Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/89BBD5642D1A11F197364435B4833773.roa
File:                     89BBD5642D1A11F197364435B4833773.roa (raw, json)
Hash identifier:          mhRUcRBlgDpdRN3yUVHe2zfzqzBRrJRcQtBUfg0jwmg=
Subject key identifier:   A3:FE:81:9A:2A:74:0F:C5:BA:46:3F:97:9B:31:50:D2:B6:E6:09:06
Certificate issuer:       /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial:       02DC
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/89BBD5642D1A11F197364435B4833773.roa
Signing time:             Tue 31 Mar 2026 15:59:03 +0000
ROA not before:           Tue 31 Mar 2026 15:59:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     149414
IP address blocks:        103.138.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
                          rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
        Validity
            Not Before: Mar 31 15:59:03 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69cbef47-5ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:99:0d:b4:b0:a2:84:19:dd:94:01:ee:ee:
                    f6:31:91:f3:40:0e:e9:ff:e8:5c:c7:13:21:07:58:
                    0c:4e:ad:ad:ee:d8:29:bb:30:52:b9:c2:2d:ce:4a:
                    9c:2d:79:c1:60:14:34:95:a2:7b:53:73:28:19:eb:
                    8c:03:11:a6:6a:e5:20:2a:ad:c3:9c:e8:8f:e6:75:
                    ea:76:da:7e:70:40:ca:43:2c:db:f8:f1:1b:e9:0f:
                    54:c3:f9:2c:c8:ba:23:6c:8d:f3:b1:af:fa:86:f3:
                    bc:66:51:2f:79:b1:a4:75:7c:66:1c:df:85:3d:87:
                    c3:78:2e:14:c3:93:e3:05:b1:cf:e7:0a:34:c5:31:
                    ee:3a:22:42:b8:82:fa:67:4f:d1:f9:85:fa:64:72:
                    8a:92:6e:85:28:db:cd:59:eb:ec:47:39:df:a6:48:
                    89:8b:f6:2f:3f:b3:41:2a:33:ce:ff:43:0e:68:8f:
                    a5:bb:05:31:f9:ed:db:e9:57:47:7d:ab:9f:56:01:
                    a0:1d:65:b0:15:3e:a8:1c:91:96:87:30:1d:52:06:
                    be:7a:f6:ee:f6:41:68:1d:49:e3:e0:a0:5f:51:05:
                    92:6b:ac:cc:e0:53:e1:6f:da:17:94:08:3e:ea:66:
                    cd:d9:5b:a3:0b:63:b3:9e:c7:72:ac:97:96:78:74:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FE:81:9A:2A:74:0F:C5:BA:46:3F:97:9B:31:50:D2:B6:E6:09:06
            X509v3 Authority Key Identifier:
                keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/89BBD5642D1A11F197364435B4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:9b:29:ee:4b:c2:c2:b7:9a:b9:d6:ed:09:6f:81:77:df:b6:
         cb:ff:1c:b8:fe:be:0d:c5:0f:68:9a:60:b1:9f:8e:7a:1a:bb:
         e7:8e:2d:d4:18:31:51:d9:12:fd:5f:12:43:6c:ff:1c:ad:4e:
         db:c7:21:f0:9d:24:5e:6d:45:6d:57:58:17:5e:5d:59:28:65:
         46:2b:bf:24:8a:19:2a:95:ee:d6:a3:6e:a2:6a:55:d3:4a:99:
         ac:1d:25:65:a3:6b:13:e5:55:1f:0a:db:0c:7e:88:df:52:33:
         a4:a4:fa:6c:ed:91:5c:0e:96:fa:3e:d7:e3:d9:68:f4:f7:a8:
         1e:b8:56:61:d9:85:c0:4f:79:ba:60:bb:c0:ce:02:3e:eb:eb:
         11:d2:5b:93:65:19:66:52:5f:9b:b5:c8:c3:e2:1d:22:3e:8b:
         23:87:31:78:4a:5a:f1:80:4d:42:fc:f0:14:da:7a:9e:09:87:
         ef:36:db:e9:97:a7:59:3b:2f:13:58:28:42:0a:ad:83:60:b7:
         65:31:4d:93:c0:2a:0c:50:ec:cd:df:e8:de:3b:ad:d0:4f:27:
         51:e4:a6:d0:e5:37:72:f3:12:6c:b0:c5:2e:ba:47:88:b4:be:
         a6:f1:34:36:07:dc:28:6d:cc:37:32:e2:53:f2:76:7b:8a:b4:
         a2:d1:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:23:28 2026 by rpki-client