Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
File:                     B47C278021D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier:          7cB2NpUwnHlJv3jC+1znrL/Qm2Z6pF6ooyV5GUqjg6w=
Subject key identifier:   4B:DF:3B:8E:81:20:AE:12:EA:2F:A5:B0:32:53:9B:00:3B:78:68:86
Certificate issuer:       /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial:       103D
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:39:23 +0000
ROA not before:           Thu 26 Feb 2026 17:15:41 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138538
IP address blocks:        103.133.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
                          rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4157 (0x103d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
        Validity
            Not Before: Feb 26 17:15:41 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a479cb-7689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:cd:7d:01:50:94:d6:7c:ac:42:b0:53:d5:
                    10:56:ad:fc:58:ca:88:8e:0e:d8:e3:9a:17:6e:1c:
                    aa:bb:55:92:44:9d:6e:4f:89:cb:bd:a5:c8:6d:49:
                    85:8b:13:7b:66:7b:6a:9d:fb:14:31:f5:34:fa:00:
                    0a:78:f5:36:b9:7d:17:be:b8:38:32:69:48:a1:b9:
                    bc:c9:fe:e7:46:4e:68:47:db:da:82:db:47:41:5f:
                    23:f3:e9:36:4b:03:41:2f:36:4f:82:5e:9b:27:9c:
                    81:40:e8:7c:f8:b4:f7:5f:c0:b7:91:5f:d5:d0:d0:
                    72:b0:1d:a7:40:01:05:4e:f8:ce:78:1d:da:eb:9b:
                    39:15:31:37:50:b3:35:05:3d:0b:f8:db:3a:f1:e6:
                    0c:be:03:73:b9:2e:af:05:37:90:9e:3b:2d:dc:64:
                    25:c6:82:3c:c6:be:ed:0f:0f:8e:dc:2d:28:0d:cd:
                    15:91:71:41:fb:f1:31:66:53:0d:bc:61:9f:77:e8:
                    d3:c7:33:49:b2:f3:12:dd:e9:6c:39:9f:6d:01:51:
                    ac:14:75:8e:b9:d0:69:24:e1:8d:0b:1d:53:92:41:
                    4c:b5:ff:da:67:e7:1c:7c:1b:98:c2:8e:92:55:8b:
                    cc:8d:e7:30:40:ec:25:67:3c:93:a3:37:98:00:73:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:3B:8E:81:20:AE:12:EA:2F:A5:B0:32:53:9B:00:3B:78:68:86
            X509v3 Authority Key Identifier:
                keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:36:96:67:13:cf:dc:dc:29:c7:f5:1a:cd:c3:b3:80:e5:c5:
         db:b9:67:59:41:5f:25:d9:da:a3:6a:25:10:bd:bd:e5:9a:19:
         7a:a7:d6:41:fd:78:c6:0a:ab:95:3a:60:85:cf:f9:d0:0a:64:
         76:b4:4a:42:18:ee:e0:24:26:57:d8:21:8a:8a:93:00:4e:a4:
         ec:ba:3b:53:79:19:b8:05:14:56:d3:07:58:97:9d:c1:87:97:
         c9:a9:83:a3:a6:74:da:df:16:75:1b:4b:73:35:fc:44:89:d5:
         8e:39:ba:af:0f:5d:77:75:b3:d4:7a:3c:b3:f6:88:83:4b:96:
         8b:2d:0a:03:81:32:93:02:8f:de:3f:81:ee:de:92:27:f9:51:
         d5:a1:3e:75:08:4e:ae:84:db:97:68:50:77:7c:25:2c:13:aa:
         80:3d:7a:a0:36:07:fd:b7:34:6f:40:96:15:b5:23:71:61:3a:
         82:26:30:4f:71:e6:a3:7b:c8:04:af:fa:36:03:9f:31:b6:a7:
         b2:38:82:5a:92:05:1a:f1:e8:2a:5e:ce:ae:de:b0:78:df:5a:
         10:00:66:29:98:83:cd:1c:4c:af:77:38:ce:e0:9e:65:45:56:
         96:6a:eb:3a:fe:56:bd:b0:c0:4d:75:15:84:ba:1f:70:0b:8a:
         8a:02:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:56 2026 by rpki-client