Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/76ABC3662DC511F1AFF54E10AD833773.roa
File:                     76ABC3662DC511F1AFF54E10AD833773.roa (raw, json)
Hash identifier:          of3FRWMIcYkEaWQWOZhJTwnfrjFeAR8rTgZWsIgU1hQ=
Subject key identifier:   CE:91:59:D9:C1:0C:39:DD:B9:8A:F6:FF:83:DE:F1:12:C2:44:2E:51
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       04F3
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/76ABC3662DC511F1AFF54E10AD833773.roa
Signing time:             Wed 01 Apr 2026 12:22:35 +0000
ROA not before:           Wed 01 Apr 2026 12:22:35 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        103.47.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1267 (0x4f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: Apr  1 12:22:35 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69cd0e0b-b886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:79:6c:e8:11:9a:2b:93:12:5b:ff:b9:9f:
                    28:82:2d:9c:4c:0f:91:18:a7:b5:29:c1:27:3c:14:
                    bd:4b:e3:ef:a8:35:89:0c:f5:f9:b4:d8:59:81:2e:
                    86:2a:13:2d:7f:ca:4f:65:ba:b6:f6:9b:86:e1:60:
                    f6:b1:bc:58:1f:54:ce:54:17:a7:bf:f0:b4:eb:20:
                    15:ba:2e:5c:bd:36:eb:f4:aa:22:b8:5d:e2:33:ef:
                    62:47:b6:85:7e:83:80:2c:1c:5b:be:2d:78:c4:f0:
                    ac:eb:7d:db:34:81:e8:41:7c:fd:d6:8f:99:e4:2c:
                    61:9d:30:68:0d:1f:60:d6:96:63:1c:1e:80:a3:fe:
                    7a:ce:ec:4c:db:a7:a0:b7:c7:bb:2a:69:81:14:99:
                    dd:f0:19:67:e7:d7:d5:9c:b5:fc:eb:6f:0c:5f:33:
                    32:0f:b2:c7:b6:e4:e0:6f:1d:c8:bc:09:c1:d1:9e:
                    a2:b1:30:3c:06:1b:e9:27:04:20:35:56:5c:b6:6f:
                    0f:91:56:fb:68:56:cd:73:e0:9d:37:3e:e1:97:be:
                    77:ae:d6:15:63:74:00:e9:a2:5c:b4:69:c9:8e:8b:
                    00:af:a3:05:f0:19:c8:75:af:dd:82:55:91:2c:4a:
                    26:14:86:0f:d6:cd:fb:66:03:63:b8:1b:05:db:e8:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:91:59:D9:C1:0C:39:DD:B9:8A:F6:FF:83:DE:F1:12:C2:44:2E:51
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/76ABC3662DC511F1AFF54E10AD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:58:9f:f6:d8:26:41:56:b7:7b:2c:f7:aa:33:a9:36:78:
         10:88:a8:eb:c7:09:51:01:38:7f:78:69:48:16:4d:bc:04:f2:
         1c:2d:97:f3:9e:e9:85:23:4c:d7:aa:e0:b8:ec:5b:45:95:03:
         0e:4d:64:be:45:98:85:a0:4f:a3:9d:50:70:f7:98:7e:84:93:
         31:28:b3:00:00:78:63:7e:95:ab:36:6d:89:0f:0f:24:8d:3f:
         c9:e3:c2:ee:9a:9c:20:84:85:9a:a8:1d:08:21:61:cc:62:3d:
         9e:08:15:23:6c:1a:9e:9b:c3:ce:51:e8:4b:22:f4:54:0c:95:
         28:20:22:36:1b:d4:90:51:41:c7:21:19:e0:74:98:85:20:e4:
         a2:7d:b7:84:ae:1c:89:bf:9a:8a:c3:7c:ef:7d:d7:60:03:01:
         1f:b3:8f:30:04:5d:62:35:43:c5:ad:a0:10:26:82:73:bc:0f:
         be:d5:87:02:1d:5b:79:6e:05:d5:df:ba:72:8a:b0:eb:2c:0a:
         0d:cf:05:fa:6f:df:02:0d:fd:49:44:82:fd:43:32:b4:ec:54:
         6c:18:0c:e5:09:35:24:f6:62:0a:8b:6d:d0:d3:de:35:10:3e:
         0e:8d:2e:78:ad:d1:50:08:fe:f0:7b:42:96:d3:2d:ff:09:d8:
         27:c9:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:22 2026 by rpki-client