Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/9C42D762163D11F19AE99B533D3D8C67.roa
File:                     9C42D762163D11F19AE99B533D3D8C67.roa (raw, json)
Hash identifier:          bXkxRodSVPRMA9XhTrb2GxuFt/+D/R2TC7v8l62JmaQ=
Subject key identifier:   5C:E1:A8:ED:1F:31:84:77:9F:52:17:E2:13:93:5B:F7:C7:94:38:28
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       07DA
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/9C42D762163D11F19AE99B533D3D8C67.roa
Signing time:             Mon 02 Mar 2026 13:42:10 +0000
ROA not before:           Mon 02 Mar 2026 13:42:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     213516
IP address blocks:        103.205.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 21:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Mar  2 13:42:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a593b1-79fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:0e:af:70:58:86:79:4b:ac:74:02:98:d7:
                    9e:c6:3c:af:80:ef:df:98:15:5d:df:ad:02:73:0e:
                    05:11:9a:cb:68:b0:64:d4:f5:99:3e:ba:76:4e:e8:
                    64:54:13:2e:e3:18:42:7b:12:ec:e1:d7:2c:cf:be:
                    58:52:a9:8e:9d:d5:45:e3:22:1c:c4:57:4a:32:f1:
                    fe:07:fd:b0:2d:ac:3d:a5:c0:50:fe:f8:63:42:5c:
                    2e:8b:a4:f1:e9:dc:7d:69:72:9e:cc:ef:44:5b:4e:
                    20:de:49:e9:cd:05:89:8f:d1:38:ac:9c:68:4c:8b:
                    28:70:17:92:8d:a6:e6:7b:49:e3:b7:ea:76:dd:1f:
                    d6:0b:b9:a2:08:ba:21:07:7a:95:42:5a:96:df:0f:
                    45:48:27:f9:f0:bf:4e:a3:5f:c8:62:47:49:a7:fd:
                    dc:24:be:73:cc:04:dd:64:73:0c:f2:1f:a2:9f:4c:
                    96:a6:bf:15:41:ae:ac:95:35:78:fe:c1:f9:26:1c:
                    a3:fb:53:d3:3f:0b:57:ce:5b:fe:25:66:28:fe:b2:
                    39:32:95:79:b4:a2:af:47:48:fb:ab:42:e3:29:22:
                    56:5b:5d:04:c2:80:26:50:fd:79:ea:f0:c1:96:7d:
                    da:4e:cf:9e:86:df:bb:35:ae:ad:8e:8a:22:23:b7:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E1:A8:ED:1F:31:84:77:9F:52:17:E2:13:93:5B:F7:C7:94:38:28
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/9C42D762163D11F19AE99B533D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:b6:ed:61:b8:04:5a:ec:3f:b1:ee:1d:ad:f8:84:c3:f1:
         ca:31:5b:5b:89:11:9d:d8:50:cb:65:c2:b4:60:4c:3f:71:fd:
         aa:45:13:21:11:85:2c:66:1e:85:05:08:2e:66:38:ac:90:40:
         1d:7f:67:b2:87:27:18:51:33:51:97:f0:0c:55:e4:85:de:d5:
         cc:a3:25:d9:2c:b0:2e:48:2f:9a:e6:31:90:ba:97:4e:3e:63:
         79:31:ca:6d:fd:4d:56:e1:b4:ec:18:76:b1:37:65:e2:1f:5a:
         38:8a:64:37:f1:e7:68:26:bb:c2:9a:09:88:48:06:a2:fc:d2:
         62:e3:61:55:91:8c:ba:b6:87:ea:7f:a1:db:0d:24:76:2c:6c:
         4e:03:7c:44:33:f1:26:a3:08:d9:6f:e6:8a:1c:7d:7a:8b:d0:
         8d:bf:44:17:94:09:79:1b:fa:7e:b9:16:2e:10:e5:4d:36:5a:
         b6:f9:45:47:97:b8:7c:a2:70:0e:b3:89:d6:0f:a5:78:91:61:
         80:09:f4:51:52:36:b9:80:b5:da:20:0c:61:4f:62:5a:7d:a6:
         66:95:90:09:e7:2a:d7:22:f2:1c:f5:31:b9:e6:2a:97:d8:1d:
         22:25:90:b6:dc:bf:d6:07:91:ee:26:57:13:2e:2a:be:d1:06:
         a4:8f:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:52:39 2026 by rpki-client