Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/B781FD5C8FB411EAA396FB5CC4F9AE02.roa
File:                     B781FD5C8FB411EAA396FB5CC4F9AE02.roa (raw, json)
Hash identifier:          h1FScDmATHfunMcIYToAdhRcFfBgHG5Y3p1Jl4Wlwi0=
Subject key identifier:   67:5E:BE:1C:87:D2:8C:D8:82:8D:9C:72:7E:4F:E5:81:D2:46:16:15
Certificate issuer:       /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial:       0A17
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/B781FD5C8FB411EAA396FB5CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:02:38 +0000
ROA not before:           Sun 02 Nov 2025 20:09:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133936
IP address blocks:        103.144.204.0/23 maxlen: 23
                          103.144.204.0/24 maxlen: 24
                          103.144.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
                          rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2583 (0xa17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
        Validity
            Not Before: Nov  2 20:09:45 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a446fe-f005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:93:86:c5:94:e2:d4:37:c3:a7:81:b5:fe:
                    1b:14:06:65:ae:27:a0:07:57:4e:9f:09:12:bd:c5:
                    02:f4:bf:79:3a:fc:b9:82:f9:e2:9a:16:7d:19:d7:
                    1f:c0:f8:49:ef:c4:43:78:61:90:3e:18:c9:ca:48:
                    11:37:fa:85:c2:13:37:c6:c3:5f:19:d3:b5:2c:c0:
                    f7:c9:e0:44:b1:8d:c3:f7:ff:61:65:6e:fd:8d:d4:
                    d6:03:1e:4f:fb:d0:62:0c:a8:6b:cd:a3:a7:cf:e5:
                    da:55:8a:f4:21:d0:c1:56:a8:01:3e:16:ae:22:b4:
                    20:0f:10:50:eb:76:d5:36:73:07:58:5b:64:3c:6e:
                    35:e2:d7:42:9d:60:fd:ae:b6:df:a7:0a:28:43:50:
                    9d:72:2b:b6:2d:6c:b8:2b:02:1e:47:6a:83:2f:8e:
                    f5:33:0e:01:ea:0e:d3:77:54:27:d5:c4:19:ff:72:
                    c9:08:48:4f:00:c5:73:bd:c6:7c:03:f6:86:15:1b:
                    de:aa:ea:4a:c7:30:24:53:18:b1:e8:ee:49:50:30:
                    ae:b8:aa:e8:bd:82:c7:00:7c:14:16:62:47:ee:12:
                    30:84:69:26:a5:91:e9:ef:2f:55:97:a4:8b:02:97:
                    49:53:d9:68:99:dd:67:c3:94:f4:23:ab:ca:56:12:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5E:BE:1C:87:D2:8C:D8:82:8D:9C:72:7E:4F:E5:81:D2:46:16:15
            X509v3 Authority Key Identifier:
                keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/B781FD5C8FB411EAA396FB5CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:21:d5:0a:c2:a4:71:45:d6:8e:5f:11:6d:a5:11:6c:02:8d:
         9e:06:11:e7:f9:70:f7:bb:90:ca:2c:2a:1a:ca:bb:b9:0a:c4:
         b7:e6:06:16:64:3c:c0:b1:bb:a4:50:aa:6b:5e:18:9e:3e:49:
         e7:25:a1:ae:27:f5:a1:04:c7:68:61:4d:2d:bc:08:5f:96:b4:
         c2:c7:53:05:d6:d4:d9:dd:dc:85:a0:3c:9c:4f:e1:4d:02:40:
         bd:a7:46:ba:6a:5c:03:ec:48:0a:94:d3:8f:d7:9d:fc:72:9b:
         06:22:af:3d:a7:61:a4:a5:86:4a:db:90:b2:9f:66:99:ef:3a:
         d0:c6:7d:89:a6:dd:4c:70:75:b8:48:6e:3d:b7:22:88:90:0c:
         e1:af:0f:37:d6:fc:ae:b8:c3:df:88:9e:42:35:e6:9b:89:f4:
         79:2d:9c:14:d5:11:c8:7d:26:21:46:fd:16:61:9d:cc:01:7f:
         dd:fe:6d:35:45:df:e1:3a:76:b3:f3:fc:ca:04:10:10:c1:d0:
         fa:66:0d:05:57:0e:76:5f:01:da:1e:83:3b:f9:0e:ce:a9:a3:
         eb:21:4c:23:34:ca:90:da:84:0b:db:bf:aa:27:74:7d:b5:91:
         c9:91:10:16:22:fb:55:5b:5f:a5:79:a0:ca:9f:51:7e:55:97:
         b2:16:22:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICChcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYxOTMxMTAvBgNVBAUTKDYxMDNDQUU2QUZCMjVFNDBCQTlFNURBNEM1NDJDRkUw
OUI2Nzc0MkEwHhcNMjUxMTAyMjAwOTQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDZmZS1mMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDCThsWU4tQ3w6eBtf4bFAZlriegB1dOnwkSvcUC9L95Ovy5gvnimhZ9Gdcf
wPhJ78RDeGGQPhjJykgRN/qFwhM3xsNfGdO1LMD3yeBEsY3D9/9hZW79jdTWAx5P
+9BiDKhrzaOnz+XaVYr0IdDBVqgBPhauIrQgDxBQ63bVNnMHWFtkPG414tdCnWD9
rrbfpwooQ1Cdciu2LWy4KwIeR2qDL471Mw4B6g7Td1Qn1cQZ/3LJCEhPAMVzvcZ8
A/aGFRvequpKxzAkUxix6O5JUDCuuKrovYLHAHwUFmJH7hIwhGkmpZHp7y9Vl6SL
ApdJU9lomd1nw5T0I6vKVhKbGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGdevhyH
0ozYgo2ccn5P5YHSRhYVMB8GA1UdIwQYMBaAFGEDyuavsl5Aup5dpMVCz+CbZ3Qq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjE5My8xRDUxNDA1RThG
QjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhrQzZubDJreFVMUDRKdG5k
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lRUEs1cS15WGtDNm5sMmt4VUxQNEp0bmRDby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYxOTMvMUQ1MTQwNUU4RkIzMTFFQUI3MTI2QzU3QzRGOUFFMDIvQjc4MUZENUM4
RkI0MTFFQUEzOTZGQjVDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5DMMA0GCSqGSIb3DQEBCwUAA4IBAQC7IdUKwqRxRdaOXxFtpRFs
Ao2eBhHn+XD3u5DKLCoayru5CsS35gYWZDzAsbukUKprXhiePknnJaGuJ/WhBMdo
YU0tvAhflrTCx1MF1tTZ3dyFoDycT+FNAkC9p0a6alwD7EgKlNOP1538cpsGIq89
p2GkpYZK25Cyn2aZ7zrQxn2Jpt1McHW4SG49tyKIkAzhrw831vyuuMPfiJ5CNeab
ifR5LZwU1RHIfSYhRv0WYZ3MAX/d/m01Rd/hOnaz8/zKBBAQwdD6Zg0FVw52XwHa
HoM7+Q7OqaPrIUwjNMqQ2oQL27+qJ3R9tZHJkRAWIvtVW1+leaDKn1F+VZeyFiKe
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:50:55 2026 by rpki-client