Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/F026CE74927411EDB020A481C4F9AE02.roa
File:                     F026CE74927411EDB020A481C4F9AE02.roa (raw, json)
Hash identifier:          QKAwXjlAKaeSYPJnynXkKE/C3RLluritzofePdZuC8Q=
Subject key identifier:   67:AD:B4:D5:45:E1:44:FE:01:C3:F7:E1:37:A1:A6:4B:19:1A:E3:43
Certificate issuer:       /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial:       358C
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/F026CE74927411EDB020A481C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:07:33 +0000
ROA not before:           Thu 08 Jan 2026 15:10:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     45669
IP address blocks:        103.57.152.0/22 maxlen: 24
                          119.160.0.0/17 maxlen: 22
                          119.160.0.0/19 maxlen: 24
                          119.160.32.0/20 maxlen: 24
                          119.160.48.0/21 maxlen: 24
                          119.160.56.0/22 maxlen: 24
                          119.160.60.0/23 maxlen: 24
                          119.160.62.0/24 maxlen: 24
                          119.160.64.0/18 maxlen: 23
                          119.160.64.0/19 maxlen: 24
                          119.160.96.0/21 maxlen: 24
                          119.160.104.0/24 maxlen: 24
                          119.160.106.0/23 maxlen: 24
                          119.160.108.0/22 maxlen: 24
                          119.160.112.0/20 maxlen: 24
                          2404:3100:1::/48 maxlen: 48
                          2404:3100:20::/48 maxlen: 48
                          2404:3100:1000::/44 maxlen: 44
                          2404:3100:1010::/44 maxlen: 44
                          2404:3100:1020::/44 maxlen: 44
                          2404:3100:1030::/44 maxlen: 44
                          2404:3100:1040::/44 maxlen: 44
                          2404:3100:1050::/44 maxlen: 44
                          2404:3100:1060::/44 maxlen: 44
                          2404:3100:1070::/44 maxlen: 44
                          2404:3100:1400::/44 maxlen: 44
                          2404:3100:1410::/44 maxlen: 44
                          2404:3100:1420::/44 maxlen: 44
                          2404:3100:1430::/44 maxlen: 44
                          2404:3100:1440::/44 maxlen: 44
                          2404:3100:1450::/44 maxlen: 44
                          2404:3100:1460::/44 maxlen: 44
                          2404:3100:1470::/44 maxlen: 44
                          2404:3100:1800::/44 maxlen: 44
                          2404:3100:1810::/44 maxlen: 44
                          2404:3100:1820::/44 maxlen: 44
                          2404:3100:1830::/44 maxlen: 44
                          2404:3100:1840::/44 maxlen: 44
                          2404:3100:1850::/44 maxlen: 44
                          2404:3100:1860::/44 maxlen: 44
                          2404:3100:1870::/44 maxlen: 44
                          2404:3100:1880::/44 maxlen: 44
                          2404:3100:1890::/44 maxlen: 44
                          2404:3100:18a0::/44 maxlen: 44
                          2404:3100:18b0::/44 maxlen: 44
                          2404:3100:18c0::/44 maxlen: 44
                          2404:3100:18d0::/44 maxlen: 44
                          2404:3100:18e0::/44 maxlen: 44
                          2404:3100:18f0::/44 maxlen: 44
                          2404:3100:1c00::/44 maxlen: 44
                          2404:3100:1c10::/44 maxlen: 44
                          2404:3100:1c20::/44 maxlen: 44
                          2404:3100:1c30::/44 maxlen: 44
                          2404:3100:1c40::/44 maxlen: 44
