Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/960764842D4211EA907A566EC4F9AE02.roa
File:                     960764842D4211EA907A566EC4F9AE02.roa (raw, json)
Hash identifier:          oT+asGuYy34YtOAztK3lKG2FMVbkSqDmjzXMhc56Drc=
Subject key identifier:   F0:AA:DA:F7:0D:25:E6:90:21:E2:DE:DF:07:BD:F4:6F:68:2C:6F:DD
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3A42
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/960764842D4211EA907A566EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:21:57 +0000
ROA not before:           Fri 16 Jan 2026 16:13:00 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     133809
IP address blocks:        103.50.128.0/22 maxlen: 22
                          103.50.128.0/24 maxlen: 24
                          103.50.129.0/24 maxlen: 24
                          103.50.130.0/24 maxlen: 24
                          103.50.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14914 (0x3a42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:00 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4adf5-8d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:3d:94:d6:31:04:a1:bc:6d:22:4f:b7:9e:
                    e5:a9:ad:d9:69:0d:dd:b3:c8:01:40:9a:a3:2e:28:
                    62:3f:7e:a1:3e:8f:79:3d:a2:8d:a2:ef:4c:9a:0e:
                    60:3b:0f:a8:35:95:16:4e:f9:7a:2b:0c:8e:cf:4b:
                    ac:6b:50:d7:e0:c9:06:4f:46:d8:5b:12:16:27:e8:
                    a4:ed:18:2b:98:49:e1:ec:54:e6:fb:f2:42:d4:53:
                    b7:01:a0:3c:bd:48:bf:3a:51:0c:25:c1:d1:c3:92:
                    45:2b:83:41:a7:0e:b1:f5:f7:cf:40:1e:1a:7c:68:
                    78:f3:6f:bf:a5:61:27:a6:5a:48:e0:07:8f:12:20:
                    ef:d0:8e:08:c8:74:11:40:41:0f:02:74:94:6a:3f:
                    fe:12:80:22:1a:e3:66:75:3e:eb:71:eb:07:2d:98:
                    ac:7c:15:b7:7d:32:83:4d:fc:d9:fc:1c:00:b7:0e:
                    b7:0f:35:ff:7f:54:cc:bd:57:eb:13:a3:76:04:a9:
                    79:34:4e:3d:bd:1f:80:5c:d8:c8:6c:c4:5b:af:f7:
                    b1:da:1f:7f:bf:10:4e:29:ec:01:6e:cf:95:e1:e2:
                    a5:8b:92:bf:31:59:4a:b4:b5:a7:f5:07:82:06:0a:
                    de:29:07:64:f3:0b:32:e0:78:a5:d5:31:2b:49:0b:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AA:DA:F7:0D:25:E6:90:21:E2:DE:DF:07:BD:F4:6F:68:2C:6F:DD
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/960764842D4211EA907A566EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:c9:18:ae:70:3c:ce:ad:ca:66:5f:a6:09:d9:bd:70:1d:
         c5:3a:fb:66:d2:a8:e1:9a:04:5a:5b:21:c0:cd:69:9b:24:c3:
         3e:c1:64:b0:ea:31:8e:e3:1e:0e:76:df:0c:63:ab:1f:d3:c5:
         91:bc:5d:c7:da:c9:c0:0f:e6:7b:94:47:c0:91:eb:3a:59:20:
         18:c8:f0:cf:31:b1:8f:0e:43:fb:1d:c5:d5:3c:f6:34:47:ac:
         66:ab:bf:d6:62:b2:c2:9e:9b:c6:00:fd:09:15:c8:7f:c6:be:
         68:f4:56:2b:6f:e8:80:5c:1b:e1:c7:ab:cf:f4:5a:b9:63:b8:
         36:b7:1d:68:60:a9:ab:68:40:01:f9:fc:57:74:e5:13:e8:eb:
         92:fb:94:48:65:f0:1a:db:78:28:48:8e:a1:d0:ce:a2:8f:57:
         5d:5b:cf:46:47:8b:9a:7b:0f:30:0a:a4:35:1f:44:dc:0b:27:
         da:64:bb:6c:c2:d9:8b:0c:51:20:f9:0f:06:c8:64:e3:7a:f2:
         d3:b6:0e:80:22:a7:7f:62:8f:d5:a4:b8:37:59:9e:af:00:9c:
         ac:ca:34:71:b1:a0:41:b0:33:a6:ae:bf:fe:98:cb:88:40:7e:
         c8:36:3e:72:92:71:3a:db:5c:8b:ce:e4:9b:50:b3:a8:70:fa:
         ba:bb:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:52 2026 by rpki-client