Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/9AAB80560BD511F1920C67C12E3D8C67.roa
File:                     9AAB80560BD511F1920C67C12E3D8C67.roa (raw, json)
Hash identifier:          7MrcBRtrM3i0RslsHky1Cdr7mamN7Fo1uDMcDW+7UiA=
Subject key identifier:   F8:3B:8A:BC:C1:65:87:EE:81:CE:77:87:36:D2:96:C6:B8:8F:A1:30
Certificate issuer:       /CN=A9137157/serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
Certificate serial:       51
Authority key identifier: 77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/9AAB80560BD511F1920C67C12E3D8C67.roa
Signing time:             Wed 01 Jul 2026 10:35:33 +0000
ROA not before:           Wed 01 Jul 2026 10:35:33 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     138655
IP address blocks:        103.140.31.0/24 maxlen: 24
                          2001:df0:a480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl
                          rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137157, serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
        Validity
            Not Before: Jul  1 10:35:33 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a44ed74-566e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:a7:78:86:86:f9:bb:21:33:0e:f6:df:81:
                    1d:c0:74:84:f0:7a:57:4e:a0:81:3e:61:45:1d:71:
                    9d:5a:05:e3:ed:cd:a4:51:2c:02:4a:00:90:38:0a:
                    7a:a1:ae:50:1f:b3:ad:6a:17:8d:76:fb:43:de:54:
                    45:8f:02:6a:62:0c:44:5a:4b:71:db:3c:a8:64:cd:
                    3a:d7:8d:98:e3:28:99:39:78:2b:df:bc:22:89:35:
                    3e:2b:5e:94:1a:10:86:77:cd:dc:7d:1c:14:ea:de:
                    45:f1:fe:51:ca:d2:13:e3:6d:84:a0:b8:35:6a:e6:
                    bd:29:f2:be:92:10:b7:14:9b:80:eb:58:00:6a:17:
                    09:69:08:86:b1:b1:13:fc:19:dc:07:19:90:81:82:
                    a8:eb:aa:79:3a:c2:15:7d:94:0b:5b:5d:79:2e:fd:
                    88:82:eb:e8:f5:a2:95:4d:06:cb:c0:a2:77:e3:6a:
                    da:58:64:32:35:24:02:e6:55:98:06:fb:80:5d:3f:
                    4e:5c:7c:05:a2:46:cb:a6:88:0f:30:1b:e6:72:56:
                    43:39:66:59:4a:fe:cd:7f:92:90:65:fe:6f:82:da:
                    4d:5e:26:7a:56:ce:d9:ca:ad:7f:2f:42:df:06:f2:
                    a5:16:08:d9:57:67:34:76:3f:fe:eb:98:33:4e:2a:
                    0a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3B:8A:BC:C1:65:87:EE:81:CE:77:87:36:D2:96:C6:B8:8F:A1:30
            X509v3 Authority Key Identifier:
                keyid:77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/9AAB80560BD511F1920C67C12E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.31.0/24
                IPv6:
                  2001:df0:a480::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:4b:98:3e:d8:2e:6f:cb:0f:cf:94:b4:8a:63:ba:df:b1:42:
         32:1d:40:e9:2d:b5:2d:df:6d:64:05:c3:48:85:2d:a8:d4:29:
         b0:c9:e3:b6:28:68:cd:4f:59:8a:14:3c:f6:64:ec:67:54:58:
         b7:27:b6:9a:0c:b2:17:c6:60:00:ad:06:1f:a5:f2:be:e6:70:
         a0:a3:dd:69:3e:65:46:cc:1f:3a:b6:79:03:d5:bb:21:f4:25:
         15:07:63:18:07:50:2d:1f:7e:bf:47:9f:4d:db:55:b9:98:c1:
         64:17:14:19:89:d1:d3:7c:48:b2:b3:ea:84:bf:77:59:db:14:
         7a:73:e1:19:7d:76:05:a1:1f:4e:d2:0c:d7:be:99:bc:7d:0c:
         0b:7a:2c:70:54:d9:b2:1a:62:63:ce:c5:1f:6d:05:77:6c:41:
         f3:15:32:c0:4b:e8:90:e8:d1:fb:67:2a:06:69:24:b3:5f:b1:
         a9:a8:bd:f0:8c:1b:24:1a:fa:82:02:a2:1e:d8:a1:93:5f:0a:
         9d:13:48:d4:e4:3d:34:46:50:22:10:2d:9a:46:b4:53:dc:9f:
         05:98:0e:9f:eb:6f:d8:2f:33:23:fe:c5:18:05:1e:e5:b4:c3:
         5d:23:9d:d8:13:d3:99:aa:ea:02:ec:73:54:ba:76:6b:60:b3:
         d7:74:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 13:34:10 2026 by rpki-client