Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
File:                     0578A814931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier:          Z6egvfJv4T2twr/MyysD84nkeZr42AiA4waVdxOrO/o=
Subject key identifier:   5B:F7:D2:9C:21:2D:23:46:99:04:20:F2:BC:A4:66:EB:E6:AD:5C:0E
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26FB
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
Signing time:             Tue 10 Mar 2026 17:22:45 +0000
ROA not before:           Tue 10 Mar 2026 17:22:45 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     4294967294
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 17:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9979 (0x26fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Mar 10 17:22:45 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69b05364-71ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:c9:b6:b1:fb:e2:65:e9:32:e9:d3:8a:f7:
                    a0:d1:b8:6c:13:f2:64:12:4c:2b:de:a7:75:a9:64:
                    08:60:f4:82:ea:77:2c:a7:c0:a9:5c:e5:b2:88:bd:
                    b0:db:44:6e:8f:f9:28:67:a8:28:fc:d6:a3:c6:e7:
                    47:67:e3:f7:d9:92:a8:13:95:20:a3:72:fd:b1:b3:
                    22:b3:26:c0:d0:bd:e7:97:28:e5:72:e5:66:3a:a7:
                    49:9a:80:52:f3:5e:83:c6:0a:4e:d1:44:d4:95:39:
                    e4:31:c2:43:9c:ea:cc:5d:b4:9d:ef:5c:91:63:32:
                    a2:b0:ef:c9:59:e6:fc:0e:1d:e4:dc:bd:8f:59:00:
                    e9:2f:e5:5c:8a:27:ed:47:c9:3d:a6:b1:46:57:45:
                    11:d2:cc:ea:f3:07:28:99:81:01:7d:cc:90:3f:01:
                    48:ea:98:73:27:b4:a5:dc:57:78:a4:69:40:af:ff:
                    70:6b:fd:04:28:de:96:2c:92:b9:ab:19:95:24:aa:
                    c9:92:fd:0f:81:4e:b1:f8:08:e9:81:61:a8:14:cd:
                    a4:45:e9:4f:ab:2b:8f:52:5c:a4:eb:ab:58:ba:d4:
                    f7:95:5f:eb:08:5e:b2:48:cb:6d:60:e0:32:8b:be:
                    a8:ad:86:7b:95:c2:94:5f:3e:82:c1:cc:b9:75:de:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F7:D2:9C:21:2D:23:46:99:04:20:F2:BC:A4:66:EB:E6:AD:5C:0E
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:63:fa:3e:81:5e:b9:a7:96:aa:4d:ec:14:00:20:22:a7:45:
         46:27:6b:f6:8e:19:13:52:31:a1:fc:57:5f:e1:27:8a:95:8b:
         26:f6:cc:8a:2c:3a:2c:cf:37:a3:77:c9:4b:43:2b:9f:53:7d:
         c1:64:3b:eb:86:ec:04:37:e5:b8:b1:ed:06:fb:27:5b:d9:8b:
         a6:81:07:69:4f:2b:41:c1:b9:5d:52:52:7a:d5:e0:62:84:ed:
         7f:7b:5b:20:e9:0a:a1:07:d9:7c:36:a7:64:0d:82:7b:9b:de:
         af:e4:0f:2e:61:07:3d:90:0c:1b:a4:82:84:a0:92:b4:14:a9:
         13:16:3d:01:7c:a4:27:ca:9a:bc:29:5b:e7:10:23:a4:1d:d8:
         6c:d4:43:0c:10:85:0b:02:63:b1:da:b3:b5:90:d9:c3:a9:47:
         c5:42:26:1a:ec:d9:28:2c:78:32:ab:85:ce:01:92:90:7d:53:
         15:6f:94:28:08:4f:61:fe:6a:18:fa:cf:88:51:a2:d2:6c:d2:
         08:a5:47:4e:2f:b9:58:89:c5:7e:1a:24:ae:ab:d2:f0:af:10:
         3c:ee:1a:4a:3d:5a:d4:39:f3:92:c4:84:24:77:90:b3:f7:c7:
         39:f0:e9:df:1b:78:10:ea:60:cd:8a:f0:68:a0:63:de:37:9d:
         74:1a:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 11:43:38 2026 by rpki-client