Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/730C503A56C611F096620043C4F9AE02.roa
File:                     730C503A56C611F096620043C4F9AE02.roa (raw, json)
Hash identifier:          qw1/w7y9/Mj/XuC7T4zOXFPPf11Ba4kPhPFLRXjZiuY=
Subject key identifier:   0E:50:6A:6F:60:22:06:D8:4D:68:B2:28:DA:5A:D7:B3:88:0B:D0:DA
Certificate issuer:       /CN=A916C8F2/serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6
Certificate serial:       74
Authority key identifier: E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/730C503A56C611F096620043C4F9AE02.roa
Signing time:             Thu 05 Feb 2026 17:25:59 +0000
ROA not before:           Thu 05 Feb 2026 17:25:59 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134244
IP address blocks:        103.245.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl
                          rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C8F2, serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6
        Validity
            Not Before: Feb  5 17:25:59 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6984d2a7-9a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:be:12:91:7d:8d:3c:c1:91:d0:31:69:18:
                    4c:4e:be:06:97:05:f3:1a:95:0b:0e:6e:7a:ba:05:
                    be:4d:ca:d5:4f:f3:d7:a2:48:3b:93:4e:3c:78:55:
                    d4:3e:81:74:33:b3:89:4f:53:68:3c:b7:b8:37:4f:
                    95:4d:d5:b2:53:bf:bb:fb:49:60:c7:f3:9d:4b:21:
                    01:b6:48:69:68:76:0c:cb:6d:9f:0e:4e:95:06:45:
                    1f:39:42:9f:c0:97:2e:ac:e5:92:fe:63:9c:3a:44:
                    99:5d:d4:d3:00:bc:9f:0c:9e:e1:e8:1f:76:cc:f5:
                    c3:0d:09:d8:84:87:15:40:ed:35:00:b8:36:3b:81:
                    66:56:6f:8d:92:71:af:60:04:bd:1e:9f:b8:1e:cf:
                    1d:d4:08:cd:04:b1:f5:35:df:48:62:6f:dd:7f:2e:
                    4d:73:f7:ff:d7:e9:98:4b:8a:92:cd:31:42:a4:16:
                    83:b1:1e:e1:60:62:da:57:df:50:73:97:d3:ed:6b:
                    41:1b:61:ff:dc:91:85:8f:b0:ae:b2:a2:5a:d9:9f:
                    81:cc:03:39:98:81:f7:41:10:41:17:62:b5:9c:58:
                    e8:62:e9:69:72:6b:0a:c5:c7:0a:da:ca:36:f5:04:
                    c9:e8:73:6f:cb:ec:21:e5:85:65:69:77:08:f6:72:
                    79:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:50:6A:6F:60:22:06:D8:4D:68:B2:28:DA:5A:D7:B3:88:0B:D0:DA
            X509v3 Authority Key Identifier:
                keyid:E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/730C503A56C611F096620043C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:d2:59:d4:27:04:2a:54:d9:22:5a:72:53:af:1f:de:97:7b:
         56:0a:15:6c:81:00:f3:96:73:93:7c:5f:e0:9b:f4:32:db:3b:
         8f:19:3f:27:5d:a8:19:a2:56:af:e0:0a:b7:20:30:77:d2:d1:
         73:09:72:e8:f5:70:cc:d7:fd:6b:3b:36:b3:c1:2f:ce:6e:64:
         37:d0:86:17:06:82:35:c5:88:05:d7:2f:90:30:f9:bf:d1:e2:
         f2:f2:f3:ac:0c:b9:ce:8c:08:c6:d3:12:9a:03:4f:ff:35:7a:
         24:74:a3:60:49:1b:9b:b0:cc:1b:6e:7f:41:b1:58:39:5d:3a:
         3b:1e:45:f3:0e:94:d4:53:40:e2:17:3e:59:ec:01:0e:8d:97:
         d2:79:5c:3d:f3:6c:cb:14:a8:f7:98:e5:aa:1b:6b:cc:3d:7f:
         ea:2a:be:dd:c0:8a:69:bc:02:7f:af:49:65:b3:3f:52:e7:7e:
         66:13:fb:bc:a0:ac:e7:c1:f6:73:e0:93:07:88:04:e8:e6:12:
         1e:d6:84:d0:82:ed:78:9c:7f:a1:35:bd:1a:47:e2:fd:a7:73:
         c8:cf:90:83:54:07:46:b1:f3:c4:51:6d:05:e5:6d:0a:3c:39:
         bf:69:1d:ae:bc:7c:a0:81:76:97:bf:6a:1e:52:c5:0a:8c:c2:
         94:63:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:45:03 2026 by rpki-client