Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
File:                     BFC00D26D18011EEB673FD69C4F9AE02.roa (raw, json)
Hash identifier:          IOqnl6gjtS12ANfvrpVR5ziJFpi5eECYGociniWPHCQ=
Subject key identifier:   C9:8C:03:E3:AB:63:69:6A:F1:3C:E2:71:90:A8:34:EF:84:FB:1F:68
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       074F
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
Signing time:             Mon 27 Jul 2026 08:15:06 +0000
ROA not before:           Mon 27 Jul 2026 08:15:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141743
IP address blocks:        103.163.94.0/24 maxlen: 24
                          103.167.10.0/24 maxlen: 24
                          2001:df6:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
        Validity
            Not Before: Jul 27 08:15:06 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a671389-1ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:29:fc:d6:08:50:75:13:2c:b8:39:f9:17:
                    51:7a:0a:4e:f7:7e:5d:4e:9d:d8:c3:3f:be:f0:c9:
                    ba:43:61:b4:c5:fa:ba:fd:f9:ec:3d:1f:8a:4b:5f:
                    71:2d:e0:03:c1:67:6f:6c:b4:4e:79:ff:69:eb:0e:
                    d2:07:39:25:37:f4:b7:e9:b5:1b:cd:a2:d5:70:06:
                    8d:91:5f:78:e0:6c:4f:fe:ed:78:fb:f7:a2:88:ea:
                    06:ba:ef:dc:0b:d1:1d:c3:03:66:3a:24:de:3f:16:
                    65:49:0a:18:a3:62:5d:fc:01:af:79:09:6b:e1:f3:
                    5f:55:d6:be:10:3c:a3:b7:c5:d2:4a:9e:67:23:07:
                    3d:2d:0c:5d:93:ca:12:c2:82:b5:53:2f:3f:2a:01:
                    b2:75:a4:c8:9f:be:b8:5a:4c:2f:37:69:75:50:fe:
                    63:a3:7b:7e:d0:e4:8b:44:4a:cb:48:a4:eb:7c:8c:
                    56:e8:03:dd:db:82:58:1d:4c:72:26:b0:95:dc:8f:
                    79:5b:bd:c1:80:4a:7a:7c:6a:8f:26:ce:8f:55:e9:
                    1a:58:28:1b:43:ef:ed:73:25:fd:0b:ef:2d:f8:f1:
                    71:37:36:82:bd:e0:55:2e:7a:de:d3:b1:38:6f:4d:
                    d2:ec:32:15:00:58:94:13:47:61:cd:b1:f6:38:62:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8C:03:E3:AB:63:69:6A:F1:3C:E2:71:90:A8:34:EF:84:FB:1F:68
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.94.0/24
                  103.167.10.0/24
                IPv6:
                  2001:df6:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:35:e4:c3:1a:2a:73:c3:72:d2:3a:71:60:c2:15:65:5b:c2:
         bd:9e:d1:b5:89:2c:26:68:59:84:73:d3:70:e3:5d:8f:74:88:
         8b:e7:89:17:ae:15:ec:9b:f8:b6:a2:9f:89:45:84:bf:03:28:
         68:36:bf:31:b8:a8:f8:cd:46:a5:f1:e9:2f:72:ff:e6:f8:58:
         32:f3:c5:49:fc:35:8b:56:6c:c8:91:ab:a2:f5:79:e0:46:f3:
         c4:d0:4f:25:69:b6:76:1f:bb:3d:e8:b9:55:59:8d:11:c2:6d:
         fa:1e:62:ef:c6:df:11:29:50:fe:ac:0f:cd:a2:af:d4:c7:63:
         3c:cd:e3:b5:98:b4:bd:88:d9:2e:09:95:fc:81:ba:cd:1d:3e:
         c7:d7:96:48:27:69:03:54:01:13:bc:0c:ad:b4:11:cd:3d:cd:
         5e:fe:e8:e3:6d:9d:90:b8:f8:ab:89:b0:a1:7f:7c:c2:32:29:
         83:bb:8a:e4:9f:b7:c5:56:a0:0c:d5:bf:0c:93:f9:9b:8b:73:
         c0:59:7a:db:b8:0f:44:f4:71:32:9e:e5:c4:e0:01:20:93:43:
         3c:79:de:ed:6a:8a:07:7b:8b:c0:7c:d1:9e:cd:8c:2e:03:2b:
         af:5d:88:14:4e:a9:5a:a0:c6:71:d4:cc:09:59:cd:19:bd:bb:
         71:6d:01:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:13:07 2026 by rpki-client