Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
File:                     D4B094F697E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier:          EUI2XwNp+FiRnvmi+/unwfEimcQrowsbqpJ7IeyqfaY=
Subject key identifier:   13:11:10:41:1E:9D:DE:19:2B:BF:BA:1A:96:5F:FB:14:81:27:27:13
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26E2
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:40:19 +0000
ROA not before:           Wed 31 Dec 2025 18:14:45 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     4294966666
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9954 (0x26e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Dec 31 18:14:45 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a48813-1b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:14:b8:0c:48:f9:02:07:c7:bc:65:23:a9:
                    88:fa:9c:92:8b:b2:6a:a2:72:ae:30:49:62:77:a9:
                    c5:ef:25:87:ab:a6:30:1a:e2:a8:bb:19:6f:08:5c:
                    a0:37:3f:ab:fa:c8:85:e2:56:28:6c:19:14:f4:1f:
                    bf:ba:ba:41:4a:47:b7:86:6a:d2:85:79:71:83:dd:
                    a5:37:7f:c2:d6:e5:a0:b7:95:6d:63:ce:d4:22:de:
                    7a:f1:77:27:d6:f8:4a:d7:6d:ca:a3:57:bc:e2:c9:
                    46:71:a1:89:46:4c:23:f8:59:4b:d3:4e:05:75:97:
                    c0:43:89:52:1c:13:12:77:ec:da:dd:c8:8f:85:10:
                    be:54:81:bc:4b:0b:da:31:fb:47:8b:e9:98:be:53:
                    11:e9:52:27:87:60:64:b1:dd:94:4a:c6:fe:50:41:
                    43:69:7d:51:66:d8:c9:d2:24:56:4a:97:7f:be:02:
                    a4:18:b6:e0:e5:49:eb:38:73:8f:c0:b8:ab:93:68:
                    f6:08:c6:df:e5:44:ad:cc:ff:c1:9b:ae:04:09:e9:
                    84:86:92:95:8b:c9:e9:3a:97:4d:74:7a:67:3a:89:
                    56:01:36:5e:9a:14:00:7a:51:5c:ca:8d:aa:37:0b:
                    79:ee:b1:7f:9f:4c:b8:4d:a5:ed:d9:b7:64:18:d9:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:11:10:41:1E:9D:DE:19:2B:BF:BA:1A:96:5F:FB:14:81:27:27:13
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:6b:6d:ab:f0:e7:0e:ef:a4:f4:8b:bc:51:f7:01:4f:cb:fa:
         fa:25:37:03:eb:2c:18:5f:a2:e8:79:e0:79:ec:e2:bf:91:39:
         4b:67:67:f1:b8:e8:e4:e5:b8:64:a3:8d:6b:de:cf:34:16:d7:
         7a:08:e6:89:b8:f8:1f:27:ac:e7:69:48:30:ad:5b:2c:b4:f9:
         33:dd:a5:1d:ab:83:41:55:61:ff:62:1b:f6:fa:8f:86:fb:84:
         8e:a2:03:41:f7:53:a0:35:ce:4f:e9:86:27:66:a4:60:c4:1c:
         7e:88:7d:5c:fe:a6:1f:fc:96:f5:4f:54:37:75:40:5f:79:25:
         d2:95:59:f2:7f:e6:bd:0e:36:8e:fa:76:b2:28:b0:a7:9f:82:
         bc:ec:db:d3:5b:88:cd:61:74:81:63:34:b3:6f:53:53:62:01:
         8a:09:1f:25:fd:a9:b1:89:fb:b8:b8:c0:0f:2b:51:e1:60:bb:
         94:dd:88:54:5e:fc:4e:06:a0:ab:59:20:fe:ad:a9:6a:5e:05:
         4f:42:5c:9f:92:99:cc:b1:b6:37:77:c9:f7:fa:86:f7:3f:e1:
         4d:9d:60:29:f2:d0:83:30:e4:d9:34:78:49:3e:2e:e5:6c:b8:
         b1:64:36:24:17:3e:0a:ab:59:93:93:ff:de:a1:1c:15:15:29:
         6e:0a:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:11 2026 by rpki-client