Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A3A03A7CE07D11F0A337A81D3B6F56BC.roa
File:                     A3A03A7CE07D11F0A337A81D3B6F56BC.roa (raw, json)
Hash identifier:          HqkJYNNdGv5blJZaChEuIAPv9LUFg5QZoDPAbD0y8QM=
Subject key identifier:   7D:92:78:ED:DC:FB:CA:4B:15:F5:01:1D:41:BC:27:A1:CC:54:D1:E5
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3B92
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A3A03A7CE07D11F0A337A81D3B6F56BC.roa
Signing time:             Thu 20 Aug 2026 16:23:37 +0000
ROA not before:           Thu 20 Aug 2026 16:23:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141934
IP address blocks:        103.166.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15250 (0x3b92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:23:37 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a09-5466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:b7:e3:2d:d0:07:79:91:4a:bc:81:e5:d4:
                    65:4e:39:dc:ef:4f:da:d6:a3:b5:a2:dd:8b:d3:55:
                    cb:2b:78:d8:5c:d5:3a:dc:51:b8:1e:85:0f:3e:1c:
                    b2:c3:06:bc:72:61:f0:24:b6:53:d3:c6:43:2e:1a:
                    95:fe:ca:9f:a1:1c:66:44:72:92:ee:22:27:dd:41:
                    22:91:55:0b:3c:d9:69:c4:c4:ac:48:b9:2b:42:52:
                    54:ce:bb:93:90:69:2d:94:9c:be:f7:d7:84:22:6e:
                    f3:0b:16:eb:f0:67:76:e3:2d:41:9a:4d:3a:7b:b2:
                    7d:33:a7:f1:19:39:c6:e8:d3:c1:50:0e:20:01:74:
                    a0:34:68:c7:fb:8a:bf:28:d1:6f:70:19:41:7f:f1:
                    11:00:a3:56:ec:cf:08:e7:4a:fc:d0:1f:3a:48:19:
                    b9:96:3e:e0:2c:a4:d1:43:17:45:7e:09:6f:64:72:
                    a8:5d:42:bc:25:3e:4d:44:09:d5:1c:59:b9:52:1e:
                    b0:7f:5c:14:59:8c:cd:c3:91:38:06:62:38:d7:f7:
                    fd:9b:30:20:17:a0:1c:6d:4d:77:62:c8:5c:00:25:
                    08:5a:4a:1f:cf:10:7e:a4:03:86:80:00:4f:52:5b:
                    86:b6:6c:b9:3d:23:0d:5d:7f:0e:f9:85:45:75:90:
                    bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:92:78:ED:DC:FB:CA:4B:15:F5:01:1D:41:BC:27:A1:CC:54:D1:E5
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A3A03A7CE07D11F0A337A81D3B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:46:03:4b:e1:aa:3e:ff:f7:84:b5:95:8b:81:41:bd:f6:
         9d:cf:67:81:82:0e:42:fd:56:03:81:26:56:90:4b:7a:c3:65:
         07:9e:b4:81:bf:1e:b1:67:c9:7e:a0:0a:a9:f1:94:e5:6c:44:
         b8:c0:5e:56:b1:d7:50:37:5d:5d:74:b5:bc:d4:a7:03:fe:de:
         77:0a:b1:6e:ba:c6:0c:8e:69:8a:9e:6a:17:ef:aa:91:e2:ee:
         b2:d2:8b:86:d3:1b:72:26:94:71:0a:87:8d:94:df:cb:eb:f7:
         06:eb:bd:b0:7d:0c:e8:7e:c2:50:d8:b6:97:eb:cc:a5:a6:39:
         6e:39:cf:9f:bf:57:c6:d3:e9:31:51:f5:42:8e:b1:e5:73:32:
         29:d7:d9:91:16:1e:f2:e8:84:c5:ef:3f:3a:6b:11:7f:07:0b:
         a5:8d:7a:b9:dc:ef:51:a2:f9:ad:75:a9:fa:d2:22:c0:f9:14:
         e1:16:24:91:84:b2:a3:fb:37:fc:43:39:3a:86:d1:2f:be:d4:
         5b:4c:05:e4:3c:c2:4b:55:4f:b3:b0:e2:68:75:5d:cc:a4:e0:
         01:c1:54:4f:4d:c2:43:b9:dd:a8:44:79:f8:34:23:1c:72:b0:
         9a:3a:dc:bf:3a:55:27:fa:bf:df:ac:75:46:56:65:cf:13:26:
         3c:21:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:04 2026 by rpki-client