Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7CC84384BCB711F0BD57E909C4F9AE02.roa
File:                     7CC84384BCB711F0BD57E909C4F9AE02.roa (raw, json)
Hash identifier:          wuMfV4Prav1vTN6DDOAaG6aXaeJ/i3o0GNDpEUWZL6g=
Subject key identifier:   58:0A:14:5E:DF:90:8E:FF:1F:1F:F4:F8:B0:6B:1D:DB:D1:FE:DF:AA
Certificate issuer:       /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial:       F7
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7CC84384BCB711F0BD57E909C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:45:56 +0000
ROA not before:           Sun 09 Nov 2025 04:22:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     401701
IP address blocks:        103.212.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
                          rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
        Validity
            Not Before: Nov  9 04:22:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58684-cef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:06:18:4e:6c:3d:1e:b2:c3:fd:25:c8:af:
                    7a:53:34:ce:e7:dd:67:82:a9:99:36:81:37:c3:89:
                    5f:67:f7:75:dc:01:59:81:53:3a:87:b6:1c:a7:5b:
                    28:3c:46:75:30:ac:a5:1b:3c:07:66:0d:b5:c6:a6:
                    f1:c5:b1:15:8a:cb:77:9d:07:03:4c:34:9e:3f:76:
                    bd:dc:17:d4:91:1f:cc:f5:63:f7:f8:81:98:8c:65:
                    e1:33:05:c8:49:36:ac:22:47:e2:cb:3f:35:8a:64:
                    d6:69:38:13:be:2d:1e:f1:d0:df:ca:cc:3a:93:d3:
                    0c:9a:c8:6d:db:38:53:60:fd:67:c9:df:b9:d3:69:
                    66:73:ba:87:3c:02:d5:7b:23:f1:89:dd:3c:57:e8:
                    81:ba:b7:64:20:50:3d:65:fd:ab:91:cc:b2:09:35:
                    21:2c:a2:0c:02:c3:d8:1e:59:a8:bf:51:74:cd:c0:
                    2d:5d:12:95:c0:3f:dd:99:01:5b:07:71:51:62:e2:
                    8f:30:ff:18:0f:d9:02:09:8e:a0:10:51:d4:c1:66:
                    73:79:b6:e2:d5:61:35:17:03:27:41:20:00:9b:2c:
                    12:fc:f3:d8:27:c8:b1:39:71:b7:3e:89:8a:0d:54:
                    b9:34:d1:7d:aa:5e:e6:ed:63:03:86:e1:59:a0:43:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0A:14:5E:DF:90:8E:FF:1F:1F:F4:F8:B0:6B:1D:DB:D1:FE:DF:AA
            X509v3 Authority Key Identifier:
                keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7CC84384BCB711F0BD57E909C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:2f:b9:59:84:9b:fe:8f:85:69:25:42:d6:4b:3b:50:c2:50:
         39:cf:5f:12:d3:34:14:b9:29:c4:a1:c4:b4:61:b3:7c:eb:e6:
         21:be:4c:9f:6b:38:6b:3e:f6:4b:b9:92:c2:71:b1:16:65:f0:
         e7:47:35:94:5e:ce:84:64:f7:7b:a8:5d:47:97:18:09:ea:b9:
         1f:7e:a0:d9:8b:9e:09:20:3d:73:d5:07:87:53:32:7a:53:1d:
         a4:f4:de:81:ee:76:b2:e5:61:db:b3:84:ff:86:85:43:f3:53:
         18:d2:7e:d1:9e:ad:eb:59:ab:4e:c5:0d:73:d4:22:40:a0:fe:
         79:9e:71:99:90:ed:c9:37:e3:cf:1a:49:7b:6c:a7:bb:54:b3:
         42:55:20:61:e9:fb:c0:e3:cc:76:55:90:30:6d:9c:8c:e0:8e:
         b9:68:85:43:12:eb:c5:53:89:23:39:08:3a:7d:ab:22:74:25:
         3e:be:f0:42:d9:c5:37:11:a8:23:aa:ce:5d:66:a9:0c:ae:66:
         3e:c2:76:3b:2d:fd:e9:b2:80:41:b7:4e:4d:2e:0d:43:1b:b8:
         c9:af:91:bd:a3:de:a3:27:0c:5d:98:63:12:46:7a:ee:d4:21:
         f8:5f:c7:b2:1f:1b:e9:2a:bf:0d:06:78:68:be:c1:0f:17:67:
         b9:1e:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:52:05 2026 by rpki-client