Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/AA9183060FDC11ED9718606AC4F9AE02.roa
File:                     AA9183060FDC11ED9718606AC4F9AE02.roa (raw, json)
Hash identifier:          DDcd7Fi28UmFPB5K22NRmJ+GGoNC8kIilmKV0nIv310=
Subject key identifier:   61:36:49:FC:B3:B7:D0:78:85:97:CB:E6:BD:68:1B:7D:50:2F:1A:AF
Certificate issuer:       /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6
Certificate serial:       0356
Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/AA9183060FDC11ED9718606AC4F9AE02.roa
Signing time:             Sat 11 Jul 2026 02:27:23 +0000
ROA not before:           Sat 11 Jul 2026 02:27:23 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150142
IP address blocks:        103.191.240.0/23 maxlen: 23
                          103.191.240.0/24 maxlen: 24
                          103.191.241.0/24 maxlen: 24
                          2001:df1:9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl
                          rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 01:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912082A, serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6
        Validity
            Not Before: Jul 11 02:27:23 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a51aa0b-9d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:8d:26:21:de:28:27:46:48:15:e2:63:37:
                    08:53:39:a5:0d:57:50:05:3c:e0:e0:55:ec:5d:11:
                    7a:03:a2:9b:74:c4:9c:d0:09:8b:51:8e:ec:83:50:
                    85:57:59:02:30:14:5f:7f:02:09:78:e0:6d:0b:06:
                    53:f1:18:b0:a4:0e:8a:e1:6a:28:2b:de:49:1e:7f:
                    d7:ce:78:37:63:27:d9:78:fb:e2:0b:a1:2f:5e:ef:
                    2a:3e:fc:1e:57:e9:aa:89:a0:36:1b:a5:02:dd:c6:
                    ac:9e:f1:24:8b:fc:23:64:2b:ef:48:64:08:2d:d3:
                    73:25:bd:8a:22:4e:04:67:0d:d1:ca:15:64:bf:b3:
                    f9:3d:1a:ac:8b:7d:a2:a4:8d:15:7f:47:b4:e1:76:
                    7b:50:99:36:96:b2:e9:e3:19:3b:a6:97:5b:5e:e9:
                    ea:17:dc:1f:19:ba:8e:26:58:4e:e0:bb:45:f6:da:
                    77:87:36:0a:55:3d:ca:74:1c:4f:1a:7c:6b:89:b6:
                    ed:f4:1e:ac:bd:1f:a2:8e:1e:5e:c9:89:98:b4:5e:
                    13:04:60:8f:8a:8a:b3:7b:b6:ed:e4:cc:d5:8c:37:
                    f8:64:03:a2:b9:f6:07:c9:6e:01:63:f3:26:a3:b1:
                    b2:7c:e1:45:d4:70:d8:72:61:e0:fa:86:fe:2e:e3:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:36:49:FC:B3:B7:D0:78:85:97:CB:E6:BD:68:1B:7D:50:2F:1A:AF
            X509v3 Authority Key Identifier:
                keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/AA9183060FDC11ED9718606AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.240.0/23
                IPv6:
                  2001:df1:9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:b8:3e:e2:4d:3b:9d:1e:60:97:1c:a4:6b:d0:25:68:6a:7f:
         33:ba:4a:7a:6c:2a:4c:95:87:f0:43:d8:85:eb:32:06:8e:4d:
         7c:f9:8d:fe:3c:20:58:e8:b2:b2:5c:74:7b:40:ea:a4:a7:90:
         e1:07:1b:4b:1e:05:81:47:10:e8:ce:bc:fd:fa:62:2f:af:90:
         68:c5:7a:11:81:4f:04:72:17:4e:22:6f:f3:52:1c:c5:b5:57:
         b8:8f:3a:71:c0:f2:9a:80:f9:d9:ef:81:16:a3:dc:d7:d7:b4:
         2b:10:ac:97:8e:f6:3d:a9:11:ab:59:b9:c3:62:93:a9:0c:dc:
         58:82:53:08:93:2c:e5:c7:6e:6e:5c:4a:ad:7c:c7:da:8f:84:
         41:18:2d:31:7e:8c:5a:eb:ad:52:ab:ea:3b:4d:d5:d2:af:d0:
         88:5f:4c:7a:a7:63:ad:81:6d:83:63:20:2f:70:c4:18:2f:d8:
         e4:62:42:00:db:bb:c1:35:41:e2:09:bb:32:58:e3:c3:f4:d6:
         06:41:aa:83:1a:4b:e2:08:44:b9:e9:67:5a:c7:c6:2e:02:fb:
         b0:8a:71:73:ef:28:f2:50:95:1c:c6:2a:a1:03:4b:48:27:ff:
         53:41:87:19:f4:23:68:5e:cf:fb:7e:d8:34:f2:81:31:96:31:
         69:09:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:20:19 2026 by rpki-client