Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/D3E69766027B11F0ACFB0B53C4F9AE02.roa
File:                     D3E69766027B11F0ACFB0B53C4F9AE02.roa (raw, json)
Hash identifier:          KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=
Subject key identifier:   F3:A4:86:C1:F3:14:19:70:FA:DD:A4:BF:C7:9E:73:9C:9D:08:AB:89
Certificate issuer:       /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial:       BD
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/D3E69766027B11F0ACFB0B53C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:33:24 +0000
ROA not before:           Sat 25 Oct 2025 10:50:27 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150315
IP address blocks:        103.172.26.0/24 maxlen: 24
                          103.172.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
                          rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 05:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
        Validity
            Not Before: Oct 25 10:50:27 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a591a4-8a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:52:d5:10:47:d8:df:fd:91:98:fd:26:af:
                    8e:41:86:21:f6:97:28:93:27:b1:44:0e:14:08:fd:
                    4b:4c:be:ee:e6:a6:67:f5:f8:60:62:45:a4:6d:b4:
                    17:62:08:2f:57:9f:5c:52:54:c1:2e:b7:e9:fe:e3:
                    f8:d6:9f:e0:54:30:6e:88:b7:96:73:6a:42:00:9e:
                    48:c6:8a:93:51:ba:b1:77:72:ad:7c:d4:43:11:d9:
                    ce:03:de:04:87:82:b1:07:7c:de:83:bf:92:92:0f:
                    48:cc:49:3b:cf:b9:6b:f5:d6:db:2f:86:fe:04:64:
                    97:10:38:d1:7f:82:5c:57:04:8c:b6:40:21:d7:7d:
                    b1:18:5f:38:34:e3:93:64:03:6f:09:bf:62:92:88:
                    d8:e3:42:8a:65:73:e0:a9:a9:ee:71:c3:5f:d2:34:
                    04:61:86:0c:ce:84:e3:9b:94:e2:48:63:3a:96:b7:
                    f9:d0:e0:f1:db:81:70:24:e0:b3:55:52:f0:d9:c2:
                    0b:ed:4d:9d:43:21:5e:c7:ad:f8:a6:48:e0:da:46:
                    84:28:4a:b5:49:0e:53:77:99:f0:18:a8:76:fa:c9:
                    dd:df:6c:18:04:d9:f2:6b:6d:36:df:31:ab:a0:9f:
                    12:36:62:c3:f0:20:4a:94:0f:4a:6b:af:b2:c0:26:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:86:C1:F3:14:19:70:FA:DD:A4:BF:C7:9E:73:9C:9D:08:AB:89
            X509v3 Authority Key Identifier:
                keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/D3E69766027B11F0ACFB0B53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:6b:9c:52:fe:d8:91:58:f7:b3:e2:49:a8:b8:8b:f5:bf:33:
         50:92:d6:2b:b6:4a:70:90:7a:de:2f:44:95:3d:f6:14:9e:a2:
         35:76:0c:fc:5a:60:c6:74:18:59:38:ee:6b:bf:e9:2c:5f:9a:
         7c:d2:19:ef:ef:08:6a:b3:53:ba:65:56:1e:bb:78:e6:6b:73:
         74:93:62:c3:67:93:a6:b4:1d:f8:2b:9c:d0:54:2b:ea:cf:1e:
         92:dc:1e:97:f5:d6:32:21:08:35:01:83:9c:55:54:c3:26:18:
         57:22:e7:a4:70:b8:5d:aa:60:62:42:66:79:50:62:fc:f6:a5:
         9b:50:30:e7:77:16:be:fe:e5:ee:35:b6:94:f5:0b:8b:ed:a9:
         06:53:eb:2c:19:e7:99:ea:58:ec:ce:22:a1:77:2d:32:07:fd:
         ae:b9:24:3d:93:04:05:12:f5:11:4f:e6:f0:ee:93:d7:0f:38:
         b2:ae:23:e0:f7:ea:4c:1f:7e:4d:c4:4d:f6:a4:40:01:7f:60:
         3e:4a:c4:c7:02:ea:dd:66:0a:1a:a1:8a:d7:d3:46:e7:6c:3a:
         aa:f3:09:95:90:a1:5a:9c:81:f4:d5:5b:e7:1e:82:26:31:0c:
         dd:4a:24:61:7c:16:33:4a:7e:d7:fc:56:3d:75:17:a3:8c:b4:
         f7:68:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:36:17 2026 by rpki-client