Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/5460E9C8FB2E11EFB488A95EC4F9AE02.roa
File:                     5460E9C8FB2E11EFB488A95EC4F9AE02.roa (raw, json)
Hash identifier:          WnHPtjNuFXwLS4wrHZWK2hVxmNSFxmlgt0RfYfIYD7A=
Subject key identifier:   64:41:1A:56:37:90:02:1E:44:4C:F7:BD:E4:8D:66:1E:92:EA:8B:62
Certificate issuer:       /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial:       CB
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/5460E9C8FB2E11EFB488A95EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:19:27 +0000
ROA not before:           Tue 27 Jan 2026 05:28:44 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     146995
IP address blocks:        103.237.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
                          rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
        Validity
            Not Before: Jan 27 05:28:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4670f-d6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:58:ac:88:3b:77:75:32:17:c3:99:6a:1b:
                    b5:dc:4f:80:51:61:c2:69:f5:69:0e:4d:5a:07:1a:
                    b9:1d:8d:c3:12:01:ad:8e:fe:a7:01:e5:bd:55:34:
                    54:24:48:78:6f:1b:2b:0a:fa:59:55:af:10:ea:71:
                    c2:21:54:d9:d4:42:cc:6c:82:82:54:31:ca:41:c2:
                    9d:bc:24:57:d9:bd:4f:38:7d:46:62:d8:f9:2f:e4:
                    73:1b:ba:89:7e:94:23:b6:54:a1:b0:87:0f:c3:ce:
                    b7:ff:f9:75:bf:30:0f:5d:1a:0e:81:e4:8e:e4:10:
                    87:8f:2f:4d:e3:7c:7d:8a:e2:5b:8a:30:12:ae:36:
                    03:d0:62:57:4c:07:78:f8:98:fe:4e:e2:e7:68:1f:
                    72:c5:90:75:ea:41:ba:ad:e0:03:22:48:3c:e3:dc:
                    58:fe:e0:7d:17:6b:01:9a:8f:a4:25:28:4a:78:85:
                    0b:69:33:66:78:59:ba:ad:b0:cd:35:81:ca:a0:d8:
                    1e:20:c7:f2:9c:19:9a:31:3d:67:31:75:da:af:ec:
                    0f:26:aa:f7:50:71:b6:7a:7c:e6:91:72:40:6c:be:
                    50:8c:62:f8:b2:18:03:8b:d6:6b:b9:77:b8:db:e7:
                    c9:fc:44:af:dd:a1:7c:2f:14:6f:0e:48:05:9c:da:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:41:1A:56:37:90:02:1E:44:4C:F7:BD:E4:8D:66:1E:92:EA:8B:62
            X509v3 Authority Key Identifier:
                keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/5460E9C8FB2E11EFB488A95EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:19:27:d6:36:93:33:19:0e:96:72:5a:54:3f:22:16:15:65:
         0a:1f:ba:bf:78:ae:c5:09:76:aa:3c:43:b8:9f:0e:b9:3e:82:
         b8:9b:0d:0e:bf:8c:1f:94:62:23:e5:a2:e0:34:f2:09:25:e5:
         f2:b2:00:da:e0:a2:de:6a:42:c1:a7:ec:3c:9f:34:ad:1e:84:
         00:11:3f:0b:90:02:7c:11:6c:8e:71:31:84:38:36:e1:8e:2e:
         ea:a2:11:3a:8b:cb:3c:4f:45:3a:eb:ab:e7:35:0f:43:65:12:
         11:9b:da:f5:6e:a8:be:80:6e:41:06:7f:71:09:a6:5b:20:7d:
         cc:01:bc:44:f1:f5:40:cc:24:21:97:e1:d2:25:56:79:74:ae:
         f9:86:de:20:f6:58:b9:1f:25:9f:2e:06:03:a8:96:56:62:dc:
         8d:f1:5c:47:dc:1c:e1:d8:a7:7b:8c:28:72:0f:6f:c3:b1:dd:
         33:eb:8d:bd:19:5e:d2:5a:57:32:22:06:9e:7c:1c:b2:d5:6c:
         98:17:a0:e7:cf:50:d4:f0:35:1f:d8:14:a5:57:fc:3f:b2:f6:
         6c:68:87:ee:c2:c8:c5:1f:99:2e:97:d2:80:3b:2f:1d:7a:bf:
         c6:44:f5:5b:24:a0:ba:9e:16:88:ac:d8:e4:62:57:2d:bc:0b:
         dd:af:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:56 2026 by rpki-client