Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AF22E83C2C1711EC817C5912C4F9AE02.roa
File:                     AF22E83C2C1711EC817C5912C4F9AE02.roa (raw, json)
Hash identifier:          qi4jN4NH1cHfCHOBZAPI1Wv+ZZRVyRsB2Qs3k377dDQ=
Subject key identifier:   6B:39:BF:74:63:B7:01:9D:1C:23:2D:B8:DD:74:89:F6:5D:AE:18:C9
Certificate issuer:       /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Certificate serial:       05B2
Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AF22E83C2C1711EC817C5912C4F9AE02.roa
Signing time:             Fri 28 Aug 2026 23:44:30 +0000
ROA not before:           Fri 28 Aug 2026 23:44:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139204
IP address blocks:        103.170.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl
                          rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
        Validity
            Not Before: Aug 28 23:44:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a921d5e-bcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:02:2d:69:b8:61:4e:64:21:fe:50:4c:68:
                    d1:e1:21:e0:77:6b:ce:bb:88:74:79:20:96:db:22:
                    4c:d2:28:37:b4:72:47:f8:38:14:82:c1:bf:00:29:
                    09:79:11:55:2c:e7:69:1d:ab:14:8e:08:40:bb:c0:
                    4c:74:67:a9:76:10:30:11:97:17:97:07:63:13:52:
                    ac:5f:95:a7:3d:c7:2c:6f:dc:ea:87:3f:06:2c:ed:
                    c2:e2:de:8d:01:ab:58:c4:45:7f:61:25:10:e1:00:
                    c6:ae:3a:52:ff:94:2a:48:4a:61:d3:b9:c7:5c:bb:
                    9c:bf:40:e2:36:14:19:e6:b4:a7:f8:14:d8:66:a4:
                    e9:d5:5a:ed:e5:a8:33:87:f7:7e:f2:d8:e9:8a:1a:
                    69:ed:67:74:94:25:c7:ad:08:7d:21:6b:a6:ac:c6:
                    67:d4:f6:00:14:2c:1d:1e:29:56:60:41:62:b6:2d:
                    3e:71:ae:f1:5f:33:fe:16:5a:3a:d2:00:1a:21:27:
                    67:be:9d:9d:7a:7d:4b:e0:08:7e:c0:7e:9f:f8:b5:
                    f0:84:be:15:d7:8e:ad:5e:35:19:59:49:26:b9:b0:
                    16:f4:58:84:b0:74:46:1e:6d:2d:92:bd:d6:fb:15:
                    8a:ba:e5:60:2d:21:64:16:45:6c:0c:66:94:bf:97:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:39:BF:74:63:B7:01:9D:1C:23:2D:B8:DD:74:89:F6:5D:AE:18:C9
            X509v3 Authority Key Identifier:
                keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AF22E83C2C1711EC817C5912C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:36:fc:3c:fa:d9:76:28:69:db:dd:18:fd:ea:c9:eb:f8:63:
         69:a0:08:ee:f3:94:07:aa:71:29:ab:07:ff:cd:57:b1:4f:45:
         f7:d5:b8:3d:33:c0:66:8b:db:ce:c0:df:15:61:a6:0f:cb:63:
         05:86:6b:0e:32:0b:05:ea:58:f7:e7:57:55:c4:63:dd:0d:b6:
         11:e4:be:f8:5d:ea:49:92:8f:1c:84:28:45:95:84:f0:e2:fc:
         ae:da:1c:1a:b2:7c:c8:b0:b0:34:fa:91:7c:93:27:50:d9:ef:
         4b:29:b2:1f:68:9b:46:2b:c5:34:8d:ee:9c:1e:58:8c:8e:f7:
         cb:3a:54:4e:f0:ce:27:92:7b:ec:5e:b7:5a:09:88:38:e9:90:
         7b:80:67:84:2d:00:12:1b:dd:9d:21:81:c1:a3:40:c1:62:ab:
         2c:ca:15:d0:8d:ba:03:31:80:62:34:cd:fd:40:aa:02:f4:c8:
         c3:10:f3:47:91:23:cd:38:2f:3c:94:6f:4a:33:c3:43:59:af:
         d7:9a:15:4d:83:cd:7a:6d:de:2a:0d:9f:5c:d2:e3:a8:98:40:
         f4:ad:7b:b8:3a:77:02:19:14:9e:3a:9d:55:02:f7:12:93:2a:
         57:69:f1:77:83:49:db:57:d8:6f:35:8e:08:e5:b9:1b:66:e3:
         08:a9:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:01:09 2026 by rpki-client