Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
File:                     394B48F6889811EC9D1DF920C4F9AE02.roa (raw, json)
Hash identifier:          esobtMTQ83ifAe3YqijDiKUn/KklzpUoFIodQFJNV+A=
Subject key identifier:   E6:01:61:46:F7:9B:70:6E:2F:8C:22:4F:91:63:8F:60:46:F4:02:F7
Certificate issuer:       /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial:       045E
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:54:38 +0000
ROA not before:           Sat 17 May 2025 00:56:40 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132739
IP address blocks:        103.24.156.0/24 maxlen: 24
                          103.24.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
                          rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
        Validity
            Not Before: May 17 00:56:40 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fecd-95b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:fc:41:53:8c:3e:e4:85:fc:41:69:49:1a:
                    42:60:9d:28:50:ee:47:34:f1:df:98:94:14:4d:d0:
                    51:49:c2:be:04:ee:e0:cc:3a:c9:8e:4a:64:42:0b:
                    1c:ad:2a:ac:bf:28:01:5a:73:14:21:4b:bd:0e:5b:
                    3a:b7:36:a1:d5:c7:37:62:95:59:34:47:9e:43:2d:
                    1a:80:66:7a:ea:0c:79:05:fb:69:3c:71:3e:36:ef:
                    6a:f2:9d:ea:41:a7:36:f1:34:58:c7:3d:24:20:f2:
                    27:8c:5c:ad:0d:d8:46:55:90:8c:af:56:b9:e5:c9:
                    20:06:ff:34:4d:1f:e5:20:9b:ce:c1:1a:fc:aa:90:
                    dd:2b:ef:f2:24:ec:ae:ee:33:7c:7e:0f:cd:05:4d:
                    6f:11:f3:61:3b:41:47:c0:83:58:05:20:63:06:cd:
                    f9:60:f6:a2:a2:0f:93:44:92:0b:9d:8c:be:af:a8:
                    f9:c1:90:ab:38:c6:90:10:bc:25:0d:60:6c:ad:90:
                    d9:12:b8:91:f4:4b:25:a7:7f:45:48:42:70:05:51:
                    4f:03:6f:26:80:17:15:de:17:31:43:04:b3:80:94:
                    0c:8f:4c:1f:65:44:e1:3d:75:92:e9:de:93:d8:dc:
                    e1:64:05:68:e1:d3:21:e5:81:47:0c:93:0f:b8:45:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:01:61:46:F7:9B:70:6E:2F:8C:22:4F:91:63:8F:60:46:F4:02:F7
            X509v3 Authority Key Identifier:
                keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:48:4a:49:82:23:95:15:90:e0:45:e0:8c:de:1c:33:f6:5d:
         42:0a:2a:34:58:cf:7b:2d:f0:91:e2:cb:dc:ab:ea:49:f8:a2:
         3e:0f:3f:78:a7:3a:d5:ca:2f:f9:85:75:d4:97:94:5b:6a:2d:
         d7:91:84:05:cd:95:81:3b:4e:a8:3e:e9:4f:02:2c:2e:1f:db:
         b5:33:fb:74:89:fa:ba:7c:82:7f:78:06:63:89:5f:2f:3e:d8:
         5a:49:3b:77:e8:c8:01:31:b2:a2:55:d3:12:63:88:27:30:d1:
         8a:e0:50:65:f6:95:c1:02:a2:03:6a:ca:b8:68:48:ae:22:c2:
         7b:a6:90:df:e4:4c:05:10:65:76:af:2b:a0:1d:91:4b:c6:3c:
         bc:a4:ca:ba:82:bb:1a:01:d4:1e:91:8c:0e:ee:4e:d1:fe:e5:
         a5:b3:25:f6:5f:7d:bc:f3:0d:59:fa:c9:63:22:26:83:e8:b4:
         43:fa:15:b3:6a:af:bc:99:9e:3f:7e:10:1b:28:a7:8d:41:a0:
         40:b9:41:fb:bf:41:82:f0:da:de:73:c1:3a:3f:0f:43:ad:9b:
         5c:79:af:e3:04:a5:2b:cd:af:ec:83:18:df:7a:f6:90:75:6f:
         7f:9a:5b:43:59:38:7c:63:76:f3:94:c1:5e:b3:12:93:0f:8c:
         49:47:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:25 2026 by rpki-client