8d:2d:17:1e:8f:8f:b4:de:1a:
         53:44:f1:db:9a:12:85:25:22:6b:9f:eb:e0:a6:ab:01:1c:7d:
         e9:a3:85:0a:8a:32:25:da:f9:41:a4:d2:af:a6:9d:d7:3f:84:
         f9:83:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:25 2026 by rpki-client