Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/76601C1C23E611EF92A9097CC4F9AE02.roa
File:                     76601C1C23E611EF92A9097CC4F9AE02.roa (raw, json)
Hash identifier:          IV5neT5fvrEfaGYFt5jPMxG9PaLe4Tnwc926KjM/xSo=
Subject key identifier:   08:FB:D8:21:C5:9F:6A:44:E5:A0:53:AA:B7:07:42:3E:5C:B6:6D:65
Certificate issuer:       /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial:       0196
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/76601C1C23E611EF92A9097CC4F9AE02.roa
Signing time:             Thu 11 Jun 2026 07:34:28 +0000
ROA not before:           Thu 11 Jun 2026 07:34:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152705
IP address blocks:        103.23.148.0/23 maxlen: 23
                          103.23.148.0/24 maxlen: 24
                          103.23.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
                          rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 07:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
        Validity
            Not Before: Jun 11 07:34:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2a6503-1d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0e:21:93:f9:0f:2c:1f:e7:e4:ef:ca:d6:54:
                    d9:6e:ee:48:e5:1c:6f:eb:04:b6:74:a1:0a:10:57:
                    06:04:33:56:b7:6d:4b:55:69:3f:98:69:98:d3:6b:
                    7c:e4:c5:2b:f1:52:98:86:3a:46:71:11:3e:83:ec:
                    cf:48:53:43:82:cd:40:b8:35:0a:d5:7e:a6:4a:ca:
                    b5:f4:73:46:34:d9:6a:73:83:ce:47:9c:e6:72:3e:
                    88:31:57:aa:f4:b2:ac:6b:d1:69:4c:af:33:80:18:
                    89:bb:6f:47:9f:f9:11:f0:d5:34:7f:a1:cd:8a:cd:
                    f7:62:ea:c5:54:ad:2c:3d:63:05:2f:73:14:72:51:
                    7f:50:8e:68:d1:b7:5a:f6:95:ca:79:d9:e7:a4:48:
                    fd:fe:49:17:f6:19:e9:5c:98:d5:65:19:86:bb:f4:
                    0d:94:83:db:12:72:9a:0c:bf:07:62:03:1b:0b:f9:
                    11:50:34:ff:03:00:eb:9e:fe:f3:b3:fd:68:42:91:
                    af:d7:7e:a3:9b:d8:cf:a4:16:9d:a5:a4:59:06:4b:
                    a7:24:c5:c5:5a:40:a8:4e:20:9e:21:83:e0:45:79:
                    b3:1b:2b:25:45:87:4c:3b:be:b8:f3:ef:52:3d:4a:
                    e9:d1:3f:1e:94:d5:71:15:0f:cd:45:49:98:d0:55:
                    24:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FB:D8:21:C5:9F:6A:44:E5:A0:53:AA:B7:07:42:3E:5C:B6:6D:65
            X509v3 Authority Key Identifier:
                keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/76601C1C23E611EF92A9097CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:cc:75:2e:86:d5:0d:ef:01:8f:51:c8:06:27:3a:3b:78:c2:
         a1:ed:19:77:6d:98:87:21:94:64:fb:6c:f5:c5:11:23:c8:82:
         b2:e6:e2:45:6a:a5:d5:c8:c8:c1:2e:8f:f0:b0:35:c1:94:b3:
         de:b8:eb:21:e2:b8:76:e3:ad:ee:84:3e:2a:e7:12:b1:5d:02:
         6c:9d:2c:46:2f:5e:ba:19:a8:f8:37:60:21:11:78:f9:bb:49:
         b5:4a:83:6d:ba:86:de:d9:5a:70:ec:5e:c6:ef:68:92:eb:b0:
         b2:52:a4:29:ab:64:00:7e:b0:d5:bd:10:af:92:72:8f:d4:11:
         91:97:95:58:77:cc:6c:4f:5b:62:13:ab:08:21:02:e2:64:9c:
         7c:2f:a9:5c:b4:75:d6:3d:ca:b9:5e:66:ae:68:09:df:e1:ae:
         43:e6:b1:91:69:6c:d2:58:ff:d8:c5:43:95:4a:d2:cc:c5:e8:
         f2:05:64:33:54:8d:60:80:46:40:3b:aa:c8:92:81:21:c3:49:
         00:2b:dd:e1:20:b0:86:80:3b:5b:98:13:8f:85:64:8d:a0:98:
         77:fd:0d:26:ba:d9:65:65:c3:87:0e:cf:2e:83:81:56:fa:5f:
         58:2c:ab:aa:6f:b2:1c:d5:25:c8:4f:07:31:a2:66:4b:cf:a8:
         5b:fb:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:13:19 2026 by rpki-client