Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7D3521CABCB711F08B02E909C4F9AE02.roa
File:                     7D3521CABCB711F08B02E909C4F9AE02.roa (raw, json)
Hash identifier:          XFH0Q1KpeOYZLCrrHNLmbgTNMLaKVPfV4xztcVnCyR8=
Subject key identifier:   ED:65:7F:DF:3C:AC:40:EA:35:D5:8A:57:88:A8:7C:1F:61:FD:EC:A7
Certificate issuer:       /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial:       013B
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7D3521CABCB711F08B02E909C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 07:32:59 +0000
ROA not before:           Fri 03 Jul 2026 07:32:59 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     40779
IP address blocks:        103.212.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
                          rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
        Validity
            Not Before: Jul  3 07:32:59 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4765ab-057b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:35:70:13:a9:4e:3a:c0:0d:6c:0c:1c:c9:
                    99:c4:79:d1:b3:df:11:3e:cd:37:86:4d:8c:da:cf:
                    61:72:1a:69:78:40:78:a2:db:31:05:98:3f:a3:5c:
                    dc:7a:ba:24:67:df:a3:5f:aa:af:1c:a1:82:6a:99:
                    73:9d:af:e5:61:c0:c3:1a:74:7a:9e:9d:25:23:05:
                    32:bd:0b:ec:3e:e5:99:8a:64:ef:31:ab:78:fc:a4:
                    ea:56:f2:be:52:67:71:95:69:16:aa:d0:78:da:b7:
                    aa:bf:e2:00:45:8c:a4:cc:4c:c6:94:4a:c4:40:54:
                    72:e1:ac:10:9b:0b:4a:20:02:43:bf:40:90:a2:67:
                    63:7c:9e:96:a3:a4:85:f0:7e:34:80:71:06:d9:04:
                    c8:8b:57:ee:78:53:b4:34:43:54:42:75:a7:b7:64:
                    81:f0:52:1d:cd:db:9c:67:98:c0:24:e2:c3:36:38:
                    4f:ad:e3:43:97:ff:56:db:1e:ea:e2:f1:4a:4e:9e:
                    9a:2e:57:b4:08:fc:90:29:fb:b2:41:b7:84:77:ca:
                    f0:58:67:6f:ce:48:95:6a:39:74:54:de:54:fe:d4:
                    63:f1:78:bc:07:a9:98:73:e9:62:a1:cf:00:11:bd:
                    da:08:69:7f:d2:a5:36:e2:6e:20:da:73:95:3d:9d:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:65:7F:DF:3C:AC:40:EA:35:D5:8A:57:88:A8:7C:1F:61:FD:EC:A7
            X509v3 Authority Key Identifier:
                keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7D3521CABCB711F08B02E909C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:06:3c:08:04:b5:2c:5b:f9:cb:a1:9b:24:07:ec:8b:87:8d:
         f3:e3:0b:76:bd:a9:87:a4:d0:dd:24:a0:14:9a:1d:67:30:e7:
         da:28:2a:cb:0b:f8:56:5c:48:87:ab:16:bc:aa:77:6d:6a:72:
         96:3a:1c:39:d9:9c:8f:cc:83:ee:23:80:a9:d1:5b:ae:9d:7d:
         b1:5b:83:ec:f0:29:ca:77:22:a4:a4:91:86:cd:e5:05:c4:dd:
         63:3f:f9:e6:a1:ef:6b:b8:7c:65:ee:e6:b7:0b:53:a7:88:d2:
         97:63:5f:3f:94:f5:0d:d0:12:63:84:de:77:79:65:28:cb:01:
         ef:33:06:54:77:74:b9:a8:9e:e2:3d:5c:0e:5a:1c:88:5e:bc:
         35:38:c9:6b:02:f8:d8:a1:88:ba:b6:78:df:21:2c:9e:33:49:
         5a:0e:46:6c:c0:b6:11:92:bf:ad:ec:cb:9c:90:cc:72:e4:ba:
         e8:5a:d3:02:e9:6c:95:31:45:be:55:a6:62:d0:1e:65:72:bf:
         7f:de:40:f5:b2:06:7e:5b:cf:22:fa:a3:e7:e0:af:03:a0:e1:
         94:96:1c:56:ba:d1:ac:c3:3a:c0:b4:90:fb:89:8f:4a:08:85:
         9f:42:87:2d:b2:a8:42:77:54:70:17:4b:51:7d:81:64:05:db:
         8f:12:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:28 2026 by rpki-client