Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/071BCFF849D011EF9F8A8969C4F9AE02.roa
File:                     071BCFF849D011EF9F8A8969C4F9AE02.roa (raw, json)
Hash identifier:          LUEbYn84fVvrHY0NhDyv3oKPnEtIhPDNRdpxfrb59rQ=
Subject key identifier:   A4:BD:94:AC:6A:FD:9B:B4:25:EF:D0:F4:70:49:E3:88:86:DA:D6:AF
Certificate issuer:       /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Certificate serial:       01DF
Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/071BCFF849D011EF9F8A8969C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:19:43 +0000
ROA not before:           Mon 09 Feb 2026 03:22:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139900
IP address blocks:        103.146.206.0/24 maxlen: 24
                          103.146.207.0/24 maxlen: 24
                          2400:b020::/33 maxlen: 33
                          2400:b020:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
                          rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
        Validity
            Not Before: Feb  9 03:22:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a412bf-6c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:27:ee:51:b9:04:77:47:ce:d3:78:fd:49:
                    93:c4:a3:25:9e:fb:95:01:9c:4e:50:7e:b0:5b:75:
                    d4:f8:e4:d9:99:a7:28:b9:89:34:16:dd:ec:48:85:
                    8a:81:7e:04:5d:92:ad:e2:53:09:bd:2a:92:ad:c0:
                    25:47:b3:7f:ad:9a:ae:fb:ce:0b:e4:05:e5:29:05:
                    5e:a8:59:d9:47:6c:0c:59:30:82:dc:3b:c2:d4:d2:
                    0b:c0:7f:bf:69:6d:f7:c5:c3:31:d7:54:00:33:1e:
                    78:68:e0:dd:a9:95:de:30:13:a3:e0:c1:85:c8:bf:
                    1d:bc:df:dd:14:da:56:53:93:fd:48:a5:e8:f4:bf:
                    0f:41:b7:a1:cb:9d:01:ae:32:b9:8a:d7:d9:ae:dd:
                    61:d6:2c:1f:02:a3:77:4a:a8:be:b0:e8:e4:3b:c1:
                    ff:d8:81:f6:48:9f:0f:19:ea:02:d9:27:51:a9:c5:
                    1f:ba:8f:9c:5c:47:31:e2:62:3e:f3:59:b2:37:ea:
                    d3:ff:e5:a2:0d:72:e8:e4:15:ed:83:67:df:bd:42:
                    02:25:b7:73:d0:87:8a:60:1f:49:77:1f:9b:47:6e:
                    68:60:83:14:d1:14:6a:12:20:9f:d4:97:62:7f:33:
                    d7:f7:ba:4c:f4:44:48:97:c7:c2:ee:a4:5b:16:0f:
                    22:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:94:AC:6A:FD:9B:B4:25:EF:D0:F4:70:49:E3:88:86:DA:D6:AF
            X509v3 Authority Key Identifier:
                keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/071BCFF849D011EF9F8A8969C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.206.0/23
                IPv6:
                  2400:b020::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:58:71:8f:82:47:3f:7d:d7:2c:d7:af:8d:d3:eb:b2:ac:6d:
         22:f4:c2:bf:ab:5d:7d:48:99:0d:22:12:c6:f4:16:f0:db:90:
         b1:91:e7:34:99:be:8b:75:bf:eb:27:c4:f2:a8:d9:1b:70:5e:
         34:3c:c4:af:c9:c2:a3:59:91:39:08:e5:65:83:f0:c0:65:11:
         9b:ca:8c:7d:cc:cb:6e:07:6b:22:28:db:c1:e9:fd:cc:c7:97:
         ce:6a:15:14:ec:1a:83:43:ab:1b:4e:f0:dc:58:63:f1:2c:9e:
         2a:26:31:5c:81:ea:a7:68:27:5d:25:30:5b:79:e2:21:18:f2:
         3e:81:c1:a0:81:6c:25:d6:23:e6:c7:95:99:63:a9:e6:40:53:
         bb:01:58:d1:65:67:b5:f3:af:e6:0b:d2:6f:a9:ab:dd:2c:72:
         bf:fa:40:11:93:46:e1:d4:16:d0:a2:5b:93:9a:1f:51:cf:89:
         75:b6:98:29:72:55:3c:e4:22:c2:dc:4e:a1:e5:0d:72:b3:8f:
         67:e2:32:7a:b4:95:43:60:81:88:89:69:12:cb:29:a2:0a:21:
         6d:36:7b:f9:7f:4d:51:ff:2c:71:f0:3f:45:28:c4:f6:48:6f:
         e4:c5:6c:5c:e3:d8:a6:71:c8:21:29:9a:ba:24:4f:cf:e6:48:
         c6:fb:22:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:05 2026 by rpki-client