Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/ED85B184BEFA11F0A7226D28C4F9AE02.roa
File:                     ED85B184BEFA11F0A7226D28C4F9AE02.roa (raw, json)
Hash identifier:          hRLGyYUvhsRiHaXECbUkeQAnEgIh07v4aPr5C6B9usY=
Subject key identifier:   2C:BA:6F:ED:2E:F6:13:6B:8C:EB:43:93:A3:B3:98:7B:4E:0A:1C:8A
Certificate issuer:       /CN=A9179960/serialNumber=9B0FFB9F6947EB902CC226415DAD8E7D834DE61E
Certificate serial:       59
Authority key identifier: 9B:0F:FB:9F:69:47:EB:90:2C:C2:26:41:5D:AD:8E:7D:83:4D:E6:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mw_7n2lH65AswiZBXa2OfYNN5h4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/ED85B184BEFA11F0A7226D28C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 08:43:23 +0000
ROA not before:           Fri 03 Apr 2026 08:43:23 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138683
IP address blocks:        103.136.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/mw_7n2lH65AswiZBXa2OfYNN5h4.crl
                          rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/mw_7n2lH65AswiZBXa2OfYNN5h4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mw_7n2lH65AswiZBXa2OfYNN5h4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179960, serialNumber=9B0FFB9F6947EB902CC226415DAD8E7D834DE61E
        Validity
            Not Before: Apr  3 08:43:23 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf7daa-010b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:8b:35:42:17:10:66:48:10:fd:be:d5:4a:
                    b2:af:a2:58:c3:52:06:6c:de:5d:57:ef:bb:21:29:
                    bd:cc:8a:d1:6e:9d:86:89:54:d0:e2:e0:39:cd:85:
                    e1:af:00:15:34:d3:6b:a3:95:e0:26:29:39:66:28:
                    85:7e:1a:c6:e7:bc:0a:95:a2:02:25:83:cf:0f:e5:
                    83:a3:be:eb:a2:3d:cf:03:c4:ba:e5:99:e5:a2:57:
                    c7:e3:41:62:33:a1:76:36:83:ff:5f:ca:fe:d9:e7:
                    10:34:3e:3b:f9:da:c7:03:06:be:67:5e:9c:9c:30:
                    d9:6f:df:7c:41:68:f5:1b:24:11:08:c8:3f:cb:3c:
                    f4:c5:88:0c:36:a0:87:2e:74:e4:42:32:c8:32:82:
                    f7:af:c5:a9:7a:6d:98:14:ba:39:a1:08:59:c7:d4:
                    e7:d5:c9:c2:ca:4f:7e:6d:91:8b:7c:79:08:40:40:
                    18:85:bb:91:9b:0a:a7:68:db:ef:48:81:5b:55:a7:
                    c0:01:a9:f7:10:8a:23:23:24:00:01:8d:da:ac:95:
                    ef:80:22:f9:2a:b3:c8:b0:f4:ea:fa:05:fc:be:5e:
                    50:32:34:02:48:04:cd:e5:b0:5d:7b:26:aa:55:be:
                    a8:0f:fb:d7:8e:56:06:59:8a:a8:88:71:e6:30:7c:
                    d6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BA:6F:ED:2E:F6:13:6B:8C:EB:43:93:A3:B3:98:7B:4E:0A:1C:8A
            X509v3 Authority Key Identifier:
