Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/C136E3D4491D11F1954C6C159E833773.roa
File:                     C136E3D4491D11F1954C6C159E833773.roa (raw, json)
Hash identifier:          qVFvOq9QjJ9uga7y4894NRrqhJ3NtM90nJ3zfl61s5w=
Subject key identifier:   B9:9D:48:42:23:23:61:1C:63:CC:2E:61:E5:5D:7D:82:5A:B5:97:A5
Certificate issuer:       /CN=A911F85F/serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
Certificate serial:       43
Authority key identifier: 2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/C136E3D4491D11F1954C6C159E833773.roa
Signing time:             Mon 07 Sep 2026 08:59:17 +0000
ROA not before:           Mon 07 Sep 2026 08:59:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139633
IP address blocks:        103.142.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl
                          rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F85F, serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
        Validity
            Not Before: Sep  7 08:59:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9e7ce4-71fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:c4:58:e0:f3:27:3f:2f:93:30:7e:4d:11:
                    77:8d:48:ed:4f:b3:ab:e7:67:82:fc:bc:ff:97:08:
                    a4:1e:3c:1b:a2:dd:7d:fb:7f:38:a4:0c:0f:bd:7e:
                    5b:c8:b4:f4:4b:89:a0:f4:1b:e8:27:b1:6f:ed:23:
                    56:c9:66:38:2d:c4:1e:84:1e:6f:c9:47:15:07:7f:
                    4c:ba:ed:1e:42:89:14:b4:bd:44:ef:a6:69:f4:4b:
                    49:ab:1e:dd:a7:07:f5:0b:af:14:19:5b:ad:9a:50:
                    8f:8e:d0:7c:3c:fc:71:1a:ca:5c:3b:10:78:68:34:
                    fd:51:64:37:20:6a:0a:58:40:21:65:2f:ab:c8:b0:
                    78:d0:3b:57:03:fd:5c:2a:80:89:41:fc:fc:80:1f:
                    dc:c4:ef:e6:48:73:ef:b1:3e:bf:a4:4d:b6:8c:ed:
                    03:7c:f9:aa:e9:a8:0c:24:44:8a:fe:f7:9d:bf:28:
                    3c:8f:44:fd:62:40:db:4d:4a:cd:53:d9:77:71:f8:
                    12:7b:52:0f:6e:73:30:9d:50:a2:23:ad:44:19:8e:
                    ca:93:ae:25:8a:e2:95:08:8d:af:f8:9e:bd:74:d8:
                    50:43:23:03:8d:96:87:7d:a4:b6:fc:ae:20:0e:7c:
                    00:ce:7c:e3:ec:14:9c:b2:e2:66:38:1e:55:57:68:
                    b4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9D:48:42:23:23:61:1C:63:CC:2E:61:E5:5D:7D:82:5A:B5:97:A5
            X509v3 Authority Key Identifier:
                keyid:2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/C136E3D4491D11F1954C6C159E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:43:14:8f:61:4d:a6:6c:22:b8:2e:9f:31:fb:07:0f:0b:
         6d:73:d2:4b:31:22:de:d8:60:55:dc:22:81:3c:c7:8f:99:43:
         d9:e2:df:a5:a7:59:ab:ae:12:21:35:2e:37:71:33:33:94:e0:
         cd:f7:11:06:02:fc:c9:32:6a:59:4f:5f:2b:bf:aa:70:ed:81:
         b6:85:cb:92:36:90:9c:e1:84:70:1c:32:50:88:0e:ac:6a:19:
         5b:8e:5f:1e:ab:ac:d0:f5:86:fd:38:0a:2f:4f:45:84:97:70:
         a7:f9:11:67:df:a8:c1:6b:d8:43:28:38:bf:fd:2f:5b:a5:65:
         6d:9f:84:e0:f8:76:a4:03:0a:48:2a:ef:d3:4e:5a:a5:93:29:
         88:85:50:4e:c8:5f:80:86:00:0a:4c:1d:34:f1:61:a4:2e:9e:
         3a:9a:8c:65:a1:61:e9:67:f0:9d:2a:bd:34:2d:c1:7e:f4:19:
         ea:a8:65:1c:42:2d:6a:99:a2:c5:af:e6:22:33:b3:ce:3d:4f:
         1b:1c:40:65:d5:3c:ad:26:a6:fd:01:70:49:57:37:80:9e:13:
         02:1a:05:e5:56:c0:32:5e:de:49:0f:87:5a:0b:2d:1f:ba:7c:
         a0:48:a0:24:f6:e5:de:81:f0:9e:4e:95:39:9f:57:df:05:67:
         fa:cd:aa:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:20:58 2026 by rpki-client