Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/39B14A585D9511F1AC779E1696833773.roa
File:                     39B14A585D9511F1AC779E1696833773.roa (raw, json)
Hash identifier:          6WWduhNeSH9NClmdKiDddKwHknqhcEMN/C79nCnlWKw=
Subject key identifier:   92:FF:64:2E:38:01:FE:49:0B:BD:B3:A4:02:7D:BF:4F:EB:0C:50:BD
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       0642
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/39B14A585D9511F1AC779E1696833773.roa
Signing time:             Mon 01 Jun 2026 08:38:12 +0000
ROA not before:           Mon 01 Jun 2026 08:38:12 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154383
IP address blocks:        43.226.231.0/24 maxlen: 24
                          103.46.142.0/24 maxlen: 24
                          103.46.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 23:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Jun  1 08:38:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a1d44f4-8696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:83:1f:1f:fa:92:a4:da:5d:bf:b4:b2:0a:
                    fc:00:5d:73:05:fe:bb:33:3e:b8:f9:ec:fd:5c:c0:
                    2a:0f:fe:50:98:fe:9a:a3:47:a0:06:91:31:fa:1e:
                    5c:01:ab:4b:8a:25:c3:00:d1:e1:51:63:de:de:72:
                    3d:27:9d:8e:8c:d0:f2:43:41:6c:1c:fc:69:4a:ca:
                    87:97:06:9e:05:f5:38:1e:57:5b:e4:db:0e:9a:8e:
                    78:c1:5f:d2:32:e2:77:a6:99:e8:7c:c5:2d:2e:24:
                    bc:3a:5d:40:8e:71:ba:62:3e:e1:e3:1d:f2:98:49:
                    20:5b:4a:99:9f:cf:55:ed:04:45:02:7f:f4:b4:a4:
                    ca:1d:1a:cd:45:ef:1c:b2:c1:66:d0:55:56:33:1b:
                    f6:39:92:62:98:95:d5:b5:e1:31:de:08:ea:e0:67:
                    73:aa:78:ac:c1:79:f5:b2:ed:90:11:36:4a:b9:c7:
                    f1:21:8d:7f:d2:b6:93:4b:97:79:a9:ba:2a:3e:9d:
                    fc:59:0b:47:c4:16:4d:ec:0f:0b:2f:d1:71:21:8e:
                    ce:e7:ac:66:e6:50:c0:2b:06:c1:b8:34:09:64:92:
                    6b:66:2c:08:4b:47:f3:fa:ea:da:40:42:a8:84:94:
                    ae:ca:a9:57:70:6c:1d:8c:ff:14:8f:63:a4:33:86:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FF:64:2E:38:01:FE:49:0B:BD:B3:A4:02:7D:BF:4F:EB:0C:50:BD
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/39B14A585D9511F1AC779E1696833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.231.0/24
                  103.46.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:ac:7f:44:33:f5:cb:84:e9:95:09:c7:59:6d:46:b8:2c:65:
         9e:ca:c9:56:ac:5e:7c:25:aa:d7:a9:86:6b:f9:d0:e5:56:1a:
         9c:56:a3:3a:e2:47:4b:f3:ca:10:e6:70:a3:5f:60:c3:fa:a8:
         2b:14:3d:33:90:f5:76:ca:e9:47:e0:a0:35:50:ff:39:de:6c:
         4b:9f:86:d0:3c:5b:26:ac:04:db:6d:72:2a:96:93:6b:22:52:
         8c:4f:42:22:ce:71:90:59:0f:c4:76:22:69:82:51:49:f3:05:
         45:bf:82:a1:62:f2:35:8f:95:35:88:4d:c2:ea:a6:ac:49:79:
         8e:09:db:4a:fd:a5:e8:02:08:e2:d2:b6:01:22:64:d2:cc:00:
         4b:c6:ec:8c:3a:10:32:fd:ea:bd:05:0c:56:12:17:61:55:63:
         25:6d:7b:d9:64:1f:8b:bb:8b:74:27:24:36:a2:96:f7:68:ae:
         03:61:18:97:9e:b2:b6:db:28:9c:88:31:8a:bb:01:e3:ad:6d:
         b9:d5:ff:3a:bf:44:d4:ca:9d:0f:b6:56:fc:8a:c1:9a:cc:dd:
         bc:8c:e8:51:ad:85:73:59:9c:19:dc:96:ef:92:81:b2:05:d4:
         6b:63:9c:17:d6:18:8c:70:77:b4:05:0f:24:dd:05:62:20:c6:
         22:f4:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:57:56 2026 by rpki-client