Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa
File:                     B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (raw, json)
Hash identifier:          mcFF4MHBs44WNsH/vlZHse4ZiDHWvj8b3sI3TUaGzkQ=
Subject key identifier:   82:3B:5B:35:DD:07:31:0D:9D:24:1B:27:17:63:92:C0:7F:27:D4:8B
Certificate issuer:       /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Certificate serial:       0186
Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa
Signing time:             Tue 19 May 2026 04:36:20 +0000
ROA not before:           Tue 19 May 2026 04:36:20 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152736
IP address blocks:        103.145.152.0/24 maxlen: 24
                          2001:df5:3f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
                          rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
        Validity
            Not Before: May 19 04:36:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a0be8c3-6bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:80:42:09:67:d6:8f:64:9f:93:38:b6:3d:
                    f0:da:04:72:27:18:2d:8a:83:06:a9:58:30:89:40:
                    8f:5b:01:24:4b:5d:ba:0b:09:0a:77:eb:8f:9c:06:
                    ac:df:8a:1b:ee:97:f5:5c:35:b9:f2:88:07:e6:51:
                    f7:ce:21:f3:75:17:fa:e9:76:65:40:49:dd:50:38:
                    03:d3:0c:c8:36:d0:09:a0:e0:f9:51:b3:c8:6a:28:
                    ce:c3:96:09:d6:77:ed:96:49:be:58:5b:9c:24:a1:
                    62:b2:26:fd:43:ae:f3:ce:36:42:c8:01:a5:1d:6b:
                    c9:b0:5d:b5:08:5c:25:70:d4:fd:06:34:92:ec:3f:
                    2a:8e:8c:17:74:0c:59:aa:04:bd:96:20:c9:6b:df:
                    cb:12:3f:cd:f9:59:aa:1b:2f:bf:30:37:5f:6c:e3:
                    96:53:75:82:6e:56:85:17:50:e8:c8:0d:8e:17:35:
                    c5:26:2b:6b:59:85:9e:1e:21:f1:af:34:7d:e6:70:
                    f2:15:38:20:70:d0:0e:46:5d:df:39:14:30:3d:cb:
                    b5:00:98:91:04:b0:ed:b3:14:7e:87:05:71:90:82:
                    f8:8f:e2:fb:35:e0:97:47:2c:0f:8d:41:b5:d6:68:
                    03:08:ce:01:18:d8:51:94:74:4d:10:2f:e5:f7:d1:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3B:5B:35:DD:07:31:0D:9D:24:1B:27:17:63:92:C0:7F:27:D4:8B
            X509v3 Authority Key Identifier:
                keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.152.0/24
                IPv6:
                  2001:df5:3f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:69:1a:e8:41:58:b2:54:2c:7b:4b:fb:c5:2f:1c:b2:19:7b:
         1a:7c:70:af:64:35:7e:63:4e:b1:05:c6:ee:06:f0:8f:56:2d:
         19:d1:e0:3f:ce:70:c3:45:c3:01:eb:5e:1b:92:3b:dd:1b:0f:
         f8:c1:4c:10:96:e9:db:08:70:31:5c:5c:d9:2d:a9:ce:f1:c0:
         96:1a:9b:fd:ea:93:d1:c9:27:ae:b0:03:3d:49:70:69:b9:3e:
         eb:78:59:91:f5:90:2c:77:29:f2:60:0e:75:81:f6:45:af:81:
         b6:92:a4:b8:fb:af:56:c0:e9:59:31:b3:a9:e3:10:ea:9a:55:
         c3:32:49:27:6d:5e:a0:86:ea:2e:16:16:11:49:74:94:71:2a:
         45:1e:f9:83:ab:7d:72:b8:d4:75:04:fa:04:40:63:07:3c:bf:
         35:e0:05:47:8e:06:29:9b:cc:aa:0a:99:2a:a8:95:4a:6d:a2:
         ed:c2:ea:9d:21:71:c6:d8:6e:5d:bc:b0:76:c4:37:ce:bc:fc:
         68:d5:b0:a4:21:3f:f2:bb:4e:9d:8a:66:28:e7:60:0c:45:00:
         f7:9d:d4:7f:4c:b1:b1:e5:90:f0:ff:96:ed:11:5f:ce:a9:ee:
         16:e8:af:55:c4:2d:da:fa:b7:de:52:1a:15:c8:22:11:ba:bc:
         81:10:fe:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:28 2026 by rpki-client