Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/44942606EA0A11F09D7A92E76F6F56BC.roa
File:                     44942606EA0A11F09D7A92E76F6F56BC.roa (raw, json)
Hash identifier:          EeLJby/8EluYAUfNa1xVSHc8kon4tRGoZL1/tkyFn7k=
Subject key identifier:   80:0A:D6:4B:72:F0:1D:BE:77:38:9D:EC:F8:89:07:B9:12:E9:42:D7
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0BC4
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/44942606EA0A11F09D7A92E76F6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:06:58 +0000
ROA not before:           Mon 05 Jan 2026 07:47:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.6.20.0/24 maxlen: 24
                          103.6.21.0/24 maxlen: 24
                          103.6.22.0/24 maxlen: 24
                          103.6.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 15:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3012 (0xbc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Jan  5 07:47:46 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48042-a721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:5e:88:38:90:b8:32:9b:c4:ca:52:0c:5a:
                    ca:20:b0:bd:a2:bf:b4:62:b5:29:b7:b2:a3:41:72:
                    ef:4d:20:88:e8:94:a2:75:de:79:5e:24:4a:06:2f:
                    0e:4a:fa:12:ce:6e:57:0a:a7:6c:36:f7:80:50:61:
                    69:91:e1:77:8b:3e:6d:f1:a4:6c:c6:b2:82:8f:4e:
                    9b:8b:46:67:9e:70:c8:2d:cd:80:67:97:1c:9c:65:
                    1e:4b:e4:30:ed:9b:d6:38:77:45:9d:91:35:8b:eb:
                    ff:57:bf:cf:16:45:43:af:5e:45:a5:48:b1:04:47:
                    3b:62:3a:4b:33:f5:54:78:4a:56:b6:bc:ef:4c:9b:
                    5f:4a:c9:73:bb:b4:83:de:85:cf:4a:d3:0a:a0:cf:
                    14:7a:f3:ad:ad:86:57:45:c7:87:e1:7c:58:d0:1f:
                    26:19:34:f1:9c:e9:95:07:28:98:66:a4:1c:d1:0d:
                    1c:e3:8e:70:b4:3e:35:14:68:dc:41:69:83:e5:40:
                    da:6b:ea:41:bd:f2:fc:97:5c:a3:0b:39:6d:e7:69:
                    f3:c3:e1:25:a5:37:1c:04:52:98:00:02:e4:cb:e0:
                    95:39:d0:3b:5d:a5:d9:06:91:44:6f:4a:6f:62:17:
                    3a:03:35:06:4c:65:46:d3:1e:6d:1d:dc:9b:36:df:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0A:D6:4B:72:F0:1D:BE:77:38:9D:EC:F8:89:07:B9:12:E9:42:D7
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/44942606EA0A11F09D7A92E76F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:0d:79:5a:02:a2:36:28:d6:b8:2f:57:1f:67:d8:48:f1:f7:
         ff:f7:24:ff:1e:2a:aa:3d:c3:ba:28:f9:5d:4b:00:1e:b9:0c:
         fa:70:82:6e:45:04:57:cc:b0:45:56:51:43:66:1c:41:ee:3d:
         26:37:f4:13:b8:2f:17:63:ac:7d:bd:ce:da:d9:61:d0:b2:4b:
         94:b7:35:1d:d1:85:80:29:3a:be:14:c5:ce:35:c1:cc:8e:d2:
         2b:d6:fc:0f:d9:78:a2:61:16:27:4d:27:31:17:0e:ea:f2:c2:
         7c:e1:20:b5:8f:0f:6f:1a:44:e3:d0:f0:3f:64:32:f2:43:76:
         6b:11:c4:9b:60:88:87:9e:bd:a8:8e:68:49:ca:be:20:6b:d1:
         8e:38:1c:e4:7a:f7:4b:0c:56:a4:9d:ad:77:ce:d1:0d:f8:77:
         be:36:54:7c:d9:d5:49:3d:61:c6:9a:27:67:17:11:f1:0b:1d:
         71:17:86:bb:fb:0e:a9:00:81:41:9e:5a:39:61:86:63:d9:53:
         27:fe:04:5f:3d:66:04:66:3c:ff:c3:75:6d:52:dd:ae:fb:d0:
         c2:7b:38:a7:ca:dc:ab:f6:1f:97:af:bf:12:3d:f9:7e:ee:4c:
         46:70:e8:6f:92:d8:1a:24:39:e5:9f:cc:24:92:bc:07:1c:dc:
         88:a6:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:53 2026 by rpki-client