Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa
File:                     1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (raw, json)
Hash identifier:          0HpT0bON0GmwZ3HDIXvnmn4pvemwXudiqqeGl2I5uF8=
Subject key identifier:   B7:94:83:92:7F:DF:25:68:62:70:1F:49:FB:37:97:78:BD:AD:5C:04
Certificate issuer:       /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial:       03D8
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa
Signing time:             Thu 29 Jan 2026 00:20:47 +0000
ROA not before:           Thu 29 Jan 2026 00:20:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149524
IP address blocks:        103.182.148.0/23 maxlen: 24
                          2001:df0:7cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
                          rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
        Validity
            Not Before: Jan 29 00:20:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697aa7df-1b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:58:c6:55:9a:01:af:8e:da:9e:d7:96:38:
                    34:85:d1:96:4b:22:99:e5:38:37:01:22:a0:ed:2d:
                    1a:67:0c:f8:44:df:67:45:5b:45:0d:09:c2:1a:ce:
                    30:4e:d9:b0:60:b5:82:a8:fb:c0:66:a5:c9:b6:5c:
                    4b:e5:01:cb:1c:b0:1c:50:c4:bd:f7:b2:c4:6e:6d:
                    04:03:35:6f:2b:ac:15:9a:89:98:f7:89:4b:41:c3:
                    94:c3:36:af:86:ad:87:5b:e0:4b:8b:bb:dc:ab:8a:
                    b5:9b:bb:6c:dd:a1:00:b5:13:ea:e0:a1:db:1d:92:
                    da:9a:22:1c:af:ca:bd:79:87:c1:bb:14:0f:80:18:
                    89:1d:f1:fa:1b:1e:af:dc:80:eb:47:e9:fd:51:22:
                    11:87:88:9c:4a:21:28:63:33:c9:53:da:db:ba:2a:
                    77:72:04:32:e0:5e:09:07:19:15:95:6e:1e:05:ed:
                    be:28:4d:49:d4:65:f5:fe:9b:03:5e:df:ef:82:93:
                    71:98:f9:76:02:df:36:5c:93:41:67:55:bb:f8:05:
                    37:74:f9:cd:0f:a4:8c:8d:98:4e:c0:d6:13:fb:b3:
                    fe:e9:94:da:b0:ce:50:c6:0a:ad:3e:69:fd:93:38:
                    80:e0:1e:fd:14:9a:1a:5c:5d:57:51:49:53:8f:40:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:94:83:92:7F:DF:25:68:62:70:1F:49:FB:37:97:78:BD:AD:5C:04
            X509v3 Authority Key Identifier:
                keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.148.0/23
                IPv6:
                  2001:df0:7cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:1e:30:a3:13:1d:72:76:cc:92:d0:85:13:22:cc:89:64:da:
         eb:ad:a2:f7:b0:cf:51:99:4d:d6:d4:7b:e6:3b:3b:8b:e6:1c:
         ca:fd:2c:ec:7e:72:fa:cb:f5:6e:43:cd:07:f1:e8:a6:46:5b:
         c4:43:7a:c5:58:c7:d0:7c:56:e1:14:0e:32:bf:3e:0e:9e:17:
         a6:5f:d9:b0:27:ca:be:1d:44:d7:84:cc:a6:42:fd:0a:4e:5a:
         d3:e2:8c:44:57:0f:19:b6:f5:a7:15:c2:59:12:8d:31:72:ee:
         c1:cf:c7:ce:b3:63:d2:2c:1b:54:12:ee:2d:d1:ff:be:cb:c5:
         a6:c7:18:b9:76:33:06:4e:e0:c2:92:17:e6:e6:65:f3:de:4a:
         95:53:73:48:53:66:d5:64:f7:20:65:6d:07:1d:0f:b0:dc:9a:
         9a:f1:b2:50:26:9b:f5:90:f5:1a:ce:be:42:65:fd:e1:e9:b0:
         bc:03:59:22:f7:c6:ef:f9:36:17:ba:e1:e4:89:4a:8e:3c:71:
         37:8d:11:72:9a:7f:1e:61:0d:47:5a:9f:1a:b6:d9:9c:eb:54:
         cf:1d:b8:f3:31:03:c9:ab:2c:5a:75:d5:25:11:0b:81:4b:20:
         a1:25:1b:36:d8:0b:7a:d8:47:c4:56:26:25:1f:97:f3:5d:fb:
         cf:11:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:58:56 2026 by rpki-client