Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/81EEF49E801711EF8566D481C4F9AE02.roa
File:                     81EEF49E801711EF8566D481C4F9AE02.roa (raw, json)
Hash identifier:          wp1jRia9cOFzS0dK/vH2YbW1E4mAv8Zu18cbkLs/VBI=
Subject key identifier:   B6:CB:60:5A:7D:D7:DF:D1:47:FA:28:3F:54:97:61:48:48:58:66:C6
Certificate issuer:       /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial:       0411
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/81EEF49E801711EF8566D481C4F9AE02.roa
Signing time:             Mon 31 Aug 2026 00:53:47 +0000
ROA not before:           Mon 31 Aug 2026 00:53:47 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140934
IP address blocks:        103.190.16.0/23 maxlen: 24
                          2401:c8a0::/32 maxlen: 32
                          2401:c8a0::/48 maxlen: 48
                          2401:c8a0:1::/48 maxlen: 48
                          2401:c8a0:2::/48 maxlen: 48
                          2401:c8a0:3::/48 maxlen: 48
                          2401:c8a0:4::/48 maxlen: 48
                          2401:c8a0:5::/48 maxlen: 48
                          2401:c8a0:6::/48 maxlen: 48
                          2401:c8a0:7::/48 maxlen: 48
                          2401:c8a0:8::/48 maxlen: 48
                          2401:c8a0:9::/48 maxlen: 48
                          2401:c8a0:a::/48 maxlen: 48
                          2401:c8a0:b::/48 maxlen: 48
                          2401:c8a0:c::/48 maxlen: 48
                          2401:c8a0:d::/48 maxlen: 48
                          2401:c8a0:e::/48 maxlen: 48
                          2401:c8a0:f::/48 maxlen: 48
                          2401:c8a0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
                          rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
        Validity
            Not Before: Aug 31 00:53:47 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a94d09b-583a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:41:0d:c7:8d:7b:84:b3:b7:9a:44:22:7e:
                    9e:4d:18:8c:ee:bc:20:62:3b:6d:ee:e5:f7:ab:22:
                    2c:48:a5:f9:08:03:91:f8:79:e1:90:31:81:d8:8d:
                    0a:f7:e4:ba:be:3f:da:8f:58:57:9c:73:4d:e7:f8:
                    2d:64:d2:b4:75:a3:0c:b5:8c:23:9c:f1:d8:0d:df:
                    6f:0c:7f:cd:cc:0c:c7:f0:bd:45:4b:2f:59:3d:f3:
                    64:e4:cb:50:07:7f:c9:6d:3a:01:e6:ec:67:ae:71:
                    48:0b:56:be:d6:14:fb:30:a4:f0:c9:9f:3f:e6:8d:
                    65:2b:fb:cb:f6:96:3e:29:c6:06:61:79:a9:d6:e2:
                    a2:c2:f2:17:8c:be:95:2e:3e:f5:0e:4d:79:68:58:
                    41:88:8b:25:a9:e8:19:66:50:6b:e6:01:1e:8e:c6:
                    e5:9f:a7:2e:d2:e8:5b:c3:f6:63:f0:83:e1:9e:b0:
                    ab:57:5f:5f:90:40:2d:3d:ef:f0:34:e1:bc:63:0c:
                    ba:78:b5:7c:c7:62:30:f5:b0:61:9c:2d:2c:85:45:
                    62:ce:4c:28:40:4b:d4:73:e4:8a:ca:f9:c3:05:75:
                    d8:72:02:a9:b3:24:50:93:15:a9:9f:50:22:60:a1:
                    15:b0:bc:ed:ec:dd:b8:7c:f5:91:fe:2d:0a:50:d7:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CB:60:5A:7D:D7:DF:D1:47:FA:28:3F:54:97:61:48:48:58:66:C6
            X509v3 Authority Key Identifier:
                keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/81EEF49E801711EF8566D481C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.16.0/23
                IPv6:
                  2401:c8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:98:e5:08:94:3d:cc:b3:62:39:fa:66:73:ef:04:6c:b6:
         e0:90:b8:2c:aa:d9:44:16:a1:6e:80:17:a3:a8:5d:31:53:49:
         1d:5c:08:3c:3b:8a:ff:85:6f:f5:c9:9e:22:35:c8:16:4b:5a:
         0a:2e:60:16:0d:69:ca:94:4c:13:99:59:de:a4:69:58:99:b9:
         6d:b3:80:19:92:60:ec:e9:24:42:dc:1c:18:11:fa:95:8f:d1:
         51:4d:d2:90:9c:90:c9:55:c9:f7:62:a1:cf:b6:01:23:3e:85:
         b7:d9:f2:42:56:32:21:b0:e8:5f:9d:a7:3c:90:f3:b0:4b:ce:
         6e:05:ca:c8:62:84:5e:a5:bf:a3:aa:a8:f7:aa:0a:75:0d:e8:
         6a:78:50:3e:3d:07:d6:0b:68:9f:9f:ee:03:ca:b9:cc:9c:bb:
         e5:86:2a:50:ba:64:bb:36:d8:c8:63:85:c8:cc:94:59:fd:5f:
         ed:bd:cb:a1:9c:ae:42:99:bc:59:b0:9b:32:6d:c3:b4:64:90:
         4b:e2:bf:c5:59:bb:59:d8:97:48:b4:cd:c6:10:65:31:a5:54:
         b6:32:02:9b:26:09:cd:cc:36:c4:35:c4:b6:61:cd:06:47:97:
         ce:f2:54:ba:16:7a:b2:76:ee:5a:de:a1:a7:3c:a8:50:0f:45:
         de:af:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:17:52 2026 by rpki-client