Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/43429012D2E411F1985AD0581066CEF9.roa
File:                     43429012D2E411F1985AD0581066CEF9.roa (raw, json)
Hash identifier:          I9FHU5MY46+37EmGKMCANNm6t+nRu+6LE/waAkQeH7g=
Subject key identifier:   73:46:4F:2E:E8:0A:7A:66:42:80:4E:0B:91:24:3A:4F:E1:BA:49:11
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       35B5
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/43429012D2E411F1985AD0581066CEF9.roa
Signing time:             Wed 28 Oct 2026 15:28:45 +0000
ROA not before:           Wed 28 Oct 2026 15:28:45 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     6939
IP address blocks:        103.19.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 15:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13749 (0x35b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Oct 28 15:28:45 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ae214ad-c649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:1e:35:4a:aa:e9:23:c1:bf:97:e6:e4:c5:
                    15:a7:c5:b0:e2:28:84:5b:a0:55:21:94:a6:e9:4f:
                    3c:82:08:08:22:41:f3:11:89:7d:3c:2d:5a:bb:45:
                    8c:97:78:f1:e9:37:62:aa:7e:4d:ea:69:95:5f:32:
                    30:60:4d:c4:f5:bb:af:9f:4c:88:69:bc:a9:58:bd:
                    79:78:a7:57:f9:e0:6d:70:eb:90:bf:2b:c8:9a:1c:
                    21:b3:2f:a4:98:11:af:84:13:2e:ab:27:f1:1d:67:
                    20:e2:da:c1:2b:85:0c:13:8f:cc:2a:dd:a2:21:25:
                    9f:f2:60:a4:a3:df:2b:29:27:d9:45:83:4d:0b:cb:
                    29:36:f1:3a:a1:6b:41:a5:53:5b:67:f3:d9:d6:4a:
                    84:2a:1b:1e:d3:41:07:c4:65:b5:d0:9a:0b:ca:a6:
                    52:da:ee:3f:42:ce:19:d8:be:3f:87:b6:4e:65:b2:
                    e6:7f:39:ba:56:29:90:fc:67:37:6d:95:a4:78:21:
                    88:09:cf:9e:4c:6a:38:4d:1d:98:17:a8:a8:e7:de:
                    1a:a6:15:68:ed:70:f8:82:58:4c:1c:5a:66:33:da:
                    25:68:54:5b:f8:4e:56:ff:b3:64:08:95:c5:cf:1a:
                    2f:51:59:40:27:58:d4:7b:da:0c:69:60:d8:88:f9:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:46:4F:2E:E8:0A:7A:66:42:80:4E:0B:91:24:3A:4F:E1:BA:49:11
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/43429012D2E411F1985AD0581066CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:87:0a:a7:f1:0c:bd:0d:93:6e:e3:0d:a4:ae:2c:27:e4:0c:
         ce:f8:e9:ab:ee:a3:fd:dc:bf:69:03:a3:39:fa:5a:3a:8f:ed:
         6b:e8:62:0d:6f:5d:d5:dc:55:3a:1f:ef:d5:d3:61:7c:7b:ff:
         c4:c5:ab:fb:97:d3:f7:53:04:d1:64:e1:97:0d:e4:d0:36:30:
         27:ff:ee:7c:61:00:16:3e:55:4b:9e:7e:0d:1f:04:c2:21:53:
         67:44:a2:1b:df:2e:c2:d0:c4:71:77:18:8b:eb:84:48:15:c9:
         ac:4a:fc:c6:8d:fc:7b:a2:be:22:69:a8:f7:6f:54:81:1f:e4:
         0f:f5:9a:7a:31:c0:a9:20:e2:ed:f2:bf:65:53:73:d6:07:e2:
         72:62:3a:fa:64:ea:48:d0:de:44:d0:78:a9:fd:95:67:fb:a2:
         da:cb:69:6d:84:7d:b4:af:2b:47:80:ff:43:f6:6d:e5:94:e1:
         0f:76:bf:86:66:d5:da:75:08:94:8e:fe:9b:15:63:ea:08:c3:
         68:e6:0b:e8:b0:8c:88:78:ed:10:a5:f4:55:46:6a:76:f6:5b:
         80:45:60:28:3d:88:51:26:f6:c6:16:14:30:ca:78:85:b1:ca:
         6a:41:9b:ea:90:0e:06:9f:78:49:5f:f8:1c:ea:9e:d3:82:91:
         f7:ee:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:42:18 2026 by rpki-client