Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/21980772889311F09BCDF026C4F9AE02.roa
File:                     21980772889311F09BCDF026C4F9AE02.roa (raw, json)
Hash identifier:          7Sm1JatgpXAermztWSIArPQJA32zizmhEoRTzDBQ5FE=
Subject key identifier:   50:01:42:B6:85:C2:75:05:2B:72:19:C4:D5:0C:E0:13:E1:5B:B4:FA
Certificate issuer:       /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Certificate serial:       0219
Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/21980772889311F09BCDF026C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:00:00 +0000
ROA not before:           Wed 03 Sep 2025 06:56:35 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137497
IP address blocks:        103.110.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
                          rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
        Validity
            Not Before: Sep  3 06:56:35 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a48cb0-52e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:9f:94:04:33:f4:6c:a4:13:7d:5e:96:f5:
                    f1:9d:f9:81:f6:1e:9e:41:89:b2:c1:92:89:44:1c:
                    66:59:f7:52:a6:74:73:43:b5:20:4f:21:d8:2a:f5:
                    cc:b9:4f:a6:62:7e:4c:33:65:22:e9:91:6b:fc:42:
                    62:ac:7b:f7:3a:42:f9:0b:68:89:21:b7:8a:a2:08:
                    a2:f4:a9:21:d1:0d:a0:3d:4e:94:1d:7b:b9:67:c6:
                    b4:08:76:b5:51:cf:e8:53:8f:72:47:5f:ff:87:c6:
                    72:ed:87:d6:d8:f6:53:55:bf:29:d8:71:78:db:da:
                    3b:07:8f:9d:5f:c2:c6:00:24:31:2a:0b:f2:28:be:
                    f4:ab:9c:9b:e4:de:6a:e3:d4:d4:a7:eb:d2:d8:a4:
                    56:e6:f3:f4:d0:9e:f3:f8:c9:52:71:65:5f:9b:53:
                    88:fe:c4:ee:75:57:56:b5:0a:c0:08:57:b7:29:57:
                    3c:af:b9:53:6c:25:de:23:a6:af:d8:39:f0:3e:90:
                    3c:4a:37:10:3a:b4:df:5f:32:f5:0a:1b:59:e1:1d:
                    0f:b1:cb:b7:dc:22:60:6f:fe:21:bb:d3:0b:52:5b:
                    13:ea:69:00:68:9b:3e:61:2e:dd:3d:0d:07:7a:54:
                    5d:9c:d7:dc:ab:0b:ca:f8:0f:39:3c:76:db:d2:19:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:01:42:B6:85:C2:75:05:2B:72:19:C4:D5:0C:E0:13:E1:5B:B4:FA
            X509v3 Authority Key Identifier:
                keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/21980772889311F09BCDF026C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:83:00:0f:22:5f:26:8e:95:5b:2e:7f:2b:bb:c8:9d:41:
         ab:7d:da:93:52:f6:ac:46:7a:e2:8e:fc:47:73:19:4b:14:a6:
         f4:82:a6:45:c2:ad:27:9a:c3:4a:fd:72:f4:ee:73:c8:59:01:
         dc:6c:a6:9e:e9:ee:37:8b:a4:5c:12:2f:61:2a:d7:8b:e4:3a:
         df:57:6b:08:a4:0a:70:92:81:f8:a4:a2:1b:13:06:2b:4f:7b:
         39:dc:c0:cf:6e:32:ae:d7:a7:da:9b:6d:6f:35:1b:54:8a:f2:
         68:61:cf:a0:77:73:12:b4:a0:d5:d4:cc:4a:66:af:f0:65:3e:
         de:b8:12:ae:d4:b2:5b:01:63:a6:3b:f2:86:81:d8:07:1a:f2:
         00:2f:71:36:b7:ae:e9:0b:11:c0:d5:93:7d:4f:64:33:56:a8:
         a7:a6:25:f0:d4:e1:2b:2e:11:22:17:e5:34:36:39:69:ca:63:
         f5:78:29:6c:17:59:b7:75:21:19:72:06:33:1e:f6:bd:7d:62:
         df:93:a9:5c:ef:ae:90:b4:48:89:c2:2e:d7:4d:76:e2:f0:2e:
         f8:50:e7:42:69:8b:c1:d1:e6:bd:c0:cc:1a:e7:c9:36:ee:42:
         41:de:fb:a9:48:bf:ce:0a:94:56:08:d1:93:ee:1d:a8:de:15:
         7d:46:5b:f3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD
NDMxQzU4MDIwHhcNMjUwOTAzMDY1NjM1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGNiMC01MmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo+WflAQz9GykE31elvXxnfmB9h6eQYmywZKJRBxmWfdSpnRzQ7UgTyHYKvXM
uU+mYn5MM2Ui6ZFr/EJirHv3OkL5C2iJIbeKogii9Kkh0Q2gPU6UHXu5Z8a0CHa1
Uc/oU49yR1//h8Zy7YfW2PZTVb8p2HF429o7B4+dX8LGACQxKgvyKL70q5yb5N5q
49TUp+vS2KRW5vP00J7z+MlScWVfm1OI/sTudVdWtQrACFe3KVc8r7lTbCXeI6av
2DnwPpA8SjcQOrTfXzL1ChtZ4R0Pscu33CJgb/4hu9MLUlsT6mkAaJs+YS7dPQ0H
elRdnNfcqwvK+A85PHbb0hk4ZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFABQraF
wnUFK3IZxNUM4BPhW7T6MB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx
OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUY1QjcvNzFFN0EyMjI1MTk1MTFFQTg0NjRCQTc4QzRGOUFFMDIvMjE5ODA3NzI4
ODkzMTFGMDlCQ0RGMDI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ26kMA0GCSqGSIb3DQEBCwUAA4IBAQAabIMADyJfJo6VWy5/K7vI
nUGrfdqTUvasRnrijvxHcxlLFKb0gqZFwq0nmsNK/XL07nPIWQHcbKae6e43i6Rc
Ei9hKteL5DrfV2sIpApwkoH4pKIbEwYrT3s53MDPbjKu16fam21vNRtUivJoYc+g
d3MStKDV1MxKZq/wZT7euBKu1LJbAWOmO/KGgdgHGvIAL3E2t67pCxHA1ZN9T2Qz
VqinpiXw1OErLhEiF+U0NjlpymP1eClsF1m3dSEZcgYzHva9fWLfk6lc766QtEiJ
wi7XTXbi8C74UOdCaYvB0ea9wMwa58k27kJB3vupSL/OCpRWCNGT7h2o3hV9Rlvz
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:09 2026 by rpki-client