Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/97786014BAE711F08A930863C4F9AE02.roa
File:                     97786014BAE711F08A930863C4F9AE02.roa (raw, json)
Hash identifier:          kOdyMLhIsg4phrgrWegwIq+aND2WD/1OqTNOa/R51LM=
Subject key identifier:   73:4F:73:47:BD:D2:5E:30:0D:0D:31:F7:A3:D2:A3:18:2B:59:C1:35
Certificate issuer:       /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial:       08CA
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/97786014BAE711F08A930863C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 21:40:26 +0000
ROA not before:           Wed 30 Sep 2026 21:40:26 +0000
ROA not after:            Sun 01 Dec 2030 00:00:00 +0000
asID:                     16509
IP address blocks:        103.143.48.0/24 maxlen: 24
                          103.143.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
                          rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
        Validity
            Not Before: Sep 30 21:40:26 2026 GMT
            Not After : Dec  1 00:00:00 2030 GMT
        Subject: CN=6abd81ca-b707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:26:ae:78:55:9c:e8:41:e2:93:bb:f5:5e:
                    0a:c9:f7:a7:85:86:ec:39:ef:b3:bd:c8:c8:2c:87:
                    48:b8:5f:7f:a1:0d:35:d9:ae:e9:c9:12:03:bb:75:
                    49:cd:46:88:7c:31:03:ec:0a:ef:17:df:e6:fc:f8:
                    40:59:c1:da:e3:93:e7:c7:2c:2d:43:99:3d:dc:f4:
                    96:4f:4b:98:4d:51:a2:d2:d4:68:57:3a:ff:fc:78:
                    40:4f:af:f4:ce:35:bf:ef:95:35:96:7b:45:9f:4d:
                    ad:ac:14:b1:7d:00:7b:4e:e2:72:2a:7e:88:6c:19:
                    1f:0d:84:ca:a6:14:52:f1:99:f0:c2:c4:26:a8:dc:
                    7c:fd:69:99:64:7b:eb:2f:14:6b:fa:20:22:16:ac:
                    bb:e9:8b:a4:a3:0d:22:58:ad:7b:79:05:b1:23:e4:
                    07:1b:7e:3d:46:37:2b:88:ce:28:7f:31:6f:68:0a:
                    f3:8f:96:f9:a5:6e:ce:fb:70:07:2b:8d:4a:63:d7:
                    81:b1:a3:45:e5:9b:12:0e:24:ea:12:5d:18:ee:ad:
                    f9:19:0d:69:d6:64:20:bb:5d:ec:82:26:f3:94:06:
                    54:3a:75:c6:2b:35:2c:2f:b7:fb:8c:2e:23:81:41:
                    e8:57:c2:a7:08:04:06:a7:ce:ae:23:7c:7d:33:86:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4F:73:47:BD:D2:5E:30:0D:0D:31:F7:A3:D2:A3:18:2B:59:C1:35
            X509v3 Authority Key Identifier:
                keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/97786014BAE711F08A930863C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:2e:59:02:e1:99:32:0b:cc:9c:0b:b2:93:ac:f3:83:c9:
         e3:76:64:9d:6f:71:32:d1:ad:67:aa:2b:0f:df:c2:38:22:06:
         b2:90:df:e2:13:6d:98:c9:b6:a2:d7:0c:28:c4:64:ee:8d:da:
         08:47:d7:81:3e:9a:23:f5:27:af:16:88:c5:63:bf:9d:64:ae:
         ff:f4:e6:50:ff:9d:11:5e:f9:bf:d1:3b:3f:14:95:66:d8:48:
         e7:1b:db:33:f5:d2:99:63:57:84:d3:d2:c7:58:97:a5:f9:43:
         8f:4a:1e:fb:c0:59:02:57:14:d8:c2:7e:a1:4d:d9:7d:f5:5b:
         37:8e:c1:81:ce:91:e0:51:0e:55:4a:7f:b5:88:59:0b:11:30:
         53:7d:90:74:e6:f5:a2:f4:e7:d2:9a:df:f0:7a:33:47:81:6a:
         b9:d9:9b:6b:1b:f0:24:52:87:14:c7:95:10:39:18:ff:41:06:
         af:36:d6:c8:68:af:e1:c7:27:11:f6:92:b5:20:72:c8:2c:c2:
         9f:2b:29:3f:ce:24:01:93:aa:a7:f8:c7:e2:09:c0:df:38:b6:
         52:a7:d2:c5:6b:cd:f0:7c:45:0b:0c:9b:7d:fb:33:5d:8e:26:
         d5:71:06:90:1f:02:be:38:ee:bf:43:2e:1a:fd:05:00:d2:09:
         95:1c:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:58:33 2026 by rpki-client