Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/43DD36C8184D11F182F41629283D8C67.roa
File:                     43DD36C8184D11F182F41629283D8C67.roa (raw, json)
Hash identifier:          rBuZ1UCPSkB8QdJUeC2S400luQuXQIUW14oFp5YN5zk=
Subject key identifier:   61:4D:A1:80:7F:C8:AD:FE:2D:CB:F3:48:8F:CA:D4:C9:01:51:C2:33
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       0340
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/43DD36C8184D11F182F41629283D8C67.roa
Signing time:             Thu 05 Mar 2026 04:39:15 +0000
ROA not before:           Thu 05 Mar 2026 04:39:15 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        202.155.80.0/21 maxlen: 24
                          202.155.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Mar  5 04:39:15 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a908f3-ca7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:d5:72:98:78:eb:0b:c2:e5:fd:20:cf:22:
                    50:0c:6e:ef:20:50:f3:f3:f7:f3:35:fb:dc:ef:60:
                    24:f0:2b:3f:4b:d5:6f:dd:87:77:09:69:bc:d5:92:
                    70:5f:64:23:e2:6a:af:20:3a:a9:fa:46:dd:f6:e7:
                    7c:d5:c5:c4:cf:eb:94:f1:73:46:b1:8e:7d:ad:09:
                    83:e1:51:32:70:19:db:a0:73:fe:d2:cb:33:48:fc:
                    5b:62:5d:7d:d0:87:47:16:95:5c:77:e8:8f:ba:ce:
                    a3:7a:29:34:d7:49:f3:aa:68:10:98:41:53:7e:88:
                    d4:76:33:44:87:47:ce:e0:f3:de:1d:07:32:37:65:
                    bb:d7:d1:7c:5f:15:e4:39:76:7f:40:c1:6a:f8:51:
                    39:de:24:2a:a5:80:68:8a:ee:ec:cf:58:f6:b0:04:
                    e4:29:d6:83:96:9e:36:9f:6d:05:17:de:2c:ca:0f:
                    64:65:09:87:38:b0:2e:3f:7c:15:6c:d5:8c:71:b5:
                    1d:e1:69:cc:ef:72:ac:21:17:59:2a:bf:6a:f8:17:
                    ef:9a:01:cd:25:a8:96:01:43:00:50:c1:7f:3f:d1:
                    9b:78:75:fe:c3:93:11:bf:36:21:23:64:78:d6:cf:
                    0c:5b:41:62:ee:8c:d2:48:a6:8c:e9:3f:bf:73:9f:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4D:A1:80:7F:C8:AD:FE:2D:CB:F3:48:8F:CA:D4:C9:01:51:C2:33
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/43DD36C8184D11F182F41629283D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.80.0/21
                  202.155.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:82:ed:d0:19:60:00:94:7a:29:18:17:d5:9d:97:b4:4f:
         6b:08:e8:64:76:15:8f:c8:ae:94:79:51:77:b7:fc:43:20:54:
         24:8e:db:3a:14:2b:53:70:86:cc:76:1d:de:92:1b:f6:67:03:
         9b:9a:18:3d:0e:b9:03:75:0b:3d:c6:18:56:1a:ac:ab:e7:81:
         c2:ae:a3:04:89:04:12:e7:55:b7:ed:f9:17:9b:fe:83:2a:50:
         4a:e7:07:65:6b:4e:81:ac:b7:4e:5e:2d:7a:63:26:f6:b1:65:
         f1:71:e8:7c:88:fb:bf:f1:c7:d2:5e:0c:6e:ea:c2:15:36:75:
         f4:69:db:9f:d5:81:9e:f7:a1:70:4c:6b:74:a9:ff:bb:08:06:
         e5:34:b9:79:03:84:fe:65:14:1a:b5:1a:ff:ea:38:0e:55:a4:
         bc:90:ec:bb:c2:ff:4c:a0:fe:a2:02:df:63:2f:54:f3:ff:c7:
         76:26:8a:c3:2a:fc:14:16:d1:0a:7c:37:d3:9c:8c:57:08:d2:
         9a:4f:da:6b:83:58:7e:d8:58:88:33:b1:dd:d9:35:5a:5c:5c:
         eb:dc:ca:42:ef:ce:f8:1d:58:0f:eb:b3:a7:41:a5:a1:93:83:
         fa:e7:bb:35:fd:26:31:c8:1f:36:01:68:0f:84:2d:ae:76:82:
         de:13:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 07:12:18 2026 by rpki-client