Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/1C9AB3F67D6711EA90858415C4F9AE02.roa
File:                     1C9AB3F67D6711EA90858415C4F9AE02.roa (raw, json)
Hash identifier:          8+8bN1NcaIt/r37ayH6ZqoV7h8tf1CAPAnKbAHMBs5w=
Subject key identifier:   D3:7E:4A:A9:A6:09:42:3F:A0:C6:99:19:8E:79:A1:AC:81:73:D1:3E
Certificate issuer:       /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD
Certificate serial:       0AD8
Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/1C9AB3F67D6711EA90858415C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 20:38:54 +0000
ROA not before:           Tue 18 Aug 2026 20:38:54 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     140544
IP address blocks:        103.150.56.0/23 maxlen: 23
                          103.150.56.0/24 maxlen: 24
                          103.150.57.0/24 maxlen: 24
                          2001:df3:5a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl
                          rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2776 (0xad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD
        Validity
            Not Before: Aug 18 20:38:54 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a84c2de-ad09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:bb:c3:0c:fc:0a:4f:33:ef:41:5a:5a:ea:
                    ba:0a:a1:50:09:60:f6:e0:21:70:5e:58:2d:2e:2d:
                    5c:8f:86:0b:74:44:bf:65:9b:c1:2b:d8:43:c7:27:
                    41:5b:1a:08:2b:2e:9f:de:32:f6:75:25:89:88:be:
                    fa:28:7f:20:ab:fb:65:96:58:08:61:26:59:f2:3f:
                    aa:fd:4f:3b:32:46:86:21:fe:b8:ca:a0:f2:90:84:
                    e7:af:58:7d:bf:16:a0:0b:f4:95:ac:11:4f:47:fc:
                    07:65:31:a1:14:c4:74:d4:ee:0b:b8:67:cf:29:21:
                    9c:4a:8f:39:7c:9e:90:31:50:60:77:e3:ca:5c:e4:
                    de:bb:e5:47:6e:9c:73:24:5f:95:20:02:a2:8c:d3:
                    2f:e7:24:46:a5:5b:ba:9b:ad:b2:3d:8f:64:d2:7c:
                    b3:bb:30:6a:88:f7:36:97:72:f0:6b:50:d6:64:da:
                    13:ed:9d:5c:64:f1:1f:ff:c4:2f:70:3c:5c:bd:b6:
                    a8:fa:c8:6b:ec:a0:9a:aa:b8:89:6a:3a:f5:41:96:
                    2f:d4:08:ae:2d:96:c7:69:db:b0:63:18:2a:f2:74:
                    34:60:f6:9e:f0:15:17:73:34:39:7d:bd:77:be:2d:
                    b9:22:6e:33:61:7a:a7:9b:18:0b:71:60:b2:ab:ca:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7E:4A:A9:A6:09:42:3F:A0:C6:99:19:8E:79:A1:AC:81:73:D1:3E
            X509v3 Authority Key Identifier:
                keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/1C9AB3F67D6711EA90858415C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.56.0/23
                IPv6:
                  2001:df3:5a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:46:ab:61:f4:7c:31:dd:b2:f4:7d:a6:f9:45:0a:30:f0:2a:
         7d:0e:37:17:fc:3e:2d:5a:fa:55:a8:6b:d8:d7:d2:82:f1:f4:
         0e:4f:1e:89:a3:f0:b6:86:0b:a9:b7:7e:99:b9:38:13:9f:20:
         12:f1:86:fc:c5:52:6a:7f:fa:7e:b6:55:95:2e:4b:1d:01:e3:
         89:4d:b7:ee:c9:0c:11:ec:2b:f3:65:b8:4a:2a:78:23:72:3d:
         f1:f6:46:78:84:42:55:ab:c5:1c:61:9e:d8:27:8e:3c:a7:0c:
         35:5c:90:8e:33:0d:45:2d:03:ba:05:9d:a0:1d:9a:84:e7:10:
         e3:a8:70:bd:db:66:04:fd:e5:d1:0e:12:4f:5e:31:6c:fa:44:
         89:70:11:c0:cc:6c:39:e7:5b:8d:6f:ea:41:83:43:d2:08:a6:
         82:55:e0:67:ad:54:4f:15:45:15:8c:09:78:bd:59:1b:bb:cd:
         f5:fe:76:3c:04:41:73:05:30:32:72:10:0c:e1:04:0e:b9:32:
         51:70:c7:69:b5:e1:49:cb:e7:32:34:ab:9f:b9:99:0b:11:d1:
         c6:da:de:7f:81:46:1d:dd:c6:03:93:c0:6f:d3:c4:89:40:ec:
         73:b1:82:23:d7:25:2f:37:17:c0:ba:44:5b:f4:36:a6:54:cf:
         17:0d:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:16:49 2026 by rpki-client