Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/144A90F233ED11F1A6562CADBA833773.roa
File:                     144A90F233ED11F1A6562CADBA833773.roa (raw, json)
Hash identifier:          mEB/Hlpd+TSPYfzIl0a7s1rseBjBsIWm6aFfj0Z1rnc=
Subject key identifier:   11:6A:92:41:87:98:99:42:13:76:B8:51:D4:35:9B:1F:37:78:85:04
Certificate issuer:       /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
Certificate serial:       0712
Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/144A90F233ED11F1A6562CADBA833773.roa
Signing time:             Thu 09 Apr 2026 08:21:17 +0000
ROA not before:           Thu 09 Apr 2026 08:21:17 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     932
IP address blocks:        103.145.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl
                          rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1810 (0x712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AAA0, serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
        Validity
            Not Before: Apr  9 08:21:17 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69d7617d-6d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:14:b9:9c:55:89:58:0d:28:40:6c:b6:bd:
                    f4:ac:9d:e5:5c:63:e4:b8:01:8d:61:bc:d9:28:53:
                    1c:af:61:52:c2:1d:b5:4a:5c:4e:ac:b6:a0:dc:37:
                    6c:0b:80:0f:24:6f:02:3e:79:8b:2c:b9:b6:92:f4:
                    e5:3c:79:72:b1:66:13:7d:ca:a7:e0:38:ea:38:89:
                    79:10:f5:39:0b:23:6e:f8:2e:6a:8d:51:0e:25:ca:
                    2c:21:ce:32:87:25:b7:9a:8a:8f:7d:64:5b:25:f6:
                    fb:26:00:1e:cd:51:90:89:4d:00:7d:eb:9e:83:46:
                    8f:c0:54:fd:dd:4b:49:74:6b:1d:b5:7b:b3:52:94:
                    21:51:7b:30:d1:8e:40:ab:db:68:4c:05:e3:7a:6f:
                    4b:53:5e:3b:8c:9f:29:e2:25:a7:33:a2:c3:5b:d5:
                    32:98:36:80:07:0a:63:62:ca:67:0e:82:6b:6a:ab:
                    b7:84:c3:57:c7:ad:28:49:10:6a:4c:fa:bb:77:70:
                    c4:37:48:92:a5:e1:d4:74:0d:05:c5:13:33:e2:cc:
                    ff:f6:88:54:d3:65:92:68:64:23:39:8f:04:79:1c:
                    95:4c:c4:cf:34:fc:ab:ca:3c:2a:9b:bd:60:18:11:
                    91:f6:db:8c:6d:b5:d6:06:97:f2:34:14:8d:ac:dc:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6A:92:41:87:98:99:42:13:76:B8:51:D4:35:9B:1F:37:78:85:04
            X509v3 Authority Key Identifier:
                keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/144A90F233ED11F1A6562CADBA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:2b:9a:ec:55:64:a6:53:9b:36:ef:a8:b2:41:53:30:74:90:
         61:ec:3f:05:cd:8f:9b:7c:64:c5:00:fb:69:aa:ac:e5:d6:12:
         b3:3e:1d:e9:02:bc:68:d2:c6:61:98:2a:0a:a7:3c:1f:67:69:
         d3:9b:34:81:94:af:16:06:a3:d9:7e:f5:f9:b4:d5:b5:3c:fc:
         f7:d5:ef:1d:3c:f8:36:a0:2e:3e:df:e7:30:6a:8b:8c:d4:78:
         91:64:7b:52:83:e4:64:bd:eb:3f:8d:87:0c:94:34:5b:ec:6a:
         97:a9:ae:cb:d6:25:db:8d:f2:77:26:11:70:9a:eb:b0:92:ce:
         49:fa:f5:86:31:9a:88:f2:74:22:88:c3:5a:02:dd:7c:c0:6f:
         6e:dc:ac:bb:c0:4b:1d:1e:be:b8:57:24:3e:29:cc:8a:46:ed:
         e9:b3:95:5b:5a:0d:3d:e9:10:ba:0c:e4:bb:bd:17:29:27:11:
         78:be:ec:93:04:38:b2:9d:65:bf:4c:fd:bc:2c:7f:a7:1c:12:
         ea:8f:8a:58:07:82:90:c8:f2:59:09:f1:0a:29:85:7a:27:68:
         45:4a:36:ff:77:ab:10:a3:33:a9:ff:b3:5d:e2:bc:ef:09:04:
         34:f5:0f:b0:1f:db:b8:af:ed:cc:35:b2:41:fe:7e:64:a5:1b:
         3e:4c:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:18 2026 by rpki-client