Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
File:                     32E51F32BFD511F0A2819A6CC4F9AE02.roa (raw, json)
Hash identifier:          FI9i77MOaa5+RZbDCesgWm0RBIw/4AOlGtMcREAAc8A=
Subject key identifier:   27:CA:A3:98:71:AB:4E:F9:6E:DD:89:EA:47:1E:CE:B8:BA:45:3C:F6
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3A47
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:22:01 +0000
ROA not before:           Fri 16 Jan 2026 16:13:05 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134659
IP address blocks:        103.209.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14919 (0x3a47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:05 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4adf9-82f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:01:d7:e4:8f:ac:bf:c7:01:a5:7a:99:33:
                    54:14:d7:74:e6:0e:3a:e8:9a:02:33:f0:c7:1a:79:
                    90:5a:df:46:3b:1a:ac:85:b6:b9:33:72:55:0f:e1:
                    b7:2f:ca:98:12:c3:05:c3:f5:b7:62:07:74:3a:9e:
                    b4:65:ef:d5:0a:c1:ae:72:94:ad:fa:f5:6b:59:19:
                    df:19:d2:30:db:4e:29:48:9b:49:08:4b:b7:b3:1e:
                    3d:31:17:cf:29:f6:c7:64:36:e9:f3:0d:09:ea:63:
                    56:15:c2:ed:9b:68:71:c6:5a:04:ea:04:46:e2:48:
                    31:51:5d:7b:c6:e5:4d:d7:5c:de:6a:8d:17:56:72:
                    03:4d:bf:4e:e9:48:98:58:64:5a:ab:21:83:a8:33:
                    b9:48:df:93:fb:6e:1d:be:62:76:27:e9:f0:1e:61:
                    cb:55:7e:59:a4:12:3e:2e:9f:56:a9:18:7f:34:ae:
                    48:6f:60:e7:33:60:68:65:d1:e3:0e:95:c4:7a:b7:
                    78:08:fd:fa:32:ca:82:57:4f:fa:42:78:39:9a:3b:
                    47:b6:0d:29:5d:6c:8d:25:79:8d:b7:f1:72:f4:e2:
                    1e:b0:e7:bc:c6:02:47:9b:f6:1f:de:f4:92:d8:d4:
                    f8:1a:16:e8:fb:7c:f2:a4:42:18:80:9e:ce:ce:4f:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:A3:98:71:AB:4E:F9:6E:DD:89:EA:47:1E:CE:B8:BA:45:3C:F6
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:6e:de:20:cb:c8:6e:63:85:4c:b4:da:b3:a2:47:15:c2:5a:
         42:77:0e:b3:11:19:c6:0a:ed:38:fb:71:21:8e:b5:d9:ed:b3:
         ee:af:d4:5f:a5:ae:57:13:18:3c:df:44:ff:9b:09:2e:94:f8:
         e2:58:3b:3e:b8:10:90:95:f7:e8:e2:b5:7d:cb:02:1e:3c:56:
         58:b4:be:1e:af:97:e1:bc:d6:1e:29:70:60:17:91:dc:b0:0c:
         7e:3d:1b:e2:da:5f:44:d7:13:f1:23:01:7e:a3:fd:89:f1:dc:
         dc:7b:57:b7:a2:62:75:47:09:55:48:d1:fa:b6:6e:10:4d:55:
         da:4c:d2:b0:26:a1:cd:e1:85:c7:d7:66:75:e4:f0:74:e4:a1:
         45:37:ca:bf:65:ed:41:e0:ca:d8:c4:49:3e:fd:3e:03:03:d8:
         28:ab:38:f0:4f:28:4c:d1:c6:bc:3b:66:b3:82:3e:ad:4c:0b:
         c4:b4:59:84:25:25:3b:f1:ce:6d:54:29:31:4f:ae:c1:c1:43:
         f5:89:3c:e9:55:0c:12:28:50:8d:7e:31:40:36:87:cd:2b:ad:
         20:4c:d9:3c:60:41:2b:35:d9:76:15:cd:3f:eb:9e:f4:26:02:
         6e:70:e4:7e:12:fd:7a:00:55:bc:ab:5e:05:fb:52:43:74:44:
         37:1c:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:29:53 2026 by rpki-client