Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
File:                     ADBB651E043411ED9F02B325C4F9AE02.roa (raw, json)
Hash identifier:          I+A6jU5dzLuzTjRDJLWlUAhXYmfB0fXHWslyFxviwpw=
Subject key identifier:   60:A4:78:1B:0E:15:56:B1:64:4B:8F:C3:6B:01:E2:1F:20:40:DA:1B
Certificate issuer:       /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial:       0434
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:03:10 +0000
ROA not before:           Sun 01 Mar 2026 01:22:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142403
IP address blocks:        103.146.158.0/24 maxlen: 24
                          103.146.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
                          rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
        Validity
            Not Before: Mar  1 01:22:27 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4552e-f87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:19:2a:77:9a:0b:28:c4:ed:79:cb:a3:8c:
                    04:f1:90:47:f1:79:31:cc:42:68:3c:61:d0:67:d3:
                    5b:8e:5a:83:6a:70:84:06:f0:1d:ae:04:c6:3f:52:
                    73:0d:f4:45:f0:b2:bc:9d:71:e8:dc:ad:27:92:50:
                    26:be:e8:8c:5d:9a:86:aa:ca:09:5a:a9:9a:ca:0b:
                    7c:c8:37:b1:e1:85:d9:59:6f:3a:d9:4b:79:c3:8a:
                    07:3e:29:99:76:40:82:10:f9:0f:7e:45:d3:12:4d:
                    da:84:b7:e0:c0:90:a6:82:1c:c6:1c:5a:56:49:ac:
                    34:6c:cb:e4:a7:5f:76:51:2f:20:c7:c7:5a:aa:40:
                    7a:d6:d4:b7:d0:df:59:76:c9:8f:8e:46:47:c4:26:
                    de:04:8e:84:97:87:4d:ca:1a:3b:77:78:a5:c7:0e:
                    a8:c1:8f:d4:e4:0f:5a:89:1a:8d:cd:5f:df:67:ce:
                    17:ca:b0:7d:bf:01:03:f2:7d:77:53:83:17:91:53:
                    c6:fc:db:36:12:a1:5d:a5:cd:2f:a5:50:8e:77:4a:
                    e0:c5:3b:0e:53:a9:d2:e6:83:79:91:f8:d3:d0:95:
                    8f:61:0b:f9:65:e9:26:3b:a2:35:90:33:cf:bb:71:
                    a4:63:d0:97:94:e9:b5:25:54:b2:ba:c0:45:9f:6d:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A4:78:1B:0E:15:56:B1:64:4B:8F:C3:6B:01:E2:1F:20:40:DA:1B
            X509v3 Authority Key Identifier:
                keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:83:17:35:b1:d7:29:63:5a:d3:a8:aa:34:84:39:de:47:bf:
         f7:dd:15:33:d2:09:c8:17:c4:ec:29:b8:2b:b3:f9:08:ae:74:
         55:47:0a:97:7d:36:be:72:97:71:88:22:c7:68:8e:81:9e:6e:
         a3:21:68:4d:57:52:63:51:c4:ad:33:c3:b3:e7:5d:35:b8:bc:
         95:1f:e1:36:b2:06:33:8c:68:41:98:34:6a:da:b7:06:9e:48:
         2e:22:50:dd:85:f1:91:76:ee:fb:dd:ee:e5:b6:2e:6d:cb:38:
         0d:ae:10:78:b6:06:8c:17:28:00:a7:df:92:e0:1c:a4:17:6e:
         9c:08:9a:bc:0f:57:7d:87:f2:0f:8d:e0:5a:ee:22:86:c9:d4:
         12:80:ea:6d:6a:b8:2f:78:f4:28:c0:b5:fd:e1:e6:cb:b2:15:
         9e:51:98:53:50:bd:6e:be:c7:74:ba:46:8c:20:be:5a:15:23:
         49:2c:f4:04:a3:be:cc:11:88:da:f7:12:11:3d:00:86:9a:4e:
         63:4a:c3:dc:82:16:21:0f:e2:9a:84:61:ca:7b:c6:19:24:56:
         d1:48:52:41:2d:75:a6:12:01:44:79:30:8a:ba:02:c3:cc:4e:
         6a:a7:2e:96:67:01:51:12:49:d3:d6:e0:ea:f3:e8:c6:62:98:
         34:3e:87:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:45 2026 by rpki-client