Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/AFDBAB82BAE911F09182A92BC4F9AE02.roa
File:                     AFDBAB82BAE911F09182A92BC4F9AE02.roa (raw, json)
Hash identifier:          LIvXK5dtSP+pN9L9DaqZWQtFq3+W2kOblwz/EKMeARg=
Subject key identifier:   B2:16:85:03:F9:BF:7B:75:A6:2E:88:41:C8:9B:99:25:24:41:AF:D0
Certificate issuer:       /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial:       08C9
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/AFDBAB82BAE911F09182A92BC4F9AE02.roa
Signing time:             Wed 30 Sep 2026 21:40:23 +0000
ROA not before:           Wed 30 Sep 2026 21:40:23 +0000
ROA not after:            Sun 01 Dec 2030 00:00:00 +0000
asID:                     14618
IP address blocks:        103.143.48.0/24 maxlen: 24
                          103.143.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
                          rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249 (0x8c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
        Validity
            Not Before: Sep 30 21:40:23 2026 GMT
            Not After : Dec  1 00:00:00 2030 GMT
        Subject: CN=6abd81c7-5061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:df:01:6d:84:86:86:07:59:d0:d4:e2:f3:
                    d3:66:9e:53:f2:d5:5c:c7:be:36:11:b2:6a:7e:7e:
                    75:10:c2:51:83:a2:a7:3e:8f:d8:84:1b:1f:cc:eb:
                    b7:71:6d:33:f6:20:8f:c5:3b:48:84:ea:46:e6:e4:
                    6d:93:5e:06:16:78:25:fe:59:eb:61:9d:39:3a:01:
                    b7:57:74:a2:0b:02:b5:04:03:0b:31:b0:85:6f:d7:
                    0a:84:9e:62:77:9b:44:ca:bf:7f:d9:fa:e2:9e:d3:
                    ff:ad:0b:b6:29:51:71:62:4f:4f:f6:d2:90:77:52:
                    1b:c6:ed:50:90:16:a9:b5:62:ab:4f:c8:4a:93:1f:
                    fb:b9:79:dd:53:77:fb:35:56:75:0c:4e:fd:91:08:
                    a4:84:85:cb:a1:39:cb:f3:40:c9:d8:81:7f:c1:3b:
                    f5:b3:b3:4c:3e:3e:a7:64:18:99:5f:8a:1c:c6:1b:
                    bc:02:43:30:40:58:f2:07:1d:33:a3:1d:e3:e1:c3:
                    3c:6c:6c:20:fa:ef:7a:0c:07:1b:a2:b7:f7:ac:a2:
                    cf:95:9d:e3:6f:26:92:78:99:19:5b:73:56:21:56:
                    c8:34:a0:2a:c5:7e:dc:5e:1d:05:71:d0:79:7b:36:
                    9f:c4:e5:d0:87:55:46:3f:23:db:63:0e:d2:5b:d1:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:16:85:03:F9:BF:7B:75:A6:2E:88:41:C8:9B:99:25:24:41:AF:D0
            X509v3 Authority Key Identifier:
                keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/AFDBAB82BAE911F09182A92BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:77:e1:de:b8:a8:e0:9c:00:7a:58:3f:6d:26:ab:93:fd:78:
         2e:47:8b:7f:ae:e1:0a:8a:47:e7:a6:52:fb:76:68:dc:d5:2f:
         ca:68:62:99:b3:88:de:38:1a:e9:14:ff:02:50:b2:7d:f0:d3:
         c2:4b:b2:a6:38:67:c2:0f:e4:45:b3:24:cc:14:c1:b7:95:eb:
         1a:cd:dc:94:bb:0e:15:04:70:82:df:0f:c0:5e:cf:f2:63:7f:
         d3:33:f4:00:47:54:75:55:4f:dd:83:72:54:7e:55:d3:f5:50:
         97:d1:d0:70:d7:91:fb:ac:3f:a1:3b:b9:1e:d4:6c:3a:97:4e:
         47:7a:25:77:48:38:e7:c9:15:0a:38:20:19:f2:ec:3a:59:4c:
         96:6e:36:0c:df:d3:e6:38:03:12:71:a9:cf:02:39:d4:6c:71:
         48:7f:71:50:0d:d8:95:64:e1:55:71:e8:41:5f:71:51:4b:83:
         e2:2b:95:f8:a4:0f:65:5f:12:77:2a:d3:17:12:93:1b:6e:69:
         d5:17:4c:97:66:8a:74:61:fc:1c:ee:c0:1d:b8:9e:fe:52:6a:
         9a:7e:15:71:88:ff:38:0a:16:5d:f2:49:ac:31:f3:34:6d:84:
         28:ee:42:4d:96:d9:79:a4:03:ac:22:61:2f:ec:c7:59:7b:99:
         bf:01:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:12:57 2026 by rpki-client