Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa
File:                     45A44C4CBDCE11EFA998797CC4F9AE02.roa (raw, json)
Hash identifier:          V5AhMBeNCpX/j5l037SGIonBxYcnM4G+bNFL6vbY0m4=
Subject key identifier:   9B:36:03:DC:ED:14:D1:4D:35:80:3A:0D:48:1B:75:F2:1B:75:6D:CA
Certificate issuer:       /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial:       07E7
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:23:03 +0000
ROA not before:           Fri 12 Sep 2025 22:03:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137580
IP address blocks:        103.154.12.0/24 maxlen: 24
                          103.154.13.0/24 maxlen: 24
                          2001:df1:ffc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
                          rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023 (0x7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187856, serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
        Validity
            Not Before: Sep 12 22:03:12 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a459d7-e4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:94:df:f8:72:e3:77:f1:6b:a2:07:06:62:
                    f0:ca:48:b0:42:1a:38:21:67:53:1c:d7:df:60:29:
                    63:33:be:df:4d:70:89:54:1e:25:c0:64:a0:a4:1f:
                    f2:01:b1:5c:0c:0a:db:ba:1d:3a:04:03:c2:4e:02:
                    96:65:2f:84:82:2c:27:f7:88:d4:b7:11:e1:d6:27:
                    64:ad:29:d1:b4:d6:73:bb:6e:d2:56:11:8a:c5:44:
                    05:f9:94:bc:5c:56:52:ca:4a:70:c1:77:60:66:26:
                    af:e6:e3:31:75:7a:f9:6c:9f:22:19:0f:e8:74:9f:
                    0a:54:83:42:bb:f1:9d:71:97:d9:13:9e:5f:a4:bf:
                    bc:f0:0e:95:53:3c:59:d7:66:32:fb:4f:b5:cf:3c:
                    5d:1b:36:d0:57:72:4f:6b:f6:8f:ad:d9:d5:42:5e:
                    64:0c:73:0f:04:26:d6:4a:54:aa:d8:16:26:16:fb:
                    4e:48:25:dc:82:06:c5:c4:30:13:54:51:72:aa:e7:
                    92:d4:3f:99:f2:10:3b:38:07:09:f7:1b:8d:46:cf:
                    a7:74:bc:e3:9c:5d:a2:53:c2:36:5b:b7:73:70:10:
                    3b:f0:c3:0d:83:f1:f3:8b:54:a1:c8:67:ab:19:be:
                    69:f8:da:c4:64:bd:ba:81:e9:88:69:0b:70:c3:87:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:36:03:DC:ED:14:D1:4D:35:80:3A:0D:48:1B:75:F2:1B:75:6D:CA
            X509v3 Authority Key Identifier:
                keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.12.0/23
                IPv6:
                  2001:df1:ffc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:68:de:35:bc:70:6a:b0:8f:f0:86:33:bf:73:5d:0c:d7:31:
         fe:fc:1d:90:bc:41:ed:a4:47:9e:2e:d8:d9:ce:b5:67:d4:b6:
         94:ae:4f:af:9f:9f:31:d9:88:76:8b:17:8a:cc:5c:be:36:2e:
         cb:c6:7f:bf:8b:e3:6b:85:11:7b:e5:12:58:28:0e:e4:c7:04:
         d6:e5:5b:ab:44:2f:a7:cc:b9:0f:f0:eb:68:e4:c9:87:01:e9:
         f5:1f:97:f1:ed:9c:71:00:31:11:32:2f:b9:92:3f:03:25:84:
         ae:ad:07:8f:1b:58:8e:ef:2a:5b:29:ee:90:b2:b9:da:85:7b:
         33:3a:10:4f:02:84:f3:2e:0d:07:d5:f9:6d:b6:6f:fb:1b:e0:
         16:6a:10:65:6c:02:02:8f:e9:b2:bc:60:4d:dc:73:c7:ac:a2:
         3c:63:da:fa:69:f9:cb:17:a9:8c:87:8a:75:46:3e:7e:f9:b0:
         0a:94:14:7d:1e:eb:71:57:e9:10:43:9b:57:17:c6:6f:0f:6b:
         e5:fe:b4:a6:d3:50:19:f8:af:ad:89:6d:d7:1f:ec:c1:ea:10:
         52:7e:6b:35:ea:8f:00:bc:76:2b:a6:d3:76:bd:78:38:61:bc:
         c1:78:06:8f:57:0c:3d:91:d1:54:b7:b6:3e:58:b8:d6:23:b5:
         4c:5b:c4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:41 2026 by rpki-client