Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/203A920E9B5511EF93BA272BC4F9AE02.roa
File:                     203A920E9B5511EF93BA272BC4F9AE02.roa (raw, json)
Hash identifier:          +xdPVse/ak9iAcC51N5lqPrsqgrkl8KqKYsjBM6B3M8=
Subject key identifier:   50:76:FD:00:3C:7F:17:4E:DD:12:99:C1:DE:3C:2F:0D:A9:3D:23:C6
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2045
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/203A920E9B5511EF93BA272BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:12:44 +0000
ROA not before:           Sat 30 Aug 2025 16:35:40 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4811
IP address blocks:        202.101.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8261 (0x2045)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Aug 30 16:35:40 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48fac-7955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:f6:a9:1f:7d:a3:14:09:e5:da:7b:3b:8e:
                    53:d2:58:5f:5a:ed:48:a0:dd:e0:09:ca:97:1c:dd:
                    4d:f0:fd:9e:2e:e8:65:c2:95:a7:30:58:f3:42:2e:
                    12:08:ce:22:7c:66:6a:8b:d4:1f:1e:cb:be:c6:19:
                    38:10:bb:a3:22:66:9a:2f:ea:9e:dc:67:64:eb:41:
                    0e:d9:e7:7c:49:37:89:42:e3:a8:6d:0a:d5:77:03:
                    89:a0:09:9d:67:4e:f6:b1:77:3e:b8:0f:42:df:6c:
                    0a:27:2d:e2:9c:f3:fe:53:12:42:b0:6a:28:15:a2:
                    45:fa:40:bf:72:1d:2b:11:4a:26:64:e9:8a:f3:e5:
                    8b:a8:a1:ea:b2:e2:c8:f7:07:11:1e:12:f6:87:94:
                    d9:b9:4b:5b:a9:70:6a:21:6f:2d:d0:e5:63:8a:1b:
                    8f:c9:3b:0c:2e:f5:bb:c0:a1:a0:34:09:0c:a2:0c:
                    92:52:77:e1:94:4c:c4:00:88:39:d9:24:32:3f:fe:
                    fe:94:5d:02:8b:52:b8:07:6c:03:14:bd:30:06:32:
                    74:0b:eb:db:43:e9:29:86:c3:a7:71:e8:d7:d7:75:
                    6d:22:da:61:d0:63:3b:ca:6f:ff:ee:e2:a2:fa:18:
                    91:91:46:7f:82:91:54:45:8d:22:a1:f2:f9:b8:62:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:76:FD:00:3C:7F:17:4E:DD:12:99:C1:DE:3C:2F:0D:A9:3D:23:C6
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/203A920E9B5511EF93BA272BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.101.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:55:9e:64:de:f8:a3:21:e6:28:8d:64:00:08:c9:84:45:e5:
         28:53:9a:d1:0a:90:1a:ca:de:4a:24:1d:64:ec:87:47:6f:38:
         4c:6b:5e:9a:98:ee:f5:14:da:fa:c6:e1:30:78:a0:2d:de:4d:
         76:5b:4b:53:9e:3f:bb:5c:27:bf:65:02:60:b8:30:96:be:8a:
         af:aa:7b:31:a9:74:c2:32:c9:31:cd:c5:b6:d2:db:79:bf:7d:
         1e:c8:2d:7a:ab:76:99:28:d6:ca:6b:70:24:fd:21:96:02:a9:
         66:02:bf:b5:f5:c3:5e:01:93:6c:29:84:18:12:4a:ed:64:f2:
         bf:06:93:1a:c3:7a:79:0a:2d:d4:96:52:79:67:9a:65:53:e9:
         81:64:6c:37:f9:9e:fe:9c:da:61:37:0d:21:12:da:54:fe:63:
         5d:6e:fd:aa:11:62:b2:f1:46:30:74:2e:e2:6b:4b:86:da:07:
         05:3b:15:58:4f:fc:8b:ef:c5:17:f5:e2:88:e2:0c:fc:4b:4a:
         c9:5c:df:8c:82:08:75:30:a9:b4:ce:a1:68:54:65:cb:70:60:
         2a:1e:91:80:fc:9f:1c:82:32:32:7a:e6:53:de:12:de:85:96:
         3e:ed:10:d8:82:3d:0c:04:aa:db:60:a3:d4:ee:c3:8e:3d:52:
         5e:bd:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:38 2026 by rpki-client