Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6A9297A366311EEB376DC3AC4F9AE02.roa
File:                     A6A9297A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          OoW/FTY45eJdnN9Gv+U/BMfgyUp7XaTSMZj+W2WJppk=
Subject key identifier:   30:9B:AD:2F:8A:13:91:45:F0:F5:77:50:F6:9E:65:CE:CF:92:5D:71
Certificate issuer:       /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial:       024A
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6A9297A366311EEB376DC3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:29:49 +0000
ROA not before:           Thu 30 Oct 2025 02:02:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136393
IP address blocks:        103.14.10.0/24 maxlen: 24
                          119.110.227.0/24 maxlen: 24
                          2400:6280:18::/48 maxlen: 48
                          2400:6280:19::/48 maxlen: 48
                          2400:6280:28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
        Validity
            Not Before: Oct 30 02:02:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4859d-0b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:98:ad:0b:03:66:8a:ac:23:53:f4:1b:56:
                    56:fd:ed:00:cf:49:30:59:71:bf:98:44:d3:76:d2:
                    ae:6d:79:34:8a:7d:7f:ec:e7:68:ee:f5:7c:c7:44:
                    28:82:4c:73:55:68:eb:0a:2a:1c:73:48:b1:81:8a:
                    a5:1a:78:39:38:ec:93:06:ae:55:76:dc:ca:03:76:
                    e4:51:63:e5:6b:97:a8:d2:fa:8c:7f:53:f1:37:1d:
                    3b:d3:3b:71:ef:d6:66:28:89:3a:66:62:eb:95:ef:
                    06:05:f2:4a:00:30:a2:00:f8:14:f5:0b:a4:dc:f3:
                    cf:a6:de:fe:4a:d8:5f:a8:f5:fa:ac:80:ff:97:8c:
                    27:30:16:42:38:73:8d:83:8d:c5:ea:42:23:ed:ad:
                    54:29:99:8e:c6:59:1e:2a:ae:52:ad:3c:11:b9:54:
                    8a:23:2f:b0:f0:a1:38:1c:13:80:c9:87:4a:01:ad:
                    f9:11:2b:9b:43:ed:63:04:68:d2:de:23:dc:62:2a:
                    c8:37:da:99:2a:55:cd:f8:c0:ab:56:c3:f1:28:35:
                    b7:85:0d:59:d7:42:0c:af:bc:a1:3d:fe:f1:22:46:
                    78:8a:6f:4e:f6:4e:70:ee:bc:fc:bd:1e:d3:e9:23:
                    c3:a9:cf:b0:62:e5:a4:4a:5e:ae:fb:c2:14:19:dd:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9B:AD:2F:8A:13:91:45:F0:F5:77:50:F6:9E:65:CE:CF:92:5D:71
            X509v3 Authority Key Identifier:
                keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6A9297A366311EEB376DC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.10.0/24
                  119.110.227.0/24
                IPv6:
                  2400:6280:18::/47
                  2400:6280:28::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:83:87:b4:7c:52:53:80:5a:73:a8:97:53:c7:80:8e:ea:
         bd:a0:3f:e0:64:ac:82:f3:4b:f2:5d:62:a2:e7:6c:b8:55:19:
         66:72:2d:6c:cc:aa:d0:ef:f1:32:3f:84:8f:8a:41:97:c2:ef:
         40:e9:df:e2:4d:c6:2b:00:d4:0b:90:71:a0:54:4e:c7:58:81:
         d5:2e:0c:13:64:71:6f:de:b3:34:8c:0e:46:e0:f8:45:56:fe:
         ef:78:bd:ff:01:16:e0:d9:3d:a4:19:20:18:9e:d5:00:10:5e:
         d0:4a:97:0f:e4:86:91:d0:ab:88:61:26:ca:af:c9:2c:28:a8:
         1d:2e:81:44:4e:2d:10:89:8f:45:f6:5f:41:df:c4:15:2f:5c:
         08:9b:0c:5a:ad:28:ba:35:a0:bd:ac:85:90:35:ca:b3:7d:f5:
         0c:ff:8e:0f:28:76:ce:77:06:ef:2f:70:86:6b:22:d4:1e:cc:
         b7:c1:85:9f:b1:9d:e0:6b:b8:c6:98:8b:84:fd:78:bb:88:32:
         6f:ab:05:ab:11:09:4a:6f:0b:6d:b4:b8:a8:9f:19:6c:b0:fb:
         6e:f3:ad:f3:05:6c:cd:8b:3e:c4:e7:76:8b:9e:ab:d4:7d:07:
         80:c7:af:38:b1:83:ce:1f:96:48:74:37:9b:78:14:b2:d1:0d:
         22:95:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:41 2026 by rpki-client