Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/B51F229E1BC611F08FE24C2CC4F9AE02.roa
File:                     B51F229E1BC611F08FE24C2CC4F9AE02.roa (raw, json)
Hash identifier:          QZXloWUQ7ddz+/KBWMrxv7U+rSs8GnWshPY4O7WqH3o=
Subject key identifier:   65:31:2C:B5:C9:9F:A0:EF:BF:BF:D3:3B:AC:15:5E:A6:5D:DD:68:8B
Certificate issuer:       /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Certificate serial:       A4
Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/B51F229E1BC611F08FE24C2CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:58:44 +0000
ROA not before:           Thu 17 Apr 2025 20:01:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     31287
IP address blocks:        103.146.168.0/24 maxlen: 24
                          103.173.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
                          rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 06:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
        Validity
            Not Before: Apr 17 20:01:11 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5a5a4-6372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:9b:41:07:4f:a8:c5:35:d3:40:ea:0b:a6:
                    4f:51:20:94:5e:17:ef:ed:8c:23:18:68:11:d2:20:
                    78:63:91:bd:81:94:61:1e:d0:3f:f5:04:94:68:45:
                    0a:62:15:a8:17:73:d2:95:f0:de:2e:da:0c:ce:84:
                    d4:c1:e4:d1:e6:f9:a2:35:1b:38:06:cc:cd:a7:a4:
                    5b:6d:4f:fd:96:37:f9:17:a4:79:21:a7:49:6c:9b:
                    22:fc:d8:5c:ad:65:e2:8c:1e:bc:bf:07:7d:58:47:
                    52:ab:44:92:68:7d:51:77:eb:09:b6:e5:a7:a4:3f:
                    a5:55:a7:ff:41:c0:44:fd:f1:3b:a0:40:08:44:00:
                    83:72:89:8d:76:56:ec:42:0c:24:59:fb:5b:a9:cd:
                    06:d6:6b:54:95:47:44:55:fa:ba:3d:f4:04:18:a6:
                    71:57:9d:73:87:8d:bf:cb:d4:16:e6:99:5e:ee:46:
                    74:77:41:45:e0:19:43:2d:d6:99:1f:76:f6:05:0f:
                    4a:8c:62:65:de:b7:11:16:20:74:60:aa:20:8c:81:
                    99:db:c7:4c:3f:ad:e6:4f:a1:3c:89:32:05:02:51:
                    f4:6f:a5:17:9d:3f:42:72:43:78:e3:93:96:fe:ac:
                    cb:d4:1e:12:e9:30:63:9b:47:4a:17:c3:40:cf:60:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:31:2C:B5:C9:9F:A0:EF:BF:BF:D3:3B:AC:15:5E:A6:5D:DD:68:8B
            X509v3 Authority Key Identifier:
                keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/B51F229E1BC611F08FE24C2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.168.0/24
                  103.173.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:f0:17:84:b1:17:6a:94:7d:91:2d:d3:af:cd:a5:11:c7:9c:
         39:66:20:7c:e4:c7:4a:25:98:ff:95:1c:9d:7a:f5:fd:b2:c0:
         32:9d:47:b2:b6:ce:c8:03:ab:dc:e4:1a:c2:25:df:2b:ad:4c:
         01:01:e6:39:c5:ea:27:38:18:fe:0a:71:7f:7e:6a:29:cc:d5:
         a6:26:79:0e:ff:d3:78:25:94:0f:ad:60:d7:ec:73:c3:25:1e:
         06:06:81:04:59:21:45:1c:5e:49:80:35:e8:8f:cb:24:87:71:
         80:aa:bb:ec:79:a9:cb:f0:0d:75:1a:07:d4:e7:76:01:d0:1c:
         c6:1f:4e:ab:32:54:32:58:96:b6:fe:56:d5:5e:aa:2a:18:bc:
         7c:1f:d2:12:39:e2:0f:e9:43:fa:b5:eb:26:ef:3c:c2:d5:b1:
         61:ae:8d:2c:99:fe:cd:1d:bb:08:10:5c:41:48:31:a7:c8:5d:
         5e:23:0b:f1:cc:63:82:f3:ff:e1:6f:7d:0c:5c:db:30:ee:14:
         02:5f:bf:17:bc:f5:9c:05:32:50:ab:1b:1e:8d:6f:45:9f:7a:
         16:c8:5f:49:a3:13:d0:f2:3d:8f:2f:bd:5b:1f:8d:04:7e:71:
         f4:bb:c5:d8:41:2d:ba:db:b7:94:28:1c:90:a5:08:6d:c6:6a:
         4a:10:1b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:24:44 2026 by rpki-client