Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/26C760F002EA11F0836EF72FC4F9AE02.roa
File:                     26C760F002EA11F0836EF72FC4F9AE02.roa (raw, json)
Hash identifier:          wrQZ3i6auQE6hasl5pdOo4dzJGXDbVakH3Xi8U4i1wQ=
Subject key identifier:   AC:6C:E8:6C:E0:90:F8:A4:03:1A:A4:8C:8F:4F:3A:68:4C:E8:E7:E9
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       01D6
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/26C760F002EA11F0836EF72FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:20:50 +0000
ROA not before:           Fri 17 Oct 2025 06:40:07 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151812
IP address blocks:        103.127.222.0/23 maxlen: 23
                          103.127.222.0/24 maxlen: 24
                          103.127.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: Oct 17 06:40:07 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a41302-eb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:94:13:6f:71:db:f4:17:d5:66:1b:5d:26:fa:
                    12:48:a1:2d:12:00:ee:76:e3:f1:7a:0a:b3:60:45:
                    32:7b:6d:f0:b2:ed:a5:d4:d6:35:0e:f9:16:66:3b:
                    6e:42:23:a0:dc:d5:d8:25:7d:81:64:ce:89:30:fc:
                    fa:de:5d:af:5e:f8:30:77:9f:5b:97:a4:b0:6b:24:
                    44:dc:7a:74:a2:9a:dd:4b:8a:1b:a5:df:46:60:ab:
                    ac:0d:37:4d:74:a1:df:c2:46:34:85:ad:d7:af:be:
                    92:9f:02:16:dc:a5:1a:66:95:1d:f7:78:20:80:a5:
                    aa:02:bc:20:4c:04:08:c2:09:e7:3a:7e:19:c5:45:
                    8b:9c:8f:fe:d4:23:4d:78:dd:67:05:0d:0c:cd:b0:
                    34:a8:1a:bf:c0:16:2e:13:9f:b0:32:56:27:22:9b:
                    a8:a3:29:11:a3:fe:b3:67:26:81:f0:17:3d:6e:6d:
                    3f:d1:88:04:cf:75:c3:73:b7:b8:90:81:f0:44:f5:
                    3e:51:b5:65:30:48:25:3a:0d:4c:b6:d3:6e:8e:b4:
                    ee:0b:14:dd:37:ce:6b:ad:c5:0a:48:44:80:aa:40:
                    e9:85:e1:94:01:06:a5:20:5b:6c:91:ac:77:e5:ba:
                    b1:8f:4d:4b:27:eb:ac:98:41:00:83:d9:ee:19:91:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6C:E8:6C:E0:90:F8:A4:03:1A:A4:8C:8F:4F:3A:68:4C:E8:E7:E9
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/26C760F002EA11F0836EF72FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:cf:b1:de:c2:75:5b:31:24:fa:51:bb:cd:f1:b9:3c:d8:16:
         bd:88:fc:46:b7:c4:96:70:89:31:94:f8:2f:3d:44:f2:0f:df:
         b3:e5:6e:3f:89:c7:cc:dd:af:c2:00:88:29:e0:0b:b7:92:e3:
         b4:52:37:32:ae:b8:09:b6:67:bd:2c:1d:04:6d:24:eb:46:e9:
         c6:96:d3:f5:06:47:08:77:f8:a6:10:79:76:ec:0b:7e:2c:42:
         7c:c8:0e:6c:0e:8f:fc:c7:9b:25:cc:5a:62:63:2e:da:b3:d5:
         09:1d:a2:98:74:53:28:a9:58:4f:c9:83:ea:17:76:dc:63:13:
         5b:c5:b4:da:5d:29:4f:5b:62:90:cc:0d:2e:0d:0d:e0:e7:c8:
         98:58:4b:70:b1:ba:c8:c0:ea:66:92:19:04:80:08:58:68:9c:
         dd:80:87:d3:45:f1:c8:16:34:a5:d1:8e:31:a9:63:5a:e3:03:
         63:fd:0f:3a:69:89:65:b3:49:46:e3:95:e6:99:d9:45:7f:c2:
         5f:67:34:97:cf:a7:69:45:71:58:d6:8f:c5:91:c7:93:76:f3:
         0f:46:82:5f:45:f3:de:60:90:7b:c8:be:81:b1:c2:3c:b5:00:
         91:2c:ae:c8:e7:94:2a:72:0f:25:bd:76:e2:14:6c:a4:b7:06:
         7e:92:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:36 2026 by rpki-client