Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
File:                     784507FC9F4211ECB5BC4D14C4F9AE02.roa (raw, json)
Hash identifier:          BflaMKPNzYcw7RJZL8ZElH/1dQPWbz3sqv57VUU34cI=
Subject key identifier:   EF:12:C2:9D:D1:53:4E:44:C1:FA:E0:87:E1:7A:9B:DA:CA:B7:0A:3A
Certificate issuer:       /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial:       0B9C
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:26:22 +0000
ROA not before:           Wed 02 Apr 2025 19:49:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139069
IP address blocks:        103.139.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
                          rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 18:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2972 (0xb9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
        Validity
            Not Before: Apr  2 19:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4063e-52b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:fd:1f:fb:b8:28:13:4d:9c:e9:8d:9f:b3:
                    88:84:49:d0:d6:40:1a:d3:93:18:a1:83:bb:25:61:
                    b0:1a:67:0d:8c:b8:d7:0e:8d:be:87:f8:ba:01:f1:
                    1a:03:48:09:e9:09:c1:00:10:e9:04:49:f5:9d:8f:
                    6f:29:0b:e1:0f:6b:10:92:1e:22:16:27:53:19:b7:
                    5e:83:6f:da:16:93:d0:50:26:5f:80:cb:ea:11:9f:
                    da:ba:01:43:67:ea:09:82:80:4f:fe:70:fb:81:55:
                    5c:bc:5c:a8:98:cd:b9:21:e4:e6:41:fc:32:54:55:
                    b2:97:18:aa:f5:78:d0:88:58:b0:bb:af:0a:a6:bd:
                    c8:6f:93:66:7b:6b:18:ee:c6:1d:5d:ad:f5:28:66:
                    b9:c3:0c:0a:9d:b9:73:41:d4:71:23:93:00:d8:8a:
                    60:eb:0c:09:24:2d:0d:ad:36:2f:b9:b6:47:59:aa:
                    d3:51:08:e2:3c:14:b2:5f:23:40:e5:ad:0a:71:83:
                    a8:31:04:a1:10:6e:d9:ff:66:c9:5a:98:fc:ca:5b:
                    2e:7a:73:ca:42:20:a0:a6:03:56:1a:b1:39:2c:c7:
                    04:13:9c:d4:0e:be:a8:bf:e3:25:07:e1:e1:86:c4:
                    d1:cc:63:c1:29:3b:c2:f9:fb:6d:35:35:4e:65:96:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:12:C2:9D:D1:53:4E:44:C1:FA:E0:87:E1:7A:9B:DA:CA:B7:0A:3A
            X509v3 Authority Key Identifier:
                keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:cc:74:58:35:53:ef:2e:dc:6c:1b:49:a6:3a:e4:42:01:
         99:6e:5d:87:6f:ad:49:9d:31:6d:12:ec:63:40:74:d4:31:b1:
         51:e2:53:3e:51:16:9a:50:2c:7a:5e:37:29:5e:e6:0b:cb:25:
         ff:3f:12:f7:ca:31:d9:23:60:bc:f4:6b:b5:91:ec:6b:d8:bb:
         c4:f3:f2:cf:1b:51:6a:d6:f5:75:99:54:e8:3c:13:69:7a:d9:
         62:d0:1f:4f:09:e3:7d:a6:fd:82:55:ab:4f:56:3c:65:5e:0d:
         35:b3:81:eb:98:81:84:86:fb:a1:28:be:22:72:ca:6a:99:1a:
         3c:1d:03:0c:91:7d:7b:62:13:6e:6b:89:9a:70:c0:0a:ba:e4:
         d4:c9:b4:05:2d:0e:87:e0:32:8d:8b:99:3e:73:92:42:f0:52:
         34:72:19:49:1f:be:eb:94:e3:23:4b:3b:46:d4:f8:59:4c:fa:
         95:2b:2f:1f:86:44:ee:d1:88:7d:22:a4:f7:e9:8e:4b:17:e9:
         3d:6d:d2:70:aa:db:ef:8a:69:ce:47:15:66:51:58:6a:40:33:
         6f:f4:7d:80:0d:be:57:f8:9f:e4:63:94:b4:7c:03:e4:6b:bb:
         1e:1a:e2:01:cd:7a:18:ec:ef:40:72:d4:cb:76:ed:0e:29:cc:
         19:13:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:10 2026 by rpki-client