Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/BC04E5745E4E11F082F8D529C4F9AE02.roa
File:                     BC04E5745E4E11F082F8D529C4F9AE02.roa (raw, json)
Hash identifier:          +n6sT0DNVEtTay2c7eDEYpMLVSmyIfomBjZvDH6GPyg=
Subject key identifier:   AF:A7:81:CC:CB:16:55:B2:08:9E:11:14:F9:AC:07:EA:65:55:C9:4D
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       07D7
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/BC04E5745E4E11F082F8D529C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:01:00 +0000
ROA not before:           Sun 04 Jan 2026 21:17:34 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     60542
IP address blocks:        103.205.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2007 (0x7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Jan  4 21:17:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47edb-1356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:91:72:63:8a:3a:f1:a8:74:b5:ed:80:4d:
                    d2:6b:c3:2a:f3:66:4d:d0:64:62:2c:d6:35:03:ad:
                    17:fd:1e:eb:55:a6:2b:66:4d:2b:a6:a7:ef:bb:fc:
                    b2:e5:2d:03:43:ba:05:78:65:61:0f:89:9c:62:55:
                    ca:ef:8d:4a:db:68:49:13:d4:a7:c1:8f:3d:89:df:
                    c0:3c:3d:64:e1:3b:7d:f5:c8:05:89:8c:74:9e:db:
                    c8:43:d2:bb:2b:be:5a:30:4d:6e:eb:6e:f0:8a:d5:
                    e8:62:fa:fc:9f:e9:28:3b:9e:21:b4:f1:e1:a2:be:
                    93:3f:44:36:c3:c0:04:36:f6:64:00:8b:c8:c6:a4:
                    50:49:4f:f7:ac:9f:98:aa:39:e1:a5:10:5d:b8:45:
                    26:57:9f:b4:cc:6b:c3:ca:33:7f:cf:45:01:17:68:
                    01:cd:43:19:fd:22:45:26:2c:02:8b:14:52:32:db:
                    f4:9f:c8:2d:62:66:a6:09:32:23:95:62:b6:96:80:
                    f7:3e:54:21:d5:89:98:7d:be:c7:0d:1f:86:ec:84:
                    2f:fd:03:78:51:27:ea:b7:1f:f9:a3:0f:08:e3:78:
                    f9:e2:63:a1:d7:22:da:55:4c:5c:bf:40:c3:9d:9e:
                    e6:09:cb:12:2b:1d:03:c9:f0:60:b9:1a:92:a9:ec:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A7:81:CC:CB:16:55:B2:08:9E:11:14:F9:AC:07:EA:65:55:C9:4D
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/BC04E5745E4E11F082F8D529C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:e8:29:dc:f9:f7:fe:3d:ca:3e:f7:00:ba:ed:2c:74:fa:
         3c:e9:37:b5:3e:91:fe:88:64:15:91:02:0a:57:ff:c1:86:17:
         34:d2:8a:67:cf:4b:4f:c7:e3:a2:d0:71:4e:14:2d:43:db:ae:
         f8:a5:a3:41:d2:b9:fb:c2:ca:f1:93:68:b1:ab:62:66:f3:33:
         32:ba:18:16:7e:9a:d1:b4:75:c3:dd:75:39:f3:41:a5:92:30:
         d7:4b:d4:fc:5c:2d:d1:c4:25:21:d3:57:8c:fc:06:88:41:50:
         1b:75:b5:67:e9:f7:a4:44:cf:14:4a:ba:b1:af:a6:58:47:63:
         9e:6c:d9:52:76:f2:32:9e:4e:91:7c:b3:df:6e:44:0b:64:54:
         1b:de:55:a3:f3:57:90:6f:d2:16:7b:d5:73:30:20:ba:1a:d6:
         9a:c5:66:d9:cb:bc:1a:2a:77:0f:f0:d2:93:56:6a:ff:42:0b:
         36:10:a7:da:0f:8b:a7:16:aa:40:98:39:56:a2:71:d6:1d:d9:
         4f:e9:75:69:ea:f0:be:54:77:a0:97:cb:4f:f9:25:a1:d0:b5:
         c5:9f:fe:04:ac:a4:a4:8a:ea:5c:93:32:d5:49:86:8a:b4:a2:
         04:67:55:98:d8:97:ce:f6:bf:93:6d:52:7d:1e:a9:41:de:7e:
         08:bb:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:56:45 2026 by rpki-client