Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/DF49E576A61711ED887EC04CC4F9AE02.roa
File:                     DF49E576A61711ED887EC04CC4F9AE02.roa (raw, json)
Hash identifier:          QBNiuWqsSFvTii1XjINxNAIsFqpiHDWIk0XlWF5qx7w=
Subject key identifier:   5E:EB:C8:AC:EC:D0:3A:DA:44:62:39:9E:49:F5:C5:F9:BF:44:F6:B5
Certificate issuer:       /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial:       0251
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/DF49E576A61711ED887EC04CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:58:04 +0000
ROA not before:           Fri 13 Feb 2026 01:22:12 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142127
IP address blocks:        103.83.30.0/24 maxlen: 24
                          103.83.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
                          rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914334E, serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
        Validity
            Not Before: Feb 13 01:22:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a437dc-16b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:c6:ce:e9:76:07:d8:79:39:94:34:f8:6c:
                    37:0f:28:ec:49:c0:44:f1:85:f0:b6:0e:37:c3:dd:
                    9a:1f:dc:ec:eb:8a:81:b3:58:78:59:8c:f9:9e:06:
                    aa:58:50:64:1d:59:cb:03:07:b8:f8:ba:11:45:c2:
                    7f:13:98:40:b6:70:42:b7:01:f9:d0:3b:74:18:c8:
                    76:53:82:c4:8e:73:33:56:5e:a3:a5:f1:d0:86:ef:
                    b4:94:db:ff:3a:67:f3:16:dd:ca:70:46:cf:a3:1d:
                    78:92:ba:a4:d6:79:8d:bb:70:9b:5d:95:a5:52:a1:
                    c3:58:19:39:08:91:98:a8:7d:60:35:c5:92:ab:ab:
                    86:a0:8b:0a:ce:7d:bd:f4:57:a6:8a:a6:8f:df:d0:
                    6f:60:77:a1:b6:95:94:d2:ab:6b:cd:1f:6d:ea:9d:
                    ef:0c:10:36:a7:48:52:48:d7:35:f9:3d:bf:a1:ee:
                    70:21:cb:ea:6b:f9:47:a2:6a:fa:ab:85:96:66:12:
                    2d:36:74:71:a6:5b:90:93:75:4c:ff:86:50:e8:8f:
                    4a:de:66:d6:24:cd:f9:ff:38:ea:99:2f:24:69:23:
                    38:31:bb:00:61:05:d1:57:55:e5:3d:c8:89:17:65:
                    6d:50:a5:68:a0:b4:fd:e6:a6:40:00:7c:f1:ea:d5:
                    f2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EB:C8:AC:EC:D0:3A:DA:44:62:39:9E:49:F5:C5:F9:BF:44:F6:B5
            X509v3 Authority Key Identifier:
                keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/DF49E576A61711ED887EC04CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:5c:fa:ff:48:73:07:7a:39:4a:84:2c:d7:0a:ef:9a:cb:73:
         ea:10:ee:e6:ab:f1:f1:c9:b5:db:b1:a7:a7:15:77:b0:d6:6b:
         7b:21:12:da:a5:40:8c:32:77:ed:44:01:77:7e:71:3f:8b:a5:
         33:0a:2a:7c:18:28:fd:32:76:dd:d5:7f:ca:ef:8e:48:7c:92:
         03:24:fc:2e:33:01:6d:43:17:5a:1f:29:7b:65:dc:12:56:3b:
         13:55:4d:a8:a8:52:4f:9e:3a:72:87:3f:19:80:4a:05:24:c6:
         d0:d1:6c:e9:7d:e1:22:66:13:9e:09:ac:49:39:d1:6b:cb:33:
         09:05:a2:b0:11:2f:f6:51:81:aa:8f:34:4c:e2:ba:cc:c2:5e:
         d5:f9:1c:cd:63:3a:8c:68:15:14:f8:e0:44:21:12:3c:3d:b8:
         ac:30:a1:fd:4b:ee:ea:4d:4f:88:f0:1e:09:9b:2c:c6:73:8d:
         76:f7:fd:fa:b1:15:b1:07:63:67:19:89:28:0d:28:f9:be:d4:
         c9:aa:1b:03:87:8a:58:2b:59:4c:55:e3:be:6f:1c:2c:48:33:
         69:7b:d8:44:00:d2:a1:95:75:3b:1e:40:35:b3:22:cc:4d:99:
         a7:cc:10:bf:76:7d:5a:6f:37:36:d7:c7:83:01:1f:9d:62:c2:
         10:3d:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:36 2026 by rpki-client