Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
File:                     82D8082A292611EF875A5C36C4F9AE02.roa (raw, json)
Hash identifier:          SyXuffXDHXPbASG7Y+LG0Brt2u6hsVNRNcrnMwVVAGw=
Subject key identifier:   68:35:06:E7:DF:A7:ED:73:77:9A:28:6E:43:87:02:57:FA:61:C4:9C
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       0193
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
Signing time:             Wed 29 Apr 2026 05:41:43 +0000
ROA not before:           Wed 29 Apr 2026 05:41:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4768
IP address blocks:        103.19.194.0/24 maxlen: 24
                          203.12.172.0/24 maxlen: 24
                          203.12.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 05:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Apr 29 05:41:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f19a17-9899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:c6:33:5c:9c:00:01:d5:2f:30:bb:ee:aa:
                    0b:6e:fc:78:96:fa:b9:ac:22:22:cf:2e:7b:f3:7b:
                    9d:37:5d:c7:a9:ab:3b:07:1b:75:11:0f:4b:cd:ec:
                    52:8f:34:64:ab:87:b0:1f:2b:06:d6:ef:64:8d:99:
                    f9:39:8a:b5:eb:ff:31:bf:9e:88:5a:bf:ac:7c:a2:
                    a0:ad:0b:6b:d5:d8:a7:5b:01:09:7a:15:52:80:7c:
                    1d:3a:cc:b8:a9:0e:89:e4:3e:77:aa:e2:dc:d7:f0:
                    9e:05:0a:f1:0b:78:7b:0f:3f:47:d0:88:1e:ad:d8:
                    01:ce:5d:a5:67:f6:99:00:42:70:07:24:13:b5:bf:
                    47:cd:05:11:f8:af:63:ed:3e:dc:2c:aa:b9:36:c9:
                    84:51:da:17:cf:97:3c:b6:1d:8f:a7:57:8e:84:8c:
                    e1:a4:0c:93:62:7e:4f:52:c4:44:ea:df:8a:6c:1d:
                    a4:73:cc:ea:ea:70:85:14:09:c4:f3:65:cd:3c:90:
                    0d:25:93:5f:d2:5e:38:7b:09:e9:ea:f6:36:57:ee:
                    7f:e9:80:4f:6f:76:02:e8:4e:b4:4b:41:7c:0f:d9:
                    7e:c0:b3:d3:71:55:bf:cc:8d:b7:e0:f2:0f:2c:74:
                    66:d3:d1:ae:c5:b2:0a:48:6a:58:b3:ed:82:11:da:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:35:06:E7:DF:A7:ED:73:77:9A:28:6E:43:87:02:57:FA:61:C4:9C
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.194.0/24
                  203.12.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:9a:db:db:0b:fc:b1:c4:90:b0:39:ed:04:d5:93:ae:7c:64:
         ed:b4:1f:73:6f:70:5f:cb:a1:64:32:c1:fb:ec:45:d5:44:da:
         b3:81:e5:4b:e2:75:3d:c7:19:b7:6a:73:88:7b:22:08:52:a4:
         f9:e2:81:74:77:c5:0b:ac:a6:fe:38:1b:46:bc:6b:4e:0b:53:
         e4:40:ab:92:15:29:f3:b8:b1:21:52:d6:95:5f:61:d3:92:5c:
         ec:d2:c3:d9:69:42:32:d2:4e:0b:75:59:09:e9:1b:e1:57:00:
         2a:5f:6b:b8:38:3c:4f:1c:18:07:e2:7e:4e:69:37:29:8d:df:
         6e:fb:d1:58:a9:25:0d:d0:eb:1a:6f:db:64:34:5e:f8:88:a9:
         10:98:c4:a3:4f:80:d6:19:97:ee:9c:20:7d:c0:b8:0f:c6:5e:
         9d:86:70:b0:63:88:84:40:81:4a:d0:a9:28:73:84:bc:59:b8:
         aa:fc:be:6c:38:36:dd:34:f5:36:07:ab:01:91:6f:30:8b:16:
         76:18:33:14:01:7a:0a:8d:96:24:a6:3d:10:0c:20:3c:6f:82:
         d9:0c:c6:af:d7:58:60:e5:62:d5:47:2a:34:58:1f:7d:5d:6e:
         c0:03:cc:c2:95:76:49:bf:a9:dc:18:67:96:87:ff:01:be:d5:
         87:c9:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 14:34:57 2026 by rpki-client