Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/F70D5712B01B11F1AF4372F03411F970.roa
File:                     F70D5712B01B11F1AF4372F03411F970.roa (raw, json)
Hash identifier:          hUcrrrUBVLByI2vT36TB+CJnPow9opUMWOBIoChZd9M=
Subject key identifier:   2A:97:14:B0:C2:60:5D:C9:AE:6D:30:BA:4C:83:79:89:C3:32:B2:95
Certificate issuer:       /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial:       0719
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/F70D5712B01B11F1AF4372F03411F970.roa
Signing time:             Mon 14 Sep 2026 09:09:18 +0000
ROA not before:           Mon 14 Sep 2026 09:09:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142028
IP address blocks:        103.166.89.0/24 maxlen: 24
                          2001:df6:8580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
                          rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
        Validity
            Not Before: Sep 14 09:09:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa7b9be-d40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:78:2d:58:c9:de:43:b7:1a:c8:2e:9b:05:
                    0a:14:91:53:51:2c:92:05:b1:da:e3:3a:0c:a0:f9:
                    80:d0:66:c1:a2:c4:07:99:2e:3d:e9:21:14:c6:da:
                    4b:2f:4e:f7:87:9e:de:1c:af:2a:e9:7b:dc:02:1f:
                    fb:ee:64:74:f6:39:35:ec:b0:b2:b3:74:4c:77:71:
                    88:dd:57:4d:b1:58:fa:9c:8c:42:d9:0f:e3:a9:eb:
                    75:11:05:bc:1e:19:e6:f8:46:7f:4b:a7:d9:32:5e:
                    f5:4d:16:c8:9c:52:9c:48:90:00:a4:bf:3d:9c:c4:
                    00:4d:96:0a:70:cb:50:61:f9:43:95:51:69:2d:d5:
                    42:dd:59:2a:1f:c4:8a:76:12:5e:63:9d:3b:6f:7e:
                    5f:f2:11:18:6b:08:d1:ba:14:38:ad:ab:da:96:ce:
                    b0:85:e5:ce:6c:fb:83:48:42:37:91:ca:f4:28:02:
                    73:6d:a1:a5:c9:d1:86:6b:cd:56:e3:8a:fc:ff:8f:
                    6d:94:76:81:d6:ec:6c:21:cd:55:51:f5:a4:09:fa:
                    73:49:8e:c6:23:35:54:54:0c:d0:9e:d4:25:80:ce:
                    83:23:83:30:44:c9:94:85:72:ea:08:c7:b7:30:0b:
                    aa:aa:56:19:a7:e0:85:e7:75:c7:44:82:b5:3a:ae:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:97:14:B0:C2:60:5D:C9:AE:6D:30:BA:4C:83:79:89:C3:32:B2:95
            X509v3 Authority Key Identifier:
                keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/F70D5712B01B11F1AF4372F03411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.89.0/24
                IPv6:
                  2001:df6:8580::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:03:3b:e4:c8:1d:31:62:46:cc:72:33:5f:0e:a4:e0:35:b0:
         d3:54:84:44:38:2d:58:3a:9c:ab:c9:38:9f:63:45:d2:1b:1c:
         e1:06:0d:16:20:15:02:91:8a:f9:82:d5:99:6d:3e:db:f3:fd:
         c9:6d:6a:fe:7f:ce:ab:79:f1:31:ee:ff:0c:7c:4a:39:a7:fc:
         be:0f:84:89:36:16:d1:2b:91:71:27:51:20:35:4e:92:46:17:
         16:e1:8b:8d:ec:18:7d:a6:10:47:ec:35:4e:61:bf:09:78:a3:
         cb:6c:0a:23:88:49:a6:47:26:31:2f:f2:c5:74:aa:6f:ad:d4:
         9a:ac:84:82:e0:03:3d:64:8f:02:05:b6:76:3f:cb:22:ff:1c:
         18:19:ba:5e:f8:d5:b8:fe:ab:88:f1:df:73:ad:0f:64:5f:db:
         88:b2:0d:af:5b:07:b7:c0:f7:67:14:23:7c:85:a7:cb:07:8c:
         f4:52:c6:b3:e3:a6:be:39:93:6a:29:90:1d:a5:4a:0a:e2:e3:
         ab:2d:1c:a0:c1:7b:64:c1:29:55:18:b4:02:96:51:58:b6:66:
         9b:1f:4c:32:88:8e:c6:6a:23:13:0a:4b:6e:3f:54:7b:68:96:
         31:37:34:ec:eb:d5:6a:d0:d1:db:65:50:ae:4f:28:25:54:77:
         97:71:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:41:20 2026 by rpki-client