Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/028B893CEC2411EF98681981C4F9AE02.roa
File:                     028B893CEC2411EF98681981C4F9AE02.roa (raw, json)
Hash identifier:          wAZ6VnaLPNhqx33AlPoAPL0i21G2GBaa/x6qpXyGf9w=
Subject key identifier:   D4:82:6C:D4:C4:93:75:41:14:8F:0A:7F:EF:B1:6A:EC:6A:BE:81:CC
Certificate issuer:       /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial:       07E8
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/028B893CEC2411EF98681981C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:23:04 +0000
ROA not before:           Fri 12 Sep 2025 22:03:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140973
IP address blocks:        103.154.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
                          rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187856, serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
        Validity
            Not Before: Sep 12 22:03:13 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a459d8-c492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:a6:86:19:6f:03:cf:8c:fc:71:b6:36:8b:
                    8b:f4:d2:7e:a8:13:eb:f8:51:05:03:c1:e9:99:b4:
                    cd:1b:c7:51:9e:06:3d:1e:14:4b:b0:4a:87:54:5c:
                    50:26:7f:11:87:79:2a:cf:b3:2a:19:b7:39:65:fe:
                    87:bf:ae:5c:37:cd:71:e9:cb:f3:6c:73:a4:c7:53:
                    73:61:ef:36:c8:7f:17:eb:1b:7c:65:a9:30:b4:42:
                    5e:7e:6e:80:17:00:6c:0c:83:96:a9:af:0b:28:78:
                    60:1c:58:c5:c5:6e:73:23:34:8c:f9:e4:e3:28:8c:
                    74:d5:35:a9:2b:2f:10:c3:9a:1d:27:e2:72:aa:f7:
                    4f:2a:c3:a9:46:5a:51:62:83:aa:91:8d:e7:e2:da:
                    0f:43:07:b0:90:9f:62:18:09:55:df:4c:dd:3e:33:
                    01:03:93:ef:ec:c2:e5:c5:90:17:7c:fd:41:48:5b:
                    01:1b:12:c3:f0:8c:f9:25:3d:66:b1:92:84:26:5b:
                    3c:31:a7:b4:4a:38:ce:1d:72:10:a3:08:da:9c:34:
                    2d:22:c3:6d:ce:97:0e:12:58:b5:54:eb:32:e5:9b:
                    5c:62:8d:64:fe:c5:19:d4:fd:56:67:93:7b:5a:fe:
                    fb:3c:b4:c5:9b:cd:73:f3:b2:b4:e7:9c:81:5c:58:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:82:6C:D4:C4:93:75:41:14:8F:0A:7F:EF:B1:6A:EC:6A:BE:81:CC
            X509v3 Authority Key Identifier:
                keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/028B893CEC2411EF98681981C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:80:7b:d2:36:d9:7d:51:b4:6b:1e:44:03:17:5f:65:bd:
         0d:5d:c1:1e:8a:47:f6:30:e8:10:d6:81:a4:4b:3f:39:6f:81:
         38:45:f3:5b:1f:c0:0c:67:92:e6:e1:92:b1:ae:9a:34:58:7b:
         a9:a9:4a:0d:80:a3:20:67:65:ec:8d:34:fa:d1:8f:f6:de:e0:
         e4:23:8c:25:3c:93:97:e8:15:ef:da:51:0d:f6:0a:a0:dd:a9:
         81:3b:82:c6:fe:fb:0b:a2:8a:e1:05:8a:a0:85:cc:c9:37:ed:
         61:3d:62:55:ba:00:6a:e8:d1:ac:f3:1f:72:cb:8e:12:51:f8:
         fa:ee:6f:86:01:68:6b:4c:bd:38:20:19:86:b2:38:95:b0:37:
         60:5e:66:e5:77:fd:a7:97:15:89:a3:e9:71:1b:27:55:15:21:
         77:31:dd:1b:49:2c:fb:53:b7:58:09:04:ca:d9:84:f3:62:6e:
         c7:50:a2:4a:c3:a6:2f:4b:84:d4:ce:dc:65:1f:e9:1d:f5:72:
         24:9f:3c:80:94:23:04:41:9a:ff:15:f1:5e:6b:2c:21:42:2c:
         cc:93:1e:78:07:13:83:75:65:52:c5:39:fd:cd:79:6f:67:0b:
         25:b1:89:d0:c7:7a:af:2f:3d:5a:07:ca:87:d2:55:1b:a6:7e:
         80:30:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:05 2026 by rpki-client