Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/40EB2FD68C2511EDB64DB410C4F9AE02.roa
File:                     40EB2FD68C2511EDB64DB410C4F9AE02.roa (raw, json)
Hash identifier:          N1EuDA/H1b+aKfv07j358tw2r8s6Ntwxnui6Zw/IAWc=
Subject key identifier:   F5:DC:F8:C0:6C:A0:97:76:7B:0B:21:57:65:0F:0A:18:09:29:04:80
Certificate issuer:       /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
Certificate serial:       0260
Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/40EB2FD68C2511EDB64DB410C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:11:34 +0000
ROA not before:           Fri 13 Feb 2026 13:14:24 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        103.47.180.0/24 maxlen: 24
                          103.47.181.0/24 maxlen: 24
                          2001:df1:9cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl
                          rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913168E, serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
        Validity
            Not Before: Feb 13 13:14:24 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46535-0ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:57:e1:1b:90:4f:7b:47:65:ba:cd:64:e8:
                    e6:d8:40:dd:34:a4:1f:80:4c:33:b0:52:e4:6a:46:
                    f3:20:84:35:62:ab:c5:b2:91:28:6f:c7:95:f8:fc:
                    ab:4a:0e:6e:93:55:51:6b:c0:48:4d:03:b5:4b:49:
                    71:6e:99:70:77:ad:25:25:c4:76:f5:17:8a:42:e6:
                    57:e9:2f:b8:50:41:6e:9a:f0:78:15:26:66:f8:4c:
                    db:54:40:85:d0:d9:a3:bf:34:a3:03:5a:a5:80:13:
                    f1:29:16:64:4c:49:27:05:03:7f:b9:a0:cf:c1:12:
                    2d:4f:c8:9f:bc:0c:9f:f3:21:77:ad:f9:3d:92:23:
                    ae:f7:b9:97:0f:f9:b2:c3:db:21:a9:4c:f8:c6:d7:
                    0d:05:f7:cb:c2:05:47:62:1b:7f:18:5e:c7:95:15:
                    c1:09:9e:93:5b:d7:89:96:87:d2:ae:d0:e5:08:ba:
                    83:bb:88:ea:93:29:3f:df:c3:de:3b:4b:6f:61:22:
                    e6:1e:35:cb:a3:22:09:4f:e5:5c:62:fc:c7:e7:7d:
                    08:3b:0e:ed:a8:8c:c0:4e:1b:1a:eb:5b:0c:2d:2f:
                    49:fd:8b:12:56:94:64:3c:b0:bc:b6:5a:ea:e1:76:
                    82:a2:d5:55:54:aa:e7:5b:b9:6d:0c:45:c5:45:b9:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DC:F8:C0:6C:A0:97:76:7B:0B:21:57:65:0F:0A:18:09:29:04:80
            X509v3 Authority Key Identifier:
                keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/40EB2FD68C2511EDB64DB410C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.180.0/23
                IPv6:
                  2001:df1:9cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:6e:57:a1:3b:e5:fb:6e:3c:cb:a6:37:ef:55:a4:36:33:
         90:95:db:ec:c8:b4:f5:2a:51:11:a5:2f:71:cd:75:97:4f:fd:
         6b:36:59:90:ec:e7:da:6e:5f:6e:80:4b:4d:ac:3b:82:0d:e5:
         80:a3:d7:6a:a5:02:7d:f8:ef:6c:20:02:0c:41:64:24:44:10:
         b2:ae:c5:6d:59:92:67:7e:af:9f:b6:0a:b0:05:48:31:b5:09:
         02:9e:0d:d0:d6:36:f1:43:85:75:c4:46:c3:c2:b8:4b:4a:68:
         19:cd:2c:08:42:c7:50:50:da:5d:98:ac:37:6e:76:52:87:9b:
         22:c3:40:5b:28:ad:ec:bf:e2:d4:9e:33:b4:cd:af:af:d0:64:
         18:a9:fe:9a:94:cb:9b:4e:0d:72:af:68:8e:ea:a5:a8:8b:07:
         6d:15:7e:29:aa:47:a9:cc:59:a4:6d:8c:ab:d0:66:dc:36:b1:
         c7:c7:bf:aa:8c:f3:ff:d3:0b:e3:eb:ac:28:bf:ba:25:ff:6a:
         35:14:e1:80:45:b4:12:27:aa:99:19:16:64:72:87:83:76:27:
         14:c3:6e:00:26:29:07:04:24:c5:7e:0c:67:b8:57:f1:0c:f6:
         6b:e1:28:46:7d:bf:8b:f5:4c:59:c5:99:ce:48:35:45:d6:4f:
         44:de:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:33 2026 by rpki-client