Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/76F9B128436611F1B326F017BA833773.roa
File:                     76F9B128436611F1B326F017BA833773.roa (raw, json)
Hash identifier:          XwQOlFCybtjR7xPKKVrsh1aUbT4sQzjKLLKIYXMd7zY=
Subject key identifier:   92:1E:EA:D2:EC:F6:76:03:25:4D:34:18:B4:EE:57:42:BE:D4:8A:6F
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3D97
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/76F9B128436611F1B326F017BA833773.roa
Signing time:             Thu 06 Aug 2026 15:10:58 +0000
ROA not before:           Thu 06 Aug 2026 15:10:58 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     10068
IP address blocks:        101.53.89.0/24 maxlen: 24
                          175.176.143.0/24 maxlen: 24
                          182.237.58.0/24 maxlen: 24
                          203.173.110.0/24 maxlen: 24
                          203.173.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15767 (0x3d97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:10:58 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a401-eec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:6a:84:54:41:50:ee:bf:2e:06:66:ac:ca:
                    8f:c3:30:ca:c1:87:05:cc:75:a3:26:ec:d8:de:cc:
                    8c:93:35:47:a6:20:67:60:96:4c:50:98:93:da:d2:
                    43:9d:0b:1e:44:c9:0f:8b:14:46:af:91:58:48:a5:
                    e3:aa:a6:56:2b:b4:87:d6:71:1c:24:57:ee:79:74:
                    39:3d:24:da:15:9b:c7:3a:76:21:60:89:93:12:31:
                    56:06:5c:72:9b:6a:78:8b:43:ae:7e:55:08:ba:1d:
                    9e:23:b3:53:c1:09:39:80:2a:61:2c:9f:6f:28:69:
                    7c:66:1f:8f:94:60:3f:b1:26:67:4b:1e:60:c8:bd:
                    3f:6e:71:a3:75:35:88:8a:b2:0a:c5:8b:ca:94:69:
                    9a:59:86:18:9e:18:ac:f5:44:ac:80:a9:19:1e:70:
                    c9:32:4c:cb:09:8c:ff:56:aa:cc:17:a0:bd:f6:b6:
                    6f:3b:80:00:f5:8b:6c:b9:81:5a:8e:d1:f1:84:84:
                    e6:1d:c3:2a:18:3f:08:22:f1:00:90:b3:50:8b:10:
                    01:c5:6b:c8:99:77:e1:45:0f:f8:95:f3:86:63:f9:
                    7c:0f:0f:3a:36:89:dd:30:c6:e3:29:f5:be:75:74:
                    53:1d:93:63:5e:1d:82:2b:e7:92:6a:89:51:5c:b2:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1E:EA:D2:EC:F6:76:03:25:4D:34:18:B4:EE:57:42:BE:D4:8A:6F
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/76F9B128436611F1B326F017BA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.53.89.0/24
                  175.176.143.0/24
                  182.237.58.0/24
                  203.173.110.0/24
                  203.173.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:1b:3a:34:db:6b:3f:90:0a:bb:9d:94:34:87:ed:b6:d3:1c:
         87:fc:42:a3:5c:a7:03:f6:30:30:a2:32:f5:7b:6a:e2:f6:0f:
         d9:64:8f:e7:57:f2:2a:f6:55:01:5e:64:46:03:26:ed:d7:6e:
         f1:9f:d3:2f:38:3a:57:c0:04:c4:ed:85:d4:16:ad:59:17:26:
         43:b9:72:5e:43:54:5e:15:f7:27:99:5e:45:55:80:74:cb:26:
         19:08:0b:14:cc:e3:07:54:e1:d1:f5:f3:24:e5:18:f4:f8:f4:
         24:73:e1:ec:01:00:c5:da:a7:10:a6:f0:53:64:ef:77:d4:da:
         95:e7:3c:e4:ca:b1:9b:f9:dd:bb:bb:b6:1b:4e:ff:db:be:d1:
         82:00:05:59:2f:b4:a9:ef:09:24:3b:58:90:3f:30:ed:6e:8b:
         81:ca:a0:fc:bb:40:ff:2f:0d:eb:8c:94:53:13:f8:d9:34:a7:
         0a:5a:f6:c9:28:6a:4b:46:82:2a:da:3e:bb:c7:41:41:9c:fe:
         a9:4a:84:10:97:fa:bf:ed:fa:cb:47:59:11:ef:8a:cd:4b:bf:
         2c:fe:92:e3:10:40:66:1b:d4:00:9f:c3:fd:38:7c:48:52:ca:
         d9:84:88:54:3a:01:cf:b2:1a:e3:ff:51:54:a6:45:ca:7b:d4:
         04:5f:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:42 2026 by rpki-client