Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/504E3B04911911E9BEF5F94EC4F9AE02.roa
File:                     504E3B04911911E9BEF5F94EC4F9AE02.roa (raw, json)
Hash identifier:          M1A1gqpcdIGYnPDiLxisuya740YKrbg3ZbEtcDu2Lqw=
Subject key identifier:   5C:77:A7:1B:AE:5B:F1:77:FA:F3:B8:E2:78:FC:C8:56:93:1E:F6:13
Certificate issuer:       /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial:       0F35
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/504E3B04911911E9BEF5F94EC4F9AE02.roa
Signing time:             Fri 20 Feb 2026 18:15:10 +0000
ROA not before:           Fri 20 Feb 2026 18:15:10 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     131447
IP address blocks:        103.208.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
                          rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3893 (0xf35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
        Validity
            Not Before: Feb 20 18:15:10 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6998a4ae-4d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ee:5a:2c:65:63:c6:9b:ab:5b:f2:3a:21:15:
                    06:4a:74:8c:2d:38:9c:5f:eb:8e:d6:6c:12:e8:ea:
                    14:ed:6a:d3:58:c2:d9:d0:19:27:fc:b0:33:26:5a:
                    87:fa:dc:53:13:a3:39:87:e3:61:9a:86:d1:a8:58:
                    48:7b:06:cd:e1:9c:ab:ad:2f:c7:c4:23:4f:87:8c:
                    08:92:d6:63:4c:39:a0:6e:28:fd:8e:dd:89:c5:ee:
                    67:d2:1f:ed:0e:4e:9c:94:27:5d:25:24:ef:32:26:
                    b2:66:0f:7f:07:3a:9d:d9:e8:2c:49:1f:6b:e4:0d:
                    bc:d7:da:be:78:05:c9:6d:22:63:be:c6:d6:42:51:
                    3c:99:03:66:a9:94:63:95:e2:83:e1:4a:a9:b2:b0:
                    1f:61:6c:aa:02:49:c6:0e:37:ff:4d:9c:a6:63:63:
                    65:f3:5b:6a:a8:ce:d2:4a:e0:26:75:06:98:9d:0f:
                    58:8e:81:96:cd:bb:e8:c7:df:3b:4b:70:e7:75:6b:
                    10:70:2f:8b:d7:a4:dd:d7:d4:00:81:aa:6d:ac:82:
                    dd:a8:83:c8:79:b8:0e:b3:13:be:ef:c9:7e:4f:20:
                    5a:f1:bb:fb:18:8c:17:d1:42:3b:26:8f:e6:35:fc:
                    ac:a7:69:52:d7:d0:bb:a2:d4:9a:85:cf:3b:45:a0:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:77:A7:1B:AE:5B:F1:77:FA:F3:B8:E2:78:FC:C8:56:93:1E:F6:13
            X509v3 Authority Key Identifier:
                keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/504E3B04911911E9BEF5F94EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:f9:f6:e8:26:7c:96:29:49:28:d1:dc:46:0c:b6:cf:89:47:
         d1:e7:ee:d2:42:ec:f9:d4:db:b8:66:d3:07:1d:94:51:7a:1d:
         02:33:80:53:a7:33:a7:c8:d5:d1:de:7e:28:35:1d:c9:d5:b9:
         61:57:e0:53:79:e5:ff:9c:61:88:82:5d:b0:3f:2e:27:bd:12:
         fb:48:38:8c:e4:8a:90:62:28:c7:4f:c8:e3:a1:e7:b3:a8:36:
         8b:eb:01:96:3d:76:c0:18:1c:97:f3:f9:7d:d0:23:8c:dc:e7:
         35:07:8d:07:8c:bd:9e:4a:d0:a5:9d:2e:10:c6:bf:ce:f4:44:
         2a:c0:20:4f:f6:a7:1e:2a:14:de:05:09:75:be:f3:ed:89:39:
         6e:dd:f2:82:e8:da:6b:4a:3b:7a:36:29:13:18:8a:0d:d8:6d:
         96:3d:61:71:e5:46:85:30:e0:00:01:15:09:b1:56:51:01:68:
         0e:c5:64:37:73:0d:96:68:df:ef:99:c0:c6:5c:94:5e:5b:a7:
         9d:61:e6:73:02:24:ed:a6:14:94:72:af:4b:19:8d:06:7b:c1:
         c8:0e:b5:66:37:82:e5:62:7f:16:39:78:f9:c5:26:bb:23:f3:
         a2:b8:00:b9:1a:cd:2d:bb:8a:be:d4:8f:c4:61:48:d6:5b:44:
         fe:3f:a6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:40 2026 by rpki-client