Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/9609A394B25511F18445BAB96911F970.roa
File:                     9609A394B25511F18445BAB96911F970.roa (raw, json)
Hash identifier:          wqDY38WHMN2QXwss5YXm/GfOutIw/sNe6npaYh21mxc=
Subject key identifier:   D5:50:C4:48:6C:FC:0A:23:85:96:0C:CB:DD:67:C4:97:63:57:10:84
Certificate issuer:       /CN=A9118278/serialNumber=CCDE45830E36675989F65D0D94EC4BDA41023585
Certificate serial:       02
Authority key identifier: CC:DE:45:83:0E:36:67:59:89:F6:5D:0D:94:EC:4B:DA:41:02:35:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/9609A394B25511F18445BAB96911F970.roa
Signing time:             Thu 17 Sep 2026 05:06:49 +0000
ROA not before:           Thu 17 Sep 2026 05:06:49 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138639
IP address blocks:        103.135.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.crl
                          rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118278, serialNumber=CCDE45830E36675989F65D0D94EC4BDA41023585
        Validity
            Not Before: Sep 17 05:06:49 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6aab7569-a7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:d9:5f:84:26:9a:c0:14:8e:2c:63:3c:29:
                    62:09:e3:bb:e9:35:7a:97:71:ac:1b:be:74:72:cb:
                    29:4b:d5:88:ea:54:a8:83:72:ec:dc:6c:70:2a:d3:
                    06:25:0d:d5:d7:67:15:a6:97:b7:e1:46:ed:1c:17:
                    87:38:e2:71:0f:70:23:bf:bb:a1:b0:11:a5:07:8f:
                    f9:64:b9:40:87:db:a3:66:d7:71:29:de:1b:ce:4e:
                    1f:b8:08:67:58:39:1d:90:13:b1:4d:3a:45:96:c5:
                    c9:bb:6b:7c:40:ba:af:66:76:fa:b4:58:23:4d:d9:
                    8e:cc:46:a5:2e:d3:21:5d:01:1e:48:f8:ef:7c:e1:
                    76:3e:51:0f:72:45:30:77:21:31:01:5d:cd:d4:54:
                    bc:ab:9a:2b:33:ee:0e:3d:0b:84:94:8a:7d:6e:8e:
                    71:4b:26:c0:3e:a0:bf:7f:10:af:94:92:e5:83:4b:
                    4a:49:da:42:36:13:e7:e5:4e:96:70:11:5a:8f:cb:
                    59:0e:69:9a:ea:d4:58:d5:3b:5f:84:a7:0d:9b:a4:
                    72:1b:a9:d6:73:09:ae:42:b9:af:2c:14:98:cb:3f:
                    82:a7:0a:a2:d4:b1:c2:c4:43:70:d2:c2:4c:c8:55:
                    e9:fa:2c:c9:31:74:8e:ad:32:6c:d2:6b:4b:db:b1:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:50:C4:48:6C:FC:0A:23:85:96:0C:CB:DD:67:C4:97:63:57:10:84
            X509v3 Authority Key Identifier:
                keyid:CC:DE:45:83:0E:36:67:59:89:F6:5D:0D:94:EC:4B:DA:41:02:35:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/9609A394B25511F18445BAB96911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:15:39:ea:2b:3a:ac:25:db:4b:2d:37:b3:2e:02:c7:bf:7d:
         73:b7:af:8d:ab:79:b6:4b:99:f8:13:a5:15:cd:f2:29:47:2b:
         14:3e:f6:d2:89:4f:11:ff:5f:0d:a0:9b:e1:8c:5f:1a:3c:25:
         7e:f1:2f:89:e7:7e:65:84:ea:6c:98:6e:c3:03:ba:14:65:11:
         f2:e7:d2:40:f2:ab:38:04:1c:70:6c:a6:74:c6:4b:c0:63:98:
         02:5b:18:77:fd:de:6b:63:85:d9:c4:54:f6:f9:7b:6e:75:91:
         b1:52:9b:ce:c1:1d:ec:60:d8:fe:42:82:3d:7f:d3:ef:01:cb:
         a2:de:a2:07:3e:54:2e:43:40:9d:9f:2d:37:d9:4c:85:7f:fc:
         9a:2f:7a:0e:81:22:72:7a:45:8c:0f:06:4c:bb:75:29:1a:74:
         67:b7:58:de:b9:66:ab:8a:5b:1c:79:70:13:4f:d8:63:54:fb:
         7f:5c:70:e5:8c:d1:ce:98:98:c5:0f:0b:e9:fa:39:69:c1:f5:
         e1:46:c7:51:11:7d:0f:ea:38:a0:67:02:ba:94:8e:70:48:86:
         2d:af:2f:ce:75:8b:0c:ca:b7:de:66:21:c7:75:dc:59:bd:88:
         23:31:df:11:0d:ce:5c:f3:42:c8:be:b0:30:2b:54:0f:c8:8d:
         10:85:30:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 5 05:18:16 2026 by rpki-client