Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/9DBC04A4C03111F0BF336D44C4F9AE02.roa
File:                     9DBC04A4C03111F0BF336D44C4F9AE02.roa (raw, json)
Hash identifier:          FZFm/uHWHjdUKTUMs6PEA6/rC5z72vRgk2jmyhr256s=
Subject key identifier:   FD:04:36:D1:A2:E0:A2:67:D8:BD:A5:44:44:11:21:FC:1C:74:2A:8F
Certificate issuer:       /CN=A9150A9C/serialNumber=24B0FC18C1A7AFF53F83CAB26062535D2CC5EE6F
Certificate serial:       9B
Authority key identifier: 24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/9DBC04A4C03111F0BF336D44C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 20:39:47 +0000
ROA not before:           Tue 18 Aug 2026 20:39:46 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140711
IP address blocks:        103.152.18.0/23 maxlen: 23
                          103.152.18.0/24 maxlen: 24
                          103.152.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl
                          rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A9C, serialNumber=24B0FC18C1A7AFF53F83CAB26062535D2CC5EE6F
        Validity
            Not Before: Aug 18 20:39:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a84c312-50aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:6c:61:30:3f:0e:f5:dc:d2:1b:09:28:c9:
                    ec:c2:f7:ac:56:d5:6f:52:20:29:a6:07:1c:ac:d9:
                    f0:d8:49:59:d0:c2:37:f9:5f:ee:13:94:29:f1:d3:
                    f8:af:7e:9e:93:18:09:80:ae:26:6e:8e:78:1d:1b:
                    86:4b:b3:01:b9:e8:0e:2c:05:62:2c:de:99:9d:ca:
                    4c:65:4c:a8:9c:a4:5b:96:c6:3b:f0:26:63:16:89:
                    27:ac:19:c8:c9:b2:ee:b4:d5:72:a9:82:bf:d4:70:
                    b7:4d:85:9f:01:43:ca:c8:27:36:9a:16:66:eb:77:
                    f4:2c:a1:9f:5b:7a:ce:73:35:26:89:9f:01:7e:40:
                    ee:07:84:e3:53:a1:ac:2a:b7:49:01:ee:31:51:51:
                    02:3f:28:db:33:b8:cf:0b:a1:0f:16:38:39:15:45:
                    b9:cf:81:70:27:bf:c1:65:f9:52:40:24:79:9d:3c:
                    f9:41:dd:df:52:33:84:e5:26:70:5a:cc:dd:8c:9e:
                    c4:49:a0:ef:f3:e6:f1:67:e6:53:a6:af:03:65:55:
                    cf:71:a1:b2:70:0e:24:9d:bb:ae:1d:2b:7e:a4:9e:
                    79:a5:3f:ea:b8:37:89:64:dd:a7:dc:26:43:01:98:
                    de:72:29:92:c5:51:bd:df:64:67:bc:e6:2f:68:dd:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:04:36:D1:A2:E0:A2:67:D8:BD:A5:44:44:11:21:FC:1C:74:2A:8F
            X509v3 Authority Key Identifier:
                keyid:24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/9DBC04A4C03111F0BF336D44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:1f:af:41:be:da:4d:99:5c:20:8b:a2:25:3a:28:e6:e4:
         03:ba:cd:06:45:f0:49:6c:70:99:b6:0a:3c:ea:86:2d:ec:a4:
         46:6f:af:a7:6b:45:be:e6:2f:9f:99:2e:2f:a4:cb:ed:78:3a:
         a3:d1:d9:d5:62:82:a6:cc:99:69:d1:96:ed:00:64:69:7f:90:
         64:a6:49:cf:2d:89:40:4b:71:00:ce:75:6a:59:fa:65:24:38:
         9c:7c:a8:f3:7d:32:b6:24:f0:44:14:fb:70:cb:ab:e7:1e:66:
         3d:ca:53:4b:3d:88:8f:cb:38:60:ec:ca:71:2f:23:9c:5a:e1:
         a0:57:d5:14:22:ea:49:dc:20:25:c2:9a:c4:62:12:9a:c2:2a:
         61:c5:59:58:77:7e:41:de:ad:89:79:12:66:c8:78:18:a3:44:
         84:93:c4:40:5e:df:37:5d:bd:d7:d7:4e:67:51:6f:4d:32:8d:
         c4:1a:62:b2:ab:d6:75:77:ed:52:c4:2d:c6:a5:c0:5d:65:3a:
         6e:5c:6d:21:dc:6b:f1:f3:3b:c9:82:4e:61:55:e3:a4:4b:25:
         80:58:05:b8:c5:38:bf:b0:c0:a7:1f:de:98:01:be:16:33:08:
         39:4b:52:c0:a6:46:03:ec:0f:56:d6:db:be:1f:ab:a3:34:e6:
         10:51:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:45 2026 by rpki-client