Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
File:                     807F931E2B4011F092798182C4F9AE02.roa (raw, json)
Hash identifier:          uxTDFr4zzqIQITRAP9s6QAPRSJF1h9S8HTI8Q14ugko=
Subject key identifier:   C7:9C:5E:0E:4E:4B:FE:AF:B2:DA:B9:FA:E1:12:E2:03:9C:AE:3B:07
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3B8F
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:23:31 +0000
ROA not before:           Thu 20 Aug 2026 16:23:31 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139949
IP address blocks:        103.147.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15247 (0x3b8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:23:31 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a03-ccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:13:b9:aa:9c:8b:2f:0f:c4:48:96:eb:8a:
                    fd:70:67:99:78:b1:3c:8f:1f:8a:b1:33:32:2a:8a:
                    fb:c7:69:c5:bb:1e:2d:12:bf:91:4d:c4:e1:e4:75:
                    de:a1:f8:92:ab:5d:90:a6:07:1e:bb:c9:c3:82:0b:
                    a5:f1:ed:eb:ed:fb:e9:ee:c0:95:83:81:99:6f:cb:
                    33:67:2f:1c:c5:a1:67:46:fa:40:8a:73:99:26:49:
                    81:6e:a1:4e:0f:0c:e8:6e:03:20:19:58:f4:81:4d:
                    1c:94:ea:5d:9a:ef:ab:fe:58:2d:e3:93:4e:75:86:
                    3a:e8:a7:6c:48:38:8a:ee:51:ae:3f:89:7b:d2:0b:
                    e1:65:4f:9e:75:43:a1:a9:ad:0a:48:8e:f4:4f:21:
                    a3:75:51:23:26:52:14:9a:b5:85:5e:a3:c3:9e:5a:
                    89:9d:f5:df:68:4c:21:d7:63:81:1b:38:3c:f4:38:
                    6c:a9:d1:51:94:51:6f:62:48:75:b5:66:b6:a5:39:
                    47:a4:e7:04:2b:42:85:20:1e:cc:56:12:a7:e3:97:
                    2d:96:8e:e6:1e:50:fc:52:26:c9:31:85:61:df:21:
                    e1:7e:7b:9b:4a:34:39:ab:95:0c:e7:32:0d:36:d1:
                    18:54:07:f8:18:81:4a:9f:2b:ed:9b:f0:a5:39:28:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9C:5E:0E:4E:4B:FE:AF:B2:DA:B9:FA:E1:12:E2:03:9C:AE:3B:07
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:e1:8c:16:cc:6f:d0:c1:32:42:42:e7:e6:de:ea:48:2d:
         70:9d:aa:a1:3b:61:1d:7e:42:dd:05:9e:a1:e3:18:71:00:d9:
         22:0b:c7:31:f0:db:d7:81:c0:e2:85:ca:fa:8e:a7:73:9d:eb:
         f2:73:3c:be:42:00:fb:20:3d:bc:a6:db:aa:61:61:c3:8c:d6:
         98:3b:f6:eb:39:1e:57:2d:71:52:ae:d8:74:f7:6b:34:fc:81:
         bb:01:9f:48:bf:ea:1e:99:31:72:b1:df:14:aa:47:a0:67:32:
         62:d0:43:2f:50:75:a6:31:19:d4:05:3e:25:0e:01:b6:7b:7f:
         ed:90:9c:55:0b:de:e0:c8:62:06:a7:cb:a7:21:67:e6:c0:2c:
         73:63:00:3a:f4:49:c4:c8:fe:97:cc:48:47:b5:99:d9:08:0e:
         e4:42:57:c8:0e:fd:7c:2e:b5:02:a1:ca:b1:19:8c:40:46:29:
         c5:d9:63:00:52:8a:11:b7:6e:0b:df:d4:0e:0c:7b:b2:f9:51:
         d3:e3:02:2e:64:80:36:59:f7:48:35:3e:e7:1e:f8:b6:0c:85:
         37:0d:c7:5b:2a:2e:07:64:3b:3a:fa:bf:82:05:e5:68:18:5b:
         a2:f3:48:af:bd:f8:b1:32:ea:be:a1:1e:e0:85:7c:ff:37:2d:
         b1:7d:e0:16
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICO48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwODIwMTYyMzMxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3MmEwMy1jY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7ITuaqciy8PxEiW64r9cGeZeLE8jx+KsTMyKor7x2nFux4tEr+RTcTh5HXe
ofiSq12Qpgceu8nDggul8e3r7fvp7sCVg4GZb8szZy8cxaFnRvpAinOZJkmBbqFO
DwzobgMgGVj0gU0clOpdmu+r/lgt45NOdYY66KdsSDiK7lGuP4l70gvhZU+edUOh
qa0KSI70TyGjdVEjJlIUmrWFXqPDnlqJnfXfaEwh12OBGzg89DhsqdFRlFFvYkh1
tWa2pTlHpOcEK0KFIB7MVhKn45ctlo7mHlD8UibJMYVh3yHhfnubSjQ5q5UM5zIN
NtEYVAf4GIFKnyvtm/ClOShjrQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMecXg5O
S/6vstq5+uES4gOcrjsHMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvODA3RjkzMUUy
QjQwMTFGMDkyNzk4MTgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5M0MA0GCSqGSIb3DQEBCwUAA4IBAQBV8uGMFsxv0MEyQkLn5t7q
SC1wnaqhO2EdfkLdBZ6h4xhxANkiC8cx8NvXgcDihcr6jqdznevyczy+QgD7ID28
ptuqYWHDjNaYO/brOR5XLXFSrth092s0/IG7AZ9Iv+oemTFysd8UqkegZzJi0EMv
UHWmMRnUBT4lDgG2e3/tkJxVC97gyGIGp8unIWfmwCxzYwA69EnEyP6XzEhHtZnZ
CA7kQlfIDv18LrUCocqxGYxARinF2WMAUooRt24L39QODHuy+VHT4wIuZIA2WfdI
NT7nHvi2DIU3DcdbKi4HZDs6+r+CBeVoGFui80ivvfixMuq+oR7ghXz/Ny2xfeAW
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:31 2026 by rpki-client