Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/5407E320236911EA9967DA1CC4F9AE02.roa
File:                     5407E320236911EA9967DA1CC4F9AE02.roa (raw, json)
Hash identifier:          yob4fNVclP9e/XfDAOctMejkUsHSd7sQtI7hbNABoZY=
Subject key identifier:   C8:FF:36:30:29:A7:BA:5C:E3:31:25:36:7B:20:97:4B:BB:56:C9:1A
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0CC4
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/5407E320236911EA9967DA1CC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 19:36:19 +0000
ROA not before:           Fri 02 Oct 2026 19:36:19 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.143.45.0/24 maxlen: 24
                          2001:df1:6e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3268 (0xcc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Oct  2 19:36:19 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac007b3-33a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:46:24:35:46:08:78:d7:43:1f:d0:39:67:
                    f3:c3:d5:cb:bc:6c:39:8b:53:56:bd:45:34:e9:a3:
                    91:eb:ec:dd:b0:94:2c:a0:3d:3c:b7:da:6b:ac:7b:
                    22:ab:86:6c:7c:35:22:eb:40:2d:b0:ed:0e:1f:01:
                    44:5d:9c:a7:03:4c:07:9f:5c:82:52:80:35:10:9f:
                    1f:52:e9:b4:f8:a0:c9:44:6d:8f:9c:6a:4c:3e:11:
                    bc:12:32:de:3f:cf:40:f0:ea:20:88:9f:fe:85:73:
                    67:56:f3:53:92:5b:d8:79:6b:8e:82:a3:ff:de:38:
                    74:13:2c:4b:97:28:11:c8:45:cf:2f:41:8a:1d:33:
                    fa:88:af:c8:1c:7f:d1:67:a2:24:47:d2:fa:70:a6:
                    41:ea:97:42:80:bc:22:7a:f1:b7:6f:60:91:d6:1d:
                    4a:ce:25:09:a8:f1:7b:a7:cb:ef:c3:0a:bf:cc:82:
                    d1:ae:30:54:4b:f5:23:55:a9:5a:05:2b:dc:c2:26:
                    99:8a:cc:a3:55:13:2a:0f:ab:a6:09:6d:ce:eb:34:
                    67:2c:e2:1b:8b:3f:0d:74:ac:c7:e0:05:bf:0c:0d:
                    37:c1:57:79:41:8f:68:19:7c:f6:52:53:f2:11:a7:
                    ff:d4:a5:82:92:ad:56:ba:d6:19:d6:cb:0d:91:0a:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FF:36:30:29:A7:BA:5C:E3:31:25:36:7B:20:97:4B:BB:56:C9:1A
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/5407E320236911EA9967DA1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.45.0/24
                IPv6:
                  2001:df1:6e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:a5:fa:d9:08:85:ba:b5:56:12:6e:d2:fc:97:63:a8:5c:fa:
         9a:c3:fa:e0:5d:ab:54:a5:50:b4:21:2f:66:2a:85:e6:5d:9c:
         86:41:9f:ac:08:46:90:97:c6:d9:eb:23:76:33:30:25:af:b1:
         e8:83:a4:ed:ba:af:5f:64:36:5d:75:54:95:b3:ba:c0:f8:dc:
         cd:02:92:9d:aa:db:38:be:49:df:5a:2b:00:b4:a9:64:42:b9:
         d8:17:0e:34:dc:1a:ba:8f:95:f2:45:65:0c:5c:48:a9:2d:2c:
         c9:61:d1:7c:73:32:73:08:f5:cc:8a:d0:5d:c6:4f:75:3a:84:
         7e:6d:dc:1e:2a:12:61:54:3d:be:0a:76:5f:94:95:77:e8:84:
         00:6c:41:14:53:f0:f7:71:39:24:f3:f9:a1:97:59:e1:18:43:
         7f:85:bf:9d:63:9f:2c:d8:2c:05:44:4a:17:57:43:bb:94:78:
         a6:2e:7a:1f:8b:f0:af:03:f3:35:73:74:da:07:69:a3:5d:e9:
         e5:6c:69:fc:f2:c9:9f:95:6d:fb:8f:02:a4:c8:aa:3b:78:27:
         19:57:30:7c:53:80:9a:33:b1:41:b4:62:a8:57:c1:a3:0a:36:
         fe:53:6e:78:75:79:ad:6a:1e:f1:97:19:c2:52:5d:fd:51:f8:
         a9:78:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:15:18 2026 by rpki-client