Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8DB2B8E6E27F11EEA6719536C4F9AE02.roa
File:                     8DB2B8E6E27F11EEA6719536C4F9AE02.roa (raw, json)
Hash identifier:          pnBR0xS0dQQ2SDLLqNdwnP0A7v24fxl8+oyuwqvoLV8=
Subject key identifier:   15:FE:86:56:70:72:A8:41:BA:70:29:63:B0:05:A3:26:74:18:20:CB
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D9E
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8DB2B8E6E27F11EEA6719536C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:41:41 +0000
ROA not before:           Fri 30 Jan 2026 16:14:25 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.81.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7582 (0x1d9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Jan 30 16:14:25 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46c45-c52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:70:50:46:4c:44:6c:c5:f4:01:f0:90:2e:
                    9e:aa:bf:00:25:9c:2f:30:95:06:f6:b8:eb:36:43:
                    b5:70:0a:20:50:b3:5f:a6:38:ed:b6:ea:c6:cf:44:
                    56:08:22:09:19:7b:31:51:35:c4:0c:f8:d7:4d:50:
                    f8:b0:83:30:dd:dd:17:61:df:69:78:11:82:ab:38:
                    55:cc:e7:3d:80:2d:01:aa:2e:33:7a:9b:b0:58:aa:
                    97:97:d4:26:79:32:1f:c4:44:26:36:0b:66:08:73:
                    13:26:f7:af:96:68:05:3f:21:fb:16:78:bb:6f:27:
                    ca:79:23:6f:c9:5a:62:90:37:5f:fa:4d:28:8f:c6:
                    77:1c:1d:1d:50:6a:55:5f:f1:3b:50:11:4e:a0:fb:
                    6c:e6:2d:db:4e:cc:dd:ac:76:44:f4:7b:a5:71:8e:
                    f8:10:cd:bc:9a:5f:27:9f:46:ad:aa:aa:d9:79:9f:
                    3e:d2:2b:05:b3:cf:ae:40:20:ee:5c:21:70:0e:24:
                    fa:a1:50:7c:4f:6f:be:ff:04:76:d4:c6:ef:b5:25:
                    9d:57:b6:ca:8c:67:19:19:f9:2f:ef:0d:36:4b:f0:
                    ec:4d:f9:3b:23:8c:c6:0a:e7:a0:1d:b5:de:ba:3e:
                    99:c9:af:47:50:7b:86:85:ee:93:1b:ac:a4:f5:e3:
                    d4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FE:86:56:70:72:A8:41:BA:70:29:63:B0:05:A3:26:74:18:20:CB
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8DB2B8E6E27F11EEA6719536C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:94:65:42:f8:a0:31:20:48:1c:67:ba:33:e9:91:5b:52:
         70:5a:14:ba:a4:52:96:cb:4c:cd:d2:58:dc:ae:de:87:de:6b:
         4a:a0:ef:2e:d4:e8:b4:12:f6:07:5b:2d:1d:1f:22:e2:5e:bc:
         61:68:9d:dc:5c:2d:b9:c4:20:f9:25:8d:fc:ac:90:76:31:1d:
         78:39:93:17:12:13:a3:b6:a6:81:74:4c:3d:c9:cb:b4:ee:f9:
         81:b0:fb:f3:84:0e:ca:4a:0a:65:ae:e9:51:80:d8:64:cc:ee:
         92:aa:7d:10:1a:af:1b:52:25:04:44:c8:8d:53:54:4f:74:e1:
         2f:68:7b:c6:02:68:db:7f:58:94:65:5b:e7:ae:ef:1d:74:47:
         41:5c:83:73:05:0e:e0:31:a8:3d:f1:72:6f:8c:49:58:fd:7f:
         d9:25:4a:4d:6b:57:db:06:09:4a:8a:46:97:fc:7d:5e:59:84:
         2f:e9:08:36:ab:bd:b2:9f:a6:29:b7:32:2b:64:bb:6f:1c:ff:
         68:e5:36:3a:a0:b8:fa:4b:a0:83:95:63:ae:4b:a3:24:35:fe:
         31:20:09:58:98:54:e1:9c:f3:dc:d3:64:b7:7e:4f:07:42:13:
         a2:7e:c2:81:37:f5:37:2a:d4:2e:92:9d:e4:f3:d4:ad:85:d3:
         de:31:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:16 2026 by rpki-client