Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/642AEE6EB3FF11F0A569692DC4F9AE02.roa
File:                     642AEE6EB3FF11F0A569692DC4F9AE02.roa (raw, json)
Hash identifier:          UHPdn9BG8m1PhuGE+xBj8BNQRhz4kLJQXAW0qSBQ+5o=
Subject key identifier:   7A:09:E0:4B:E9:41:37:50:34:C0:87:47:30:A8:BD:77:3B:E0:20:0F
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       027B
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/642AEE6EB3FF11F0A569692DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:15:30 +0000
ROA not before:           Sat 07 Feb 2026 07:35:07 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24556
IP address blocks:        103.113.196.0/22 maxlen: 22
                          103.113.196.0/24 maxlen: 24
                          103.113.197.0/24 maxlen: 24
                          103.113.198.0/24 maxlen: 24
                          103.113.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: Feb  7 07:35:07 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a46622-517d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:5d:64:61:fd:d5:64:d8:fa:75:5e:fb:d7:
                    00:a6:28:22:a5:cd:96:3b:e5:a8:bb:1f:fe:07:bd:
                    72:66:54:9d:80:c8:34:5f:82:d1:2c:00:9c:01:35:
                    cd:70:b8:3b:3b:70:88:b6:95:d1:a2:3e:0f:a6:2f:
                    38:31:83:1c:0e:5f:51:87:9e:bd:b0:3b:c9:b3:ca:
                    92:90:69:09:1f:b6:9c:63:f6:86:14:dc:2e:01:15:
                    04:ac:f7:82:f1:2c:07:2f:d1:a6:d4:4e:53:c4:f2:
                    30:4d:ed:dc:b9:34:f2:59:a9:32:ea:46:a9:38:e6:
                    c4:3f:d9:8e:4f:eb:ca:26:59:b2:42:94:32:bb:14:
                    7b:87:0a:74:6c:32:fd:c8:8d:79:e1:ab:95:fe:ec:
                    9d:e3:a0:6c:32:cb:1b:a2:e8:25:54:6f:47:89:80:
                    6f:54:8c:bc:d4:52:38:2a:a8:40:d1:ed:31:3f:8f:
                    73:67:97:70:b7:fd:a8:e9:bf:f0:bc:b8:de:d9:7d:
                    73:6c:62:e8:51:5c:9d:bc:78:72:94:cd:52:24:0a:
                    b7:4b:06:5a:ad:8d:3f:09:e4:da:b0:01:08:da:63:
                    1e:19:56:34:da:f6:2c:37:60:87:58:ed:da:16:d2:
                    b3:fe:2b:c0:99:c5:9d:1a:c6:84:57:0e:b4:f2:ac:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:E0:4B:E9:41:37:50:34:C0:87:47:30:A8:BD:77:3B:E0:20:0F
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/642AEE6EB3FF11F0A569692DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:ad:40:b1:39:66:6a:61:83:18:0e:f0:52:15:32:35:ad:
         2c:c5:c5:04:c0:c1:16:41:16:02:5b:67:7f:c5:d2:2d:29:2f:
         59:46:e5:f1:1a:20:c1:24:97:56:6d:2a:47:ab:ff:ae:79:f7:
         d0:64:da:d0:a8:20:7a:77:e8:22:62:e4:89:05:22:e9:6f:0d:
         be:cb:94:5c:ab:d6:59:ea:9d:af:6d:27:76:54:29:23:eb:88:
         1d:2e:84:96:3e:52:94:73:0e:e0:39:df:bd:45:c7:2b:d9:d3:
         09:5f:f8:fa:11:d2:ae:8c:4e:33:3f:b2:b6:e0:9a:23:6e:e9:
         a2:fc:3c:03:ba:41:8b:86:9d:18:32:5a:9f:5e:c5:1e:05:a2:
         cf:19:02:2a:39:fa:c7:3c:99:0f:c9:bc:09:ac:e7:a1:5c:08:
         31:b6:60:7d:de:3d:94:91:21:11:87:e0:ed:c1:5e:87:86:28:
         b5:b6:1d:f1:32:fd:88:0f:62:c8:f8:d1:54:86:25:b2:6b:00:
         ad:06:e3:63:5d:f4:d5:6b:e8:46:84:84:57:00:f3:a3:7b:64:
         b4:3d:f6:45:7a:ae:d3:a9:2d:15:07:e5:ef:fc:b1:fa:0e:ab:
         38:06:c3:16:57:11:a0:eb:9e:a4:26:8f:d4:26:30:e2:54:58:
         04:27:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:20 2026 by rpki-client