Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
File:                     5042B970E25B11EA9E988045C4F9AE02.roa (raw, json)
Hash identifier:          tRcSxQhINR6HjVxDrQplrAKNWyDOOwNBxWfhbN/Sg5E=
Subject key identifier:   02:4A:18:5E:66:B9:BF:26:17:3A:10:CC:C2:AB:6D:15:4A:60:DE:4D
Certificate issuer:       /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial:       08CF
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
Signing time:             Mon 08 Jun 2026 10:59:45 +0000
ROA not before:           Mon 08 Jun 2026 10:59:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137532
IP address blocks:        103.112.64.0/23 maxlen: 23
                          103.112.64.0/24 maxlen: 24
                          103.112.65.0/24 maxlen: 24
                          2405:e6c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
                          rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255 (0x8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
        Validity
            Not Before: Jun  8 10:59:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a26a0a1-7772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:47:1b:64:62:0c:20:d8:b1:e4:13:a7:53:
                    22:6f:b0:40:db:e9:9c:a4:1a:52:d7:21:4c:c5:f9:
                    51:54:07:a3:b2:58:2e:97:d6:97:cb:a5:9f:01:1e:
                    2c:a5:9b:3f:ef:fd:d1:2d:f6:97:d3:e6:db:95:74:
                    ea:ed:ed:c1:7a:88:91:f2:f0:ae:e6:18:ad:02:0f:
                    c1:45:61:9c:6c:72:38:f9:49:75:69:de:bf:a5:07:
                    a6:fc:b9:17:bb:55:b6:44:2c:7c:c3:4d:11:52:ed:
                    5d:95:6c:5b:ad:4b:0f:59:b9:c9:15:ba:5f:9a:7d:
                    91:c7:bf:51:a2:7f:52:9a:63:80:b6:21:a1:2e:de:
                    ad:51:8f:11:24:f5:c6:02:74:cc:58:41:99:e1:7b:
                    85:ce:5e:de:9f:30:7e:d8:1d:0e:98:84:6b:50:8e:
                    d9:7e:a3:f1:c6:22:4c:cb:3f:08:ef:f6:90:70:9b:
                    e6:ca:ac:cf:fc:69:59:e4:9b:da:b2:a0:6b:11:ab:
                    93:6c:45:30:f7:de:e3:5a:9d:58:e1:e1:24:ec:a6:
                    09:88:e4:97:5c:87:4a:e7:4f:01:0f:ae:b0:40:2b:
                    a3:e3:9e:8f:25:cd:b2:5a:7e:3c:03:e1:e7:40:48:
                    1c:7c:09:4e:6a:ac:74:f5:f4:2c:2b:7a:fa:5c:a9:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4A:18:5E:66:B9:BF:26:17:3A:10:CC:C2:AB:6D:15:4A:60:DE:4D
            X509v3 Authority Key Identifier:
                keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.64.0/23
                IPv6:
                  2405:e6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:c4:f2:c1:32:08:f9:78:f6:a9:28:4b:da:c3:8f:a8:72:
         5e:be:b4:b7:3e:cd:17:02:ec:23:5b:c1:91:44:ef:e4:90:86:
         5b:96:8e:f2:29:6f:a2:f2:b4:7f:50:a2:c1:b5:7a:1d:25:d3:
         c6:3e:cd:c9:3d:ed:e5:44:f0:c7:57:54:43:cf:40:19:07:d0:
         fb:5e:5f:9f:3f:b9:df:a8:70:4c:82:15:5a:fe:ad:7d:ae:2c:
         e3:9b:e6:2d:fc:a0:20:eb:26:24:f6:45:6c:bd:7b:2f:28:45:
         34:2a:4c:27:c0:57:68:67:92:0c:47:c1:25:4d:b6:96:d7:95:
         16:99:e2:2c:59:57:99:51:73:82:77:64:0d:ee:3f:eb:76:66:
         76:87:77:8a:b1:94:a3:5a:a8:4f:92:4d:57:c7:3a:e5:30:56:
         9c:ab:7f:f7:f8:35:fa:74:9c:3f:c7:2c:80:ee:1a:02:a0:0e:
         13:5a:e1:d1:10:2e:d3:c3:e3:0b:59:72:cf:e7:b6:10:57:fd:
         24:42:70:26:b2:59:68:8d:64:4f:37:4a:f5:47:1c:43:e8:39:
         f1:dc:43:34:7a:fc:cc:b4:ca:65:55:aa:81:6c:7c:c2:28:fe:
         1f:57:dc:a8:d1:a9:0a:5c:50:d6:37:9e:67:8a:ec:97:8b:f3:
         df:28:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:20:18 2026 by rpki-client