Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/48E4C546941F11EE8517B26FC4F9AE02.roa
File:                     48E4C546941F11EE8517B26FC4F9AE02.roa (raw, json)
Hash identifier:          noOL5jEzK8jha8iyDkTIQg6FX0160KexYI9kLW2+DMs=
Subject key identifier:   5F:7D:3D:3C:7F:40:47:71:6A:1E:17:D9:E7:D3:1E:13:A1:CB:B8:99
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       0960
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/48E4C546941F11EE8517B26FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:32:40 +0000
ROA not before:           Sat 12 Jul 2025 21:00:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.66.180.0/24 maxlen: 24
                          103.66.181.0/24 maxlen: 24
                          103.66.182.0/24 maxlen: 24
                          103.66.183.0/24 maxlen: 24
                          103.244.112.0/24 maxlen: 24
                          103.244.113.0/24 maxlen: 24
                          103.244.114.0/24 maxlen: 24
                          103.244.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2400 (0x960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Jul 12 21:00:53 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46a27-37ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:4b:c0:94:3c:cf:c6:55:07:44:38:56:bf:
                    a5:a2:2f:88:a1:f3:01:37:7c:c7:03:00:68:75:37:
                    a2:8a:b8:3c:25:d9:94:63:f6:be:77:70:e1:0a:07:
                    5e:65:e5:d1:cb:8e:35:96:90:b7:75:26:4f:d2:3d:
                    ca:1a:e7:81:d8:96:26:94:df:f9:48:1e:19:5c:f2:
                    32:e8:ec:bf:f8:2b:e7:d6:6b:f1:52:9e:ef:21:67:
                    4b:ce:bf:0b:45:c0:74:1b:07:9b:0a:cb:11:27:28:
                    fa:8b:dc:ff:da:6c:4c:5d:ad:90:b9:26:eb:5b:e6:
                    05:78:d9:9e:33:02:ac:d5:e0:9e:fa:4c:b2:43:49:
                    fc:f6:0f:ce:2c:99:83:c9:aa:6f:79:4f:19:b5:58:
                    76:db:5f:cd:99:25:b8:e4:f9:41:be:1a:3f:cf:e1:
                    01:9a:cb:4d:26:90:05:75:c8:38:4f:af:ef:d3:db:
                    19:4f:5c:3d:c6:55:47:e9:ae:d4:08:e5:c6:a6:8c:
                    e6:58:a6:92:5f:87:ef:1a:65:81:c0:a9:5b:e0:63:
                    fe:1a:e7:6c:31:43:07:05:12:71:9e:4d:8c:1a:03:
                    74:9c:f2:60:fd:d1:e0:da:3c:2c:fd:95:c9:2b:ce:
                    bd:e5:f9:0a:1e:10:96:cd:03:eb:98:f3:0f:2b:c1:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7D:3D:3C:7F:40:47:71:6A:1E:17:D9:E7:D3:1E:13:A1:CB:B8:99
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/48E4C546941F11EE8517B26FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.180.0/22
                  103.244.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:75:37:e9:cc:4d:42:71:b2:ad:16:47:ab:6c:5d:df:61:9f:
         cc:cf:56:08:62:68:30:57:cb:1b:35:42:1f:a9:cd:7c:04:8e:
         f0:4e:7e:4b:c3:c5:99:19:10:e8:cc:2d:c2:3d:1a:4c:01:f7:
         e2:55:3b:ad:63:cd:f8:97:36:cc:3b:0f:09:29:52:68:52:23:
         64:40:de:4f:c0:e4:3b:70:f3:86:0f:22:c4:8e:28:76:48:8c:
         44:cd:c5:1b:5d:3d:ae:48:51:af:ae:8d:7c:e3:ff:25:94:c6:
         68:2a:60:1e:9d:68:8e:7d:11:23:f7:5b:6d:92:18:f5:93:be:
         f4:49:3b:a4:a0:73:a7:1a:cc:fd:c6:b0:83:c9:6a:cd:b1:a8:
         bd:e2:1d:90:23:ef:5c:6c:66:31:df:2e:b5:d7:78:28:f5:45:
         5c:e0:bb:7d:b3:8d:a5:6f:81:00:2c:1b:ee:47:06:a5:7f:82:
         e4:ae:a1:f0:57:a9:39:d5:6a:c4:ac:1a:49:1f:a2:58:50:21:
         18:4e:5a:4e:8b:a1:d8:4a:3f:6f:34:3c:b0:e4:22:ee:a3:c4:
         1f:bc:5b:ef:a4:95:8d:19:3b:6f:b9:1b:d3:1b:76:b7:46:e0:
         d0:7f:d8:f9:d5:2c:be:39:7b:f2:85:c7:80:84:ff:c3:67:9a:
         eb:49:3c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:24 2026 by rpki-client