Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/A18054D6CB9F11F088CB660AC4F9AE02.roa
File:                     A18054D6CB9F11F088CB660AC4F9AE02.roa (raw, json)
Hash identifier:          K1f/qaJuEbUdhfD0uMMWW5s85D2uyNgYsK07EHXQMGc=
Subject key identifier:   35:DC:68:A5:59:C3:72:A1:F9:4B:C5:70:A2:EB:64:89:A4:26:DD:D5
Certificate issuer:       /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial:       052D
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/A18054D6CB9F11F088CB660AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:37:53 +0000
ROA not before:           Fri 28 Nov 2025 22:25:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     148986
IP address blocks:        103.175.132.0/24 maxlen: 24
                          2001:df7:f780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
                          rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
        Validity
            Not Before: Nov 28 22:25:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46b61-c524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:a8:be:52:a3:81:02:6b:b8:6c:0c:7a:c9:
                    af:7d:36:73:2e:4f:53:14:37:dd:5c:43:cf:0a:9a:
                    63:81:14:02:25:7f:4c:a7:98:6c:4f:5c:a1:a7:6a:
                    83:ab:19:0f:46:61:58:b9:cb:2d:c1:c5:06:3c:ee:
                    19:34:3e:76:e2:a5:d4:ff:a7:be:95:91:8d:a5:db:
                    0f:51:b5:4e:68:fc:28:51:e1:03:d9:16:fb:ec:97:
                    53:40:ad:83:67:5f:36:4d:25:de:4f:a8:e3:ef:9e:
                    ad:46:04:4e:78:fe:b7:85:96:2b:2a:83:aa:0f:af:
                    42:4c:c6:97:17:24:3c:c8:c3:8d:31:55:0f:99:5c:
                    af:4c:85:ae:c6:17:35:ff:6c:60:03:9a:3f:92:23:
                    0b:61:fc:24:db:c9:c9:d8:48:b2:9a:8b:c0:f4:59:
                    21:4f:5e:89:b2:ae:96:42:12:d6:85:58:fc:c1:cf:
                    40:c8:8b:49:1a:08:1f:12:bb:82:da:24:2f:0b:a5:
                    bc:55:2e:8c:27:0e:45:cf:81:11:0e:1a:68:e7:6a:
                    b4:04:96:1c:fb:32:3f:b2:84:2d:92:01:02:d7:2e:
                    60:bd:0a:a8:86:89:d1:42:ef:eb:c2:4f:18:de:b4:
                    ce:d4:06:7c:24:b5:c2:66:c0:2a:11:1b:4e:ce:e2:
                    c3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DC:68:A5:59:C3:72:A1:F9:4B:C5:70:A2:EB:64:89:A4:26:DD:D5
            X509v3 Authority Key Identifier:
                keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/A18054D6CB9F11F088CB660AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.132.0/24
                IPv6:
                  2001:df7:f780::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:3b:34:1c:22:a8:45:06:93:a9:71:77:1f:0d:71:0d:7e:2a:
         4b:c3:95:86:55:a4:fb:9a:83:1f:3b:ec:6c:fb:04:18:bb:aa:
         f4:ca:61:bb:fb:47:c3:32:02:e1:c1:c7:b8:48:8d:39:74:ac:
         82:b4:f0:c5:69:03:d5:d4:cf:29:ac:a8:0f:5f:97:12:87:b9:
         75:aa:36:69:0d:16:b7:11:01:cc:3b:5b:f6:30:39:82:f4:ac:
         ba:30:24:3e:77:ff:8e:d6:06:6a:a3:9f:51:b3:59:ea:30:8e:
         c5:55:95:6d:1f:9f:2e:8e:79:42:83:c8:2e:83:d4:f6:bb:ad:
         99:a9:46:72:e0:dc:fa:fe:10:76:a9:dc:20:63:0c:56:98:44:
         13:08:7a:2f:ba:2e:6a:16:38:52:03:00:43:f2:08:bd:98:8c:
         c7:69:e6:3e:91:44:fc:09:22:80:88:22:32:75:67:b8:f3:53:
         20:c6:53:e9:24:92:87:d5:4b:8c:e6:1d:ba:bf:0f:02:94:2e:
         53:67:e5:75:04:6e:dd:e4:3e:a4:1b:0d:aa:a6:e8:6f:28:e1:
         47:66:68:22:b7:d6:9f:35:bd:bd:de:1c:a4:84:38:e6:38:b2:
         a0:c3:9e:66:ea:76:fb:b4:59:77:c5:be:98:6f:a7:f7:00:f5:
         69:c0:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:03 2026 by rpki-client