Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119A0E/02DE18F4B08711F1BBD034F55511F970/4FF26DE8B08711F1AC39C5335611F970.roa
File:                     4FF26DE8B08711F1AC39C5335611F970.roa (raw, json)
Hash identifier:          J9jstZw6wm1/X3tS+RHV7RG5JZ1/aWMWvgpr41L/5i4=
Subject key identifier:   74:84:12:BA:7E:1C:7E:44:14:54:8D:CF:B0:32:34:44:6B:1D:F8:C7
Certificate issuer:       /CN=A9119A0E/serialNumber=4A0BF178425D97C9997F9FB365E99FDD5F263AF4
Certificate serial:       02
Authority key identifier: 4A:0B:F1:78:42:5D:97:C9:99:7F:9F:B3:65:E9:9F:DD:5F:26:3A:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SgvxeEJdl8mZf5-zZemf3V8mOvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A0E/02DE18F4B08711F1BBD034F55511F970/4FF26DE8B08711F1AC39C5335611F970.roa
Signing time:             Mon 14 Sep 2026 21:57:44 +0000
ROA not before:           Mon 14 Sep 2026 21:57:44 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151475
IP address blocks:        103.158.134.0/24 maxlen: 24
                          2001:df2:a0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A0E/02DE18F4B08711F1BBD034F55511F970/SgvxeEJdl8mZf5-zZemf3V8mOvQ.crl
                          rsync://rpki.apnic.net/member_repository/A9119A0E/02DE18F4B08711F1BBD034F55511F970/SgvxeEJdl8mZf5-zZemf3V8mOvQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SgvxeEJdl8mZf5-zZemf3V8mOvQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A0E, serialNumber=4A0BF178425D97C9997F9FB365E99FDD5F263AF4
        Validity
            Not Before: Sep 14 21:57:44 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa86dd8-1be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:27:a7:fe:00:b4:22:6b:85:a4:c2:00:c7:
                    2d:e1:5f:b3:72:21:89:67:ee:98:ad:08:6b:6c:2b:
                    30:d0:1e:99:e2:ff:68:d0:b8:8b:60:a0:3b:14:53:
                    08:ed:f7:73:39:c0:35:9a:35:2d:3b:06:82:6b:f8:
                    80:dd:57:28:44:5b:17:c0:9b:32:0f:60:84:5f:4b:
                    9d:a7:a7:21:f9:92:8a:94:ce:8b:bd:cd:99:e0:b9:
                    7f:56:9d:7a:05:64:b4:89:bd:23:92:95:57:4f:60:
                    f0:97:f4:3c:c9:92:95:e5:4f:c4:9b:bc:1a:2a:f0:
                    ac:32:83:46:05:b9:31:64:6a:97:40:ef:fb:99:57:
                    d3:f7:b5:d8:e3:e2:ea:8a:fb:d5:31:8d:cf:bb:ac:
                    2f:4c:dc:79:8d:b9:8b:a8:5f:85:85:d1:2f:9f:45:
                    85:fe:bf:48:8b:e0:2e:0b:38:d5:5e:68:ca:f6:eb:
                    65:f4:fa:42:ad:7c:be:eb:39:3f:a0:c0:e7:e1:85:
                    3c:07:dc:7e:3c:7d:58:c5:7b:37:ce:74:15:1d:b7:
                    71:1f:60:3b:6b:f8:4c:57:1b:5c:b6:fa:d8:ad:47:
                    6f:7f:71:ae:7c:52:bf:c5:bd:df:dd:07:c8:81:c8:
                    0b:1c:1f:a8:36:39:51:fa:e0:fe:35:14:9c:d3:61:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:84:12:BA:7E:1C:7E:44:14:54:8D:CF:B0:32:34:44:6B:1D:F8:C7
            X509v3 Authority Key Identifier:
                keyid:4A:0B:F1:78:42:5D:97:C9:99:7F:9F:B3:65:E9:9F:DD:5F:26:3A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A0E/02DE18F4B08711F1BBD034F55511F970/SgvxeEJdl8mZf5-zZemf3V8mOvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SgvxeEJdl8mZf5-zZemf3V8mOvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A0E/02DE18F4B08711F1BBD034F55511F970/4FF26DE8B08711F1AC39C5335611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.134.0/24
                IPv6:
                  2001:df2:a0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:80:a1:57:69:93:76:c0:8c:6b:de:c0:14:62:7b:8c:69:84:
         64:3f:d3:a7:41:86:35:64:1b:94:11:10:66:ea:5d:f5:85:e2:
         47:80:59:28:8e:9d:c6:0d:c0:e4:77:33:52:be:08:a7:37:35:
         12:67:e5:1a:24:a6:a1:38:0b:eb:97:b0:04:5d:07:27:11:db:
         b1:6e:23:0c:0f:a1:2d:02:60:46:1e:1b:eb:75:22:2a:17:13:
         02:42:ed:e5:07:65:af:ca:23:17:bb:eb:e1:6d:40:d5:98:21:
         29:b0:8f:58:de:9e:03:16:5d:a8:91:8b:80:b3:6d:c3:d4:1e:
         64:0c:81:2d:01:f4:d4:8e:0e:3a:93:c7:a9:52:72:2a:a4:5f:
         78:20:dd:c9:b7:ae:a3:cb:72:11:a4:03:3a:63:30:89:72:d7:
         ca:99:f1:a3:ee:56:88:7f:65:1f:8d:bc:e2:6d:3a:3c:4d:59:
         50:4e:a2:78:9a:1e:2a:aa:ad:c4:0c:94:50:cb:75:48:0c:b5:
         e3:e8:5a:7a:4a:84:10:ad:ec:30:23:76:7c:93:b3:0b:70:76:
         dd:6e:37:16:90:34:61:1b:79:0f:43:e6:68:1e:aa:90:d7:7d:
         e4:e5:cd:12:83:41:67:5b:9d:41:0b:e3:52:2c:5b:56:44:44:
         d0:02:d2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:12:26 2026 by rpki-client