Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/1B9CFE48055F11F0861EE119C4F9AE02.roa
File:                     1B9CFE48055F11F0861EE119C4F9AE02.roa (raw, json)
Hash identifier:          s+Ins2dxN86QTHjcB8YXqLtQtxtHR/M8caRS+c+QI7U=
Subject key identifier:   F9:58:BF:27:74:69:BC:07:AA:C8:D8:64:28:D8:9D:57:01:6D:82:A5
Certificate issuer:       /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial:       021E
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/1B9CFE48055F11F0861EE119C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:13:55 +0000
ROA not before:           Thu 03 Apr 2025 05:33:28 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     197537
IP address blocks:        103.72.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
                          rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 03:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
        Validity
            Not Before: Apr  3 05:33:28 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a481e3-6c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:f6:3e:cd:c4:9d:50:99:6d:c5:99:9a:72:
                    d4:10:ca:6c:38:72:ba:83:f3:78:8f:84:29:c1:d8:
                    a9:d3:24:3a:f8:bd:de:bc:da:17:b9:fc:05:14:d0:
                    a8:d4:03:ae:07:67:53:c3:7e:b5:6e:2d:65:15:64:
                    fe:8d:d9:c3:9b:58:95:55:fb:24:23:d9:2b:b1:8b:
                    b2:7e:6b:10:8b:7f:5d:1d:90:60:47:ad:33:93:a2:
                    dc:17:eb:3a:bd:35:b5:aa:81:95:ef:59:e4:fc:f3:
                    79:ea:64:d0:98:80:c2:82:d3:a3:62:59:02:4f:5e:
                    fd:70:6b:90:cd:04:44:b2:06:51:76:29:aa:dc:44:
                    15:bf:ac:cf:d5:d9:35:06:e6:85:71:57:f2:4b:b3:
                    ba:07:28:55:d1:78:9c:7e:2e:c4:76:12:50:8c:b2:
                    23:69:2d:b6:93:b0:d6:fa:bc:c5:e9:4b:ea:f9:65:
                    2c:71:92:38:2f:fc:4f:f6:29:51:ae:3e:61:07:81:
                    0d:5b:7a:52:3e:cc:91:c7:c6:20:1d:10:d3:cd:13:
                    ff:e9:f2:73:65:f6:ab:c5:43:ba:d6:23:57:8d:e3:
                    d0:63:c1:78:ac:f7:7b:c2:ea:2c:83:ca:83:68:01:
                    0f:de:af:0c:36:26:6f:23:0f:a1:d2:3c:a6:b1:9a:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:BF:27:74:69:BC:07:AA:C8:D8:64:28:D8:9D:57:01:6D:82:A5
            X509v3 Authority Key Identifier:
                keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/1B9CFE48055F11F0861EE119C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:49:68:09:8d:98:de:dd:c5:9e:8a:0f:ac:b2:6e:c8:47:
         98:85:5e:b2:a2:03:19:07:03:4b:d7:70:77:b9:a7:71:30:11:
         40:96:03:46:5f:9a:79:d2:f5:23:cd:c2:cc:69:15:77:9d:6f:
         4b:ec:5a:dd:1b:af:e0:ab:3b:a2:bd:6c:fc:48:de:8d:a5:7a:
         a7:40:dd:c7:02:4a:0e:0b:2e:be:68:dd:20:0c:93:17:51:af:
         14:24:68:f7:c1:4b:52:ce:64:07:b9:7a:56:91:18:15:69:0c:
         c1:81:c9:7e:29:d2:67:fa:e1:ab:8d:f6:f6:96:e3:60:f5:80:
         81:54:42:49:e7:d1:2e:1f:09:aa:03:41:fe:a7:b6:37:b0:fb:
         98:22:6f:b8:65:9f:36:7f:ad:ca:23:77:71:8a:54:c6:28:79:
         87:c5:18:86:eb:f1:55:a6:54:ea:1d:a5:b9:b0:38:56:f3:a0:
         b3:cf:a3:fe:1a:c6:f3:c3:a8:49:e5:73:f3:08:8e:08:cb:fc:
         29:05:e8:9f:72:f7:3a:1c:78:c3:6f:6a:d2:95:15:68:0c:60:
         54:fe:56:54:fc:a4:a6:75:ad:91:90:e8:c0:58:bc:e2:a4:50:
         c8:6e:fe:9c:d8:e6:12:d6:c2:c5:61:ac:72:6d:c0:13:2a:1b:
         de:51:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:15:00 2026 by rpki-client