Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/89E0172A2F2B11EE8CD3F880C4F9AE02.roa
File:                     89E0172A2F2B11EE8CD3F880C4F9AE02.roa (raw, json)
Hash identifier:          dd8IIaigjdeFVHSi8ZJQL2JFa2im8RBvLxqCRUWskxU=
Subject key identifier:   A0:2A:92:59:50:54:76:BC:5E:CF:DC:E9:C6:6F:D3:1A:23:20:B0:95
Certificate issuer:       /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial:       01EE
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/89E0172A2F2B11EE8CD3F880C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:17:17 +0000
ROA not before:           Wed 03 Sep 2025 04:22:18 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140870
IP address blocks:        103.125.156.0/24 maxlen: 24
                          103.125.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
                          rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
        Validity
            Not Before: Sep  3 04:22:18 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4122c-7c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:24:cf:10:cf:ac:05:e2:c8:6d:9e:51:3a:
                    da:0b:41:7a:11:d6:1e:df:76:1b:08:87:18:7e:34:
                    df:74:42:49:7a:f5:d5:66:dc:7a:b3:4a:48:78:a7:
                    9a:3d:32:3e:ea:e9:49:5a:56:e4:23:54:2c:18:bc:
                    6c:95:08:fd:ea:a8:5c:3b:ae:c2:9b:ca:36:5f:31:
                    6b:aa:68:13:24:a0:41:3c:b0:a1:eb:10:6b:14:5a:
                    2c:eb:93:f3:a0:0f:a4:a6:07:43:c6:6b:11:8d:78:
                    da:86:9f:ae:46:7d:06:c0:92:4f:5e:96:94:6f:28:
                    d5:70:44:18:0e:7e:be:b5:60:02:a6:7b:d6:34:3d:
                    b0:17:fe:5d:cf:25:f8:38:c0:2c:fe:af:f6:e9:1e:
                    85:d1:d8:e3:2d:10:68:3e:4c:08:79:9e:3f:cf:5c:
                    1b:0f:e6:ca:8f:cc:33:2d:36:4c:f0:8a:e6:e1:b7:
                    26:4d:78:96:ab:e6:8a:fd:dd:0a:71:36:c1:3f:4f:
                    a3:e5:4a:68:81:cc:ea:f7:2f:5d:fc:c8:03:02:2e:
                    a6:53:b1:7e:58:03:56:a7:42:4a:72:3f:3f:2e:02:
                    61:de:80:52:a6:34:b0:8f:47:d9:09:9f:84:f5:ed:
                    a5:e6:1a:6d:13:8e:a5:5e:5d:f5:7a:57:b2:dc:39:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2A:92:59:50:54:76:BC:5E:CF:DC:E9:C6:6F:D3:1A:23:20:B0:95
            X509v3 Authority Key Identifier:
                keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/89E0172A2F2B11EE8CD3F880C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:8e:e0:1b:51:bb:b3:ff:fc:10:3c:01:6a:3e:03:06:81:62:
         8a:d3:dd:9c:86:b7:11:c4:4f:39:4f:cd:da:b4:ed:42:2e:f0:
         35:83:9c:fe:d1:86:d3:1a:d0:ee:df:50:78:97:ee:a5:e0:a4:
         ac:7b:27:97:a3:06:dd:b9:32:bb:7b:06:12:f8:7d:c5:68:87:
         0d:87:9c:31:02:71:c4:44:2d:be:9e:55:6c:cd:f9:b0:63:41:
         75:e1:b7:35:89:a4:38:f5:24:fb:80:79:2a:ff:a9:3c:0b:97:
         05:09:13:fe:1c:cd:bd:23:84:76:75:4b:9e:8d:fe:85:b5:90:
         35:0a:28:f9:65:d7:b8:58:60:00:32:e6:92:46:d6:a3:9a:ff:
         f1:78:74:bb:ad:b1:35:fd:d8:38:7b:e6:85:fe:30:8c:0e:6c:
         55:73:bc:e9:dd:d9:13:99:10:e6:92:b1:45:db:36:2d:b6:92:
         48:ee:78:f4:a6:5a:f1:be:e2:7f:3e:52:bd:57:7c:86:e9:0f:
         62:72:d4:51:7e:b0:c0:b2:2a:bd:07:8a:aa:37:28:2e:80:f8:
         77:2b:e2:ba:e8:52:19:fe:7d:ad:ee:1e:c3:23:22:c6:8f:0b:
         e0:b9:b6:c6:93:f4:5a:98:54:56:75:a7:5c:61:a3:87:e1:b8:
         c8:59:02:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:04 2026 by rpki-client