Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/B8470B32494A11F190BF742ABC833773.roa
File:                     B8470B32494A11F190BF742ABC833773.roa (raw, json)
Hash identifier:          xGW+lU1U6feA1xyqJoS3aKykySARnN0LcTb8GgYiDRo=
Subject key identifier:   CC:4D:30:56:43:96:18:53:5A:99:A9:D4:67:BD:B0:2D:EC:91:36:8D
Certificate issuer:       /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial:       0389
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/B8470B32494A11F190BF742ABC833773.roa
Signing time:             Tue 01 Sep 2026 01:49:39 +0000
ROA not before:           Tue 01 Sep 2026 01:49:39 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     209604
IP address blocks:        103.69.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 00:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
        Validity
            Not Before: Sep  1 01:49:39 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a962f33-0ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:25:13:3e:4d:9d:b9:f7:68:9f:c5:e0:8d:
                    a8:ea:8e:9c:19:58:60:af:47:5f:0b:a0:86:a1:5b:
                    39:d7:9e:7d:ed:89:16:4a:b6:9c:36:64:e0:00:bc:
                    7f:48:8a:a7:10:50:0b:7a:d2:fb:82:40:02:ee:55:
                    fa:cc:ba:ec:10:a0:4d:5d:ae:df:12:47:af:ab:d7:
                    ae:4d:39:4c:86:2a:ff:de:b5:f6:b7:d1:14:0e:79:
                    db:96:73:31:87:2a:a0:f2:a5:98:1b:5c:01:31:09:
                    d2:31:d2:43:ee:e9:2d:79:b7:ac:98:b1:dd:7b:ab:
                    c5:84:c4:96:f5:ce:ff:f6:f9:46:0a:e3:d6:95:d1:
                    8b:17:ef:0a:81:66:be:65:46:81:c4:e1:1d:3d:92:
                    ae:74:14:a9:80:f4:38:08:61:94:9e:81:bb:67:da:
                    50:e1:91:a1:88:d7:fd:57:f8:49:18:21:d8:63:15:
                    10:d4:f5:b1:6d:5b:b5:1c:83:d7:49:47:9a:7f:12:
                    0b:90:ff:ba:49:a8:0a:0e:91:fe:5c:b9:e5:e2:6a:
                    a3:f0:f6:e1:09:80:0a:45:e2:9d:6f:e0:c8:08:ae:
                    73:42:26:46:3b:58:20:2d:cb:53:40:ab:4a:ed:b5:
                    b9:87:73:20:f6:98:be:fc:3e:9a:5b:c4:52:95:a1:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4D:30:56:43:96:18:53:5A:99:A9:D4:67:BD:B0:2D:EC:91:36:8D
            X509v3 Authority Key Identifier:
                keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/B8470B32494A11F190BF742ABC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:30:ee:75:60:3d:63:06:6e:68:0f:eb:c8:0b:12:40:4e:eb:
         36:15:88:a5:a3:e3:75:b9:2d:f9:8d:2a:c4:7e:32:16:62:64:
         e9:9d:4a:84:f2:5d:be:9e:fb:85:dc:fa:67:af:26:bd:a3:77:
         49:95:cf:1f:e1:a7:fe:78:5b:fd:22:07:49:5e:b4:1c:6d:77:
         00:63:12:c9:2e:34:3e:94:14:23:f1:95:86:a2:46:f4:fd:af:
         84:28:71:0a:20:a0:4f:33:88:a8:b3:0c:f9:eb:38:99:3f:f5:
         d9:74:54:39:69:3a:20:f5:aa:d7:bf:02:1d:2d:fa:df:64:a0:
         ab:3e:13:af:5c:1a:f1:e0:21:b4:0d:90:d5:60:93:d6:1b:88:
         8c:71:15:7e:d8:3c:fe:17:6c:d9:b2:3d:b3:20:d9:d8:21:ad:
         97:4f:10:7a:98:93:09:36:41:53:31:3f:1c:24:8d:96:5f:e1:
         a2:1f:dd:05:3a:4a:47:12:ce:1c:0d:c2:d9:c5:b2:52:80:73:
         f2:ee:78:c5:52:79:77:06:b6:54:d4:db:e4:3b:72:64:36:b3:
         0a:15:8e:4e:6f:2b:78:68:fb:7f:38:32:16:e3:f3:38:65:d3:
         58:6d:8e:02:57:9a:76:00:2e:df:3e:8d:5f:4c:8f:f8:dd:65:
         ef:9b:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:45:04 2026 by rpki-client