                keyid:9B:0F:FB:9F:69:47:EB:90:2C:C2:26:41:5D:AD:8E:7D:83:4D:E6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/mw_7n2lH65AswiZBXa2OfYNN5h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mw_7n2lH65AswiZBXa2OfYNN5h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179960/6E5E1AB0B39011F0B83F7761C4F9AE02/ED85B184BEFA11F0A7226D28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7b:1e:4b:7c:94:d9:3a:9c:f3:17:e8:e4:98:4a:1a:6d:02:
         bb:39:92:f2:56:28:38:9c:06:63:8b:0a:f7:56:11:68:5c:a2:
         ca:53:ac:3d:82:42:56:88:53:6a:89:11:13:50:ec:72:f9:64:
         f1:d6:46:d6:c0:98:3e:8e:0a:38:82:ec:8d:44:8a:b0:6a:02:
         85:5c:68:c8:c7:6c:07:85:ba:79:c2:c5:58:4a:e9:90:09:10:
         47:8d:9f:67:b4:eb:e5:f4:58:0f:3a:3f:21:29:dc:f3:a0:7e:
         6c:4e:77:0b:a3:59:cf:29:0b:c8:4d:1f:b0:35:f0:67:c4:52:
         e0:53:2b:8d:ab:d8:a4:f3:7a:8e:d5:2e:26:8a:0c:e1:95:0f:
         74:f0:e6:dd:62:de:48:b3:3d:3e:5c:8c:17:ba:9d:c7:74:84:
         bf:b5:e1:89:3a:47:45:f1:58:64:99:20:62:d5:ad:45:43:16:
         fb:32:c9:1e:17:d1:cd:f0:da:48:7b:37:0a:09:54:05:70:30:
         7d:3c:d5:17:b7:2c:1e:7f:6f:5c:fa:03:b2:d7:1d:54:26:33:
         e0:ae:44:0c:89:c3:08:0b:b6:93:23:af:dc:b6:28:d8:0c:1f:
         07:58:8c:0b:e2:9f:f2:c8:af:1b:98:ac:a4:1a:56:04:d2:ed:
         e3:0f:b6:58
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
OTk2MDExMC8GA1UEBRMoOUIwRkZCOUY2OTQ3RUI5MDJDQzIyNjQxNURBRDhFN0Q4
MzRERTYxRTAeFw0yNjA0MDMwODQzMjNaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5Y2Y3ZGFhLTAxMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUeos1QhcQZkgQ/b7VSrKvoljDUgZs3l1X77shKb3MitFunYaJVNDi4DnNheGv
ABU002ujleAmKTlmKIV+GsbnvAqVogIlg88P5YOjvuuiPc8DxLrlmeWiV8fjQWIz
oXY2g/9fyv7Z5xA0Pjv52scDBr5nXpycMNlv33xBaPUbJBEIyD/LPPTFiAw2oIcu
dORCMsgygvevxal6bZgUujmhCFnH1OfVycLKT35tkYt8eQhAQBiFu5GbCqdo2+9I
gVtVp8ABqfcQiiMjJAABjdqsle+AIvkqs8iw9Or6Bfy+XlAyNAJIBM3lsF17JqpV
vqgP+9eOVgZZiqiIceYwfNYJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQULLpv7S72
E2uM60OTo7OYe04KHIowHwYDVR0jBBgwFoAUmw/7n2lH65AswiZBXa2OfYNN5h4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5OTYwLzZFNUUxQUIwQjM5
MDExRjBCODNGNzc2MUM0RjlBRTAyL213XzduMmxINjVBc3dpWkJYYTJPZllOTjVo
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbXdfN24ybEg2NUFzd2laQlhhMk9mWU5ONWg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTk2MC82RTVFMUFCMEIzOTAxMUYwQjgzRjc3NjFDNEY5QUUwMi9FRDg1QjE4NEJF
RkExMUYwQTcyMjZEMjhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABniHkwDQYJKoZIhvcNAQELBQADggEBAH17Hkt8lNk6nPMX6OSYShpt
Ars5kvJWKDicBmOLCvdWEWhcospTrD2CQlaIU2qJERNQ7HL5ZPHWRtbAmD6OCjiC
7I1EirBqAoVcaMjHbAeFunnCxVhK6ZAJEEeNn2e06+X0WA86PyEp3POgfmxOdwuj
Wc8pC8hNH7A18GfEUuBTK42r2KTzeo7VLiaKDOGVD3Tw5t1i3kizPT5cjBe6ncd0
hL+14Yk6R0XxWGSZIGLVrUVDFvsyyR4X0c3w2kh7NwoJVAVwMH081Re3LB5/b1z6
A7LXHVQmM+CuRAyJwwgLtpMjr9y2KNgMHwdYjAvin/LIrxuYrKQaVgTS7eMPtlg=
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:41 2026 by rpki-client