Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/EB67F10ACF0C11F1AD21C26F2266CEF9.roa
File:                     EB67F10ACF0C11F1AD21C26F2266CEF9.roa (raw, json)
Hash identifier:          qFoFZl4nuEXjbLOyR2LpUkQ22C9p85+Ot3eFrRVw6KU=
Subject key identifier:   EB:04:2E:9F:7F:A7:61:52:02:84:2D:81:89:B7:1E:BE:22:A6:A8:2E
Certificate issuer:       /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial:       0791
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/EB67F10ACF0C11F1AD21C26F2266CEF9.roa
Signing time:             Fri 23 Oct 2026 18:10:50 +0000
ROA not before:           Fri 23 Oct 2026 18:10:50 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        43.225.101.0/24 maxlen: 24
                          103.44.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
                          rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 21:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
        Validity
            Not Before: Oct 23 18:10:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6adba32a-b0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:e1:ad:5b:5b:de:20:69:54:77:a3:af:c3:
                    92:76:2d:65:bf:0e:c4:16:75:ac:2c:0f:60:30:2c:
                    a9:9c:34:49:97:29:b0:bc:61:34:d3:99:c5:52:18:
                    9b:8f:cf:bf:b6:7f:88:57:d3:21:12:3e:75:0f:91:
                    4b:1c:8d:87:92:b2:7d:90:31:a2:97:e1:93:85:f7:
                    88:1c:88:af:9e:d3:f9:6f:d1:ae:0d:ea:4c:cb:b5:
                    ad:48:7b:3e:15:92:00:3a:28:36:6c:c8:0d:89:ea:
                    15:e5:ef:99:cf:34:47:49:13:5f:83:3e:57:eb:a2:
                    23:8e:a0:0f:28:6c:96:0b:79:95:cf:e3:8e:83:99:
                    04:f4:72:bf:33:44:c3:cc:32:43:74:bf:a8:e5:be:
                    54:95:fa:02:2c:81:e9:db:32:0e:68:f0:6f:c8:d8:
                    4a:bd:00:5d:f4:11:81:91:74:7c:96:11:c4:d7:70:
                    78:f6:f2:9a:92:4e:b6:23:56:b3:65:b5:0d:bb:35:
                    af:e8:c9:88:9e:8c:4e:77:5e:fa:f8:ac:3b:69:8a:
                    02:bb:83:28:4b:7c:ac:5b:3b:91:7b:ad:0f:75:94:
                    d3:37:9f:79:54:2d:5a:3f:7d:4c:1f:87:0e:16:a4:
                    2d:59:71:05:78:d3:e8:b8:5a:3b:5e:0f:1d:2e:b8:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:04:2E:9F:7F:A7:61:52:02:84:2D:81:89:B7:1E:BE:22:A6:A8:2E
            X509v3 Authority Key Identifier:
                keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/EB67F10ACF0C11F1AD21C26F2266CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.101.0/24
                  103.44.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b7:4c:e1:35:cc:e3:10:10:98:ea:a9:46:21:9d:f5:ac:6c:
         7f:1d:d0:3f:90:9d:55:e8:34:31:64:06:64:a5:0f:48:82:23:
         a7:42:4e:3a:b2:a1:07:d9:c7:85:80:c4:68:e7:ca:2d:b5:26:
         af:64:89:0c:03:d0:a6:d7:5a:5b:b7:43:d6:89:16:92:43:0f:
         a8:6a:ee:02:01:60:db:49:eb:70:a9:25:cc:ac:5f:6f:fb:c3:
         2c:09:9c:bf:76:83:06:c9:89:30:b0:9e:51:d2:8d:ec:d4:ca:
         3f:f7:7f:8f:cd:35:e9:ad:42:df:29:b1:15:9c:e8:a1:5a:86:
         36:82:c2:74:2e:26:97:b1:09:e2:32:6f:9d:15:fa:d7:34:ae:
         3e:9f:f9:fb:1d:f4:8e:36:c8:17:c2:64:a7:6b:1f:38:5b:18:
         60:8d:52:40:96:43:69:08:55:92:07:fd:0c:70:e4:ea:6d:09:
         65:2a:c3:0a:c4:d3:f6:31:a5:ab:9e:eb:5e:4f:35:24:b6:3c:
         c3:ec:0f:20:86:84:cd:03:30:46:5f:d1:6f:23:06:6c:aa:5f:
         3f:d4:be:e6:f2:01:98:ab:c8:86:68:97:27:ea:f9:3c:87:70:
         4f:83:25:cd:1f:f4:ae:eb:50:8e:dc:34:44:32:62:a4:7e:fd:
         bc:93:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:11:55 2026 by rpki-client