Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/D65DAE8A595C11EF8FABE750C4F9AE02.roa
File:                     D65DAE8A595C11EF8FABE750C4F9AE02.roa (raw, json)
Hash identifier:          pnNvJ0QcGVavN6ejXIRyXtFdc94Af5xYSFGkl4Uy/KA=
Subject key identifier:   1C:39:78:D9:2D:2A:9B:DB:05:17:C5:6F:A2:10:B6:3D:60:0D:48:3C
Certificate issuer:       /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Certificate serial:       012F
Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/D65DAE8A595C11EF8FABE750C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:08:28 +0000
ROA not before:           Thu 15 Jan 2026 05:23:32 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.10.172.0/22 maxlen: 24
                          203.176.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
                          rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
        Validity
            Not Before: Jan 15 05:23:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41e2b-e052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:ce:56:47:1d:52:95:08:05:d7:a7:cd:9a:
                    f3:15:21:d4:53:a8:97:c5:55:e8:c8:68:60:0b:b4:
                    ed:e8:02:b5:d4:79:00:71:39:ca:bc:a6:78:82:bc:
                    05:b3:48:b3:01:a2:f2:ba:63:5f:85:47:1f:d7:eb:
                    52:14:6e:c0:b6:71:cd:75:49:d7:3d:3b:ad:ca:b5:
                    5c:76:71:68:59:5d:1c:b9:db:78:16:d8:1f:d6:29:
                    7e:bc:fc:7e:a6:f8:59:bc:33:eb:13:db:42:b4:4a:
                    36:68:1c:9c:c0:91:6e:33:4b:c2:b4:4d:38:02:c8:
                    6f:20:e3:af:4b:fe:1e:73:63:0f:e8:de:88:69:a1:
                    3e:93:21:65:f7:06:13:cb:b0:d0:4b:59:11:6f:01:
                    1c:b4:42:66:19:ef:48:5b:ee:51:b9:b9:a4:ab:e3:
                    81:df:be:a8:c5:64:42:f3:5e:b1:de:1d:1a:01:6a:
                    9a:5b:9d:9b:ae:99:67:5a:32:b1:13:44:a9:ff:a4:
                    3c:7b:20:e6:1d:de:c1:ee:4f:9b:79:bd:92:00:9e:
                    2f:e1:b1:13:a8:2f:e0:82:13:7c:c3:4b:c8:32:c2:
                    81:42:8f:4b:13:a6:ed:de:e1:41:be:66:03:7f:4d:
                    da:1e:1a:14:b0:2e:73:f5:4b:10:5f:0d:33:dd:05:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:39:78:D9:2D:2A:9B:DB:05:17:C5:6F:A2:10:B6:3D:60:0D:48:3C
            X509v3 Authority Key Identifier:
                keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/D65DAE8A595C11EF8FABE750C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.172.0/22
                  203.176.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:73:1c:f7:6e:c6:8b:a4:52:93:8a:08:fe:80:e2:94:a4:ee:
         8e:1c:42:4d:78:6f:c8:40:e4:76:08:9f:6b:63:50:0a:4e:a4:
         06:4c:b0:95:04:0e:c8:15:09:67:33:48:9f:04:07:2f:95:43:
         25:2e:5e:e2:25:b3:92:84:7e:5f:65:e4:26:04:94:63:fb:ba:
         f3:9d:f1:74:3d:e9:21:0d:2e:c8:aa:4d:e4:85:b9:04:64:d4:
         2d:89:16:76:56:83:f5:8a:b0:cd:04:63:ea:ad:2e:31:f4:41:
         49:b4:fe:5b:16:81:9a:66:f1:4d:7c:b9:cb:5a:52:83:0e:37:
         11:f8:74:15:60:ac:ae:8e:6b:6f:23:3a:5e:df:a5:9c:08:47:
         a6:31:48:b5:3c:45:48:35:70:0e:dc:2d:e8:d5:c9:60:08:97:
         16:84:8b:17:37:3b:1e:9d:df:29:de:c1:ea:2b:b2:9a:b5:be:
         7b:66:44:db:a8:40:2f:87:10:9e:c4:4b:60:95:58:74:04:8e:
         3c:f8:1a:76:fe:e3:3a:18:6d:10:a3:0b:3f:e2:ea:e7:bd:95:
         dd:f6:88:b7:e3:28:a2:fd:e4:d5:58:be:de:5e:c8:91:fe:db:
         cb:be:fb:27:2c:8e:49:02:47:f1:85:36:00:dd:40:61:af:d4:
         d5:ce:0a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:28:26 2026 by rpki-client