                          2404:3100:1c50::/44 maxlen: 44
                          2404:3100:1c60::/44 maxlen: 44
                          2404:3100:1c70::/44 maxlen: 44
                          2404:3100:1c80::/44 maxlen: 44
                          2404:3100:1c90::/44 maxlen: 44
                          2404:3100:1ca0::/44 maxlen: 44
                          2404:3100:1cb0::/44 maxlen: 44
                          2404:3100:1cc0::/44 maxlen: 44
                          2404:3100:1cd0::/44 maxlen: 44
                          2404:3100:1ce0::/44 maxlen: 44
                          2404:3100:1cf0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 14:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13708 (0x358c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
        Validity
            Not Before: Jan  8 15:10:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a47254-7ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:76:dd:cd:64:e5:17:f0:9b:d6:f1:5a:c1:
                    38:44:4c:7b:a0:8c:4f:2b:a6:1f:da:4e:7e:9a:08:
                    d9:0b:87:30:39:f6:c5:4e:86:5a:24:0e:0f:24:89:
                    b2:33:68:06:89:01:a1:dc:58:b8:8b:8a:fb:7d:cd:
                    78:d3:f4:d6:bd:8d:ec:07:77:17:4a:59:1a:b8:40:
                    1a:2f:89:71:2d:9a:cb:63:09:70:b8:52:7f:1f:fb:
                    0b:87:3c:7d:30:53:a1:d0:53:38:ec:88:72:fb:3b:
                    0f:59:bd:a8:0d:eb:b2:0e:5d:76:ca:2b:d6:cc:56:
                    b9:d1:a9:f8:25:d2:b9:9a:40:49:f3:cc:22:05:ba:
                    99:cd:0c:ac:36:a4:b9:b0:ca:42:3a:06:c0:a2:67:
                    4c:8c:e2:d9:95:ae:81:3c:04:51:0e:3c:3d:68:1c:
                    4d:d0:73:57:da:a1:b6:02:10:ba:d0:3a:10:08:22:
                    fc:ed:b4:08:0f:e6:e9:d3:6d:bb:c7:92:36:d2:bc:
                    44:16:94:8e:ca:ee:88:40:d3:16:d5:82:ac:67:3c:
                    65:09:46:d2:13:81:62:c6:b3:cf:c6:42:6e:45:9b:
                    df:66:9a:8c:43:65:44:f0:85:7c:34:41:8a:19:97:
                    1f:b6:be:72:c4:42:d9:e6:4e:73:82:15:af:5d:ad:
                    c6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AD:B4:D5:45:E1:44:FE:01:C3:F7:E1:37:A1:A6:4B:19:1A:E3:43
            X509v3 Authority Key Identifier:
                keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/F026CE74927411EDB020A481C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.152.0/22
                  119.160.0.0/17
                IPv6:
                  2404:3100:1::/48
                  2404:3100:20::/48
                  2404:3100:1000::/41
                  2404:3100:1400::/41
                  2404:3100:1800::/40
                  2404:3100:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:d8:93:db:2c:13:7b:00:6b:f5:44:82:4e:97:99:42:ab:
         7e:b3:ee:29:86:ce:0c:f5:18:27:e6:38:b3:7b:d9:b8:a1:8c:
         f8:86:9f:f1:8f:a7:fc:c4:7e:91:da:0d:af:8a:bd:0e:1b:c8:
         17:62:94:b4:29:1f:a5:f9:b3:dc:1b:75:c7:7f:35:72:c7:e6:
         ad:b3:8e:06:5d:df:33:d9:ac:cb:57:b8:ab:e9:71:06:8a:68:
         80:c1:4c:d2:54:49:1d:77:0d:d6:b3:c2:48:d8:70:25:45:51:
         d5:3c:44:a4:2d:eb:02:31:24:4d:b2:35:57:5b:c2:cd:aa:d5:
         41:5f:d8:63:f5:e9:13:6a:8a:0c:c6:9d:e3:48:cc:34:d0:12:
         8d:98:d3:63:c0:1f:a1:cf:45:bf:81:04:65:06:9a:96:bb:43:
         a2:92:01:a2:46:db:41:b2:52:86:6c:1d:2d:d3:f5:e1:f4:cf:
         fc:02:26:29:12:91:09:7f:72:49:d3:cd:7c:8a:12:21:24:c6:
         e4:11:f3:0c:50:15:ec:71:25:df:bf:a8:1d:cd:9f:fa:e9:7e:
         e9:63:d9:2a:c9:ab:62:39:7f:13:58:4d:7f:6d:76:4e:d7:46:
         3e:f2:76:dd:75:78:ad:52:ba:0f:29:8a:4c:a6:0f:42:66:32:
         c0:22:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:20:01 2026 by rpki-client