Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/7CCE329266F711EF86880681C4F9AE02.roa
File:                     7CCE329266F711EF86880681C4F9AE02.roa (raw, json)
Hash identifier:          aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=
Subject key identifier:   DA:A7:B9:EC:E7:CB:2E:63:72:CD:A6:1A:02:F1:CF:64:AF:E9:41:38
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       0487
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/7CCE329266F711EF86880681C4F9AE02.roa
Signing time:             Mon 25 May 2026 01:34:56 +0000
ROA not before:           Mon 25 May 2026 01:34:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214766
IP address blocks:        43.243.194.0/24 maxlen: 24
                          103.229.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 00:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: May 25 01:34:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a13a740-98fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:ab:c9:21:8c:9b:a9:43:c3:c6:f3:83:4a:
                    95:fd:2d:74:a8:7a:bf:c2:d8:50:f0:37:ff:49:96:
                    92:1b:d2:0d:1d:0c:78:f7:02:3b:1c:bf:1f:0d:b7:
                    c8:34:27:4d:71:36:2e:cf:9f:0d:62:e3:b5:fd:93:
                    9d:f5:b7:e8:b2:37:34:3c:06:45:5a:ce:ad:d3:a3:
                    c2:85:4c:6a:5e:e5:4b:fd:4a:a0:b6:7e:c1:69:49:
                    5e:7b:ae:ee:70:60:5c:20:6f:61:9a:5c:df:15:c6:
                    09:7e:19:42:bc:dd:a0:a1:f2:06:76:83:44:8e:7e:
                    d2:85:8e:02:28:24:b6:02:61:b7:12:04:5f:ae:21:
                    2b:7b:66:60:8e:6a:da:a4:fb:4a:f5:ab:6f:c1:60:
                    29:d0:72:3d:af:a5:25:2c:b4:5d:fe:bb:7b:f0:d9:
                    e0:f1:14:9c:c3:76:fb:90:0d:c2:07:87:c1:3f:bb:
                    c0:dc:53:6b:52:3f:6b:db:b5:34:36:47:37:5d:07:
                    cc:b6:47:3f:66:a3:7d:91:da:20:e0:b6:90:24:fa:
                    96:c0:a2:27:d6:c6:45:2a:41:5e:02:f2:ec:10:aa:
                    b4:c2:4f:ba:62:f6:45:92:84:8a:68:41:45:24:eb:
                    df:6c:6d:2b:4b:16:11:41:2e:0d:41:34:f1:cf:b3:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A7:B9:EC:E7:CB:2E:63:72:CD:A6:1A:02:F1:CF:64:AF:E9:41:38
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/7CCE329266F711EF86880681C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.194.0/24
                  103.229.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:5c:3f:59:37:77:00:9a:af:ac:67:05:32:51:4a:32:f2:41:
         05:df:6c:a0:04:3b:83:85:8a:06:83:b6:8d:e6:cc:ed:d7:40:
         3c:33:8f:6d:1f:8c:c7:66:58:cd:5f:9b:82:cc:e2:bb:dc:2b:
         b5:6b:52:72:88:65:ef:ea:46:c4:c4:ec:50:de:ff:ff:be:33:
         e1:8f:49:f8:39:fd:8b:fc:5a:b1:ae:6b:2f:d2:08:24:d5:8c:
         4c:73:db:a0:2c:18:bf:e6:40:9a:5a:3b:bc:9a:00:b0:e2:44:
         e9:77:f6:bd:0d:a9:95:b5:48:d3:0f:a2:2f:25:dc:81:18:26:
         66:88:dc:cf:cc:de:76:53:c3:52:bd:fe:f7:5d:47:f3:3a:37:
         d2:78:34:1d:e6:57:a7:e3:bf:8e:74:87:31:18:44:68:61:8e:
         21:6e:0d:ca:02:92:d4:55:20:09:d5:7d:e6:a5:19:e2:b2:c5:
         6a:b6:f0:5c:1b:57:b6:a0:5c:e7:ce:42:06:4b:f9:1b:05:6e:
         87:0a:d5:3a:3d:f3:f2:aa:db:fb:a2:10:27:a1:7b:4f:fa:10:
         81:c7:9c:69:55:74:9e:82:64:1a:0e:61:c0:9e:0c:89:c3:a7:
         54:a2:c4:63:f6:37:ae:e5:df:1f:62:a0:68:dc:ac:f1:4a:91:
         54:33:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 10:40:55 2026 by rpki-client