Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/306EFA64A87611F089A2B881C4F9AE02.roa
File:                     306EFA64A87611F089A2B881C4F9AE02.roa (raw, json)
Hash identifier:          dxCV5oDwm0iQGfDR4O8HOe4IbiLXLU4mPTUlx835jPI=
Subject key identifier:   E5:B4:2B:30:9E:01:E4:5D:41:BC:4A:9D:33:50:4B:0E:AB:FB:64:66
Certificate issuer:       /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Certificate serial:       0179
Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/306EFA64A87611F089A2B881C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:13:05 +0000
ROA not before:           Sat 21 Feb 2026 03:24:32 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142602
IP address blocks:        103.26.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
                          rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
        Validity
            Not Before: Feb 21 03:24:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a46590-10da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:bb:10:5f:f5:41:4e:7d:ab:db:0a:30:74:
                    fe:15:ef:60:1f:11:73:fd:c2:cd:9b:37:97:ef:fd:
                    bb:ba:d4:a5:85:0b:80:bd:e9:7a:74:ad:1a:9d:72:
                    b0:3d:0f:cb:de:4d:dc:b9:80:5c:70:d4:f0:47:98:
                    a7:9b:b1:0c:77:51:0a:34:05:e5:d9:f1:7d:ee:d7:
                    51:75:02:77:85:87:a5:15:39:d2:57:f1:a2:27:b0:
                    39:1f:03:64:cb:df:ad:dd:89:65:35:dd:55:ac:cd:
                    e1:30:c8:de:c2:15:21:76:78:fe:4b:90:81:3d:ad:
                    ee:ae:57:1a:b5:09:6e:29:30:f1:ec:1c:8b:c8:1e:
                    f0:19:00:b5:1b:10:62:8c:6c:bf:e7:22:af:ca:08:
                    dd:fc:f8:36:63:7e:3e:87:1a:ae:21:0e:fe:9d:1b:
                    3c:c7:06:34:07:75:0d:e9:ff:11:b0:89:2a:8b:25:
                    d9:4c:fe:51:fd:a4:4b:52:02:8e:cc:03:63:e8:4f:
                    38:94:83:96:e1:5f:65:28:56:11:5b:8b:7b:93:29:
                    c2:4a:b5:06:4e:3e:b3:d6:4c:3b:82:4e:77:e4:2f:
                    8b:a9:c7:20:61:37:8b:a4:d9:d6:6c:dc:7e:bb:3b:
                    58:8a:92:3d:77:24:c6:55:2d:23:82:40:5b:23:d0:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B4:2B:30:9E:01:E4:5D:41:BC:4A:9D:33:50:4B:0E:AB:FB:64:66
            X509v3 Authority Key Identifier:
                keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/306EFA64A87611F089A2B881C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:30:10:94:87:5f:8a:83:ea:f4:1b:66:ca:d6:d3:69:5f:05:
         13:5c:a2:37:4d:82:05:a7:6b:9c:b6:99:8a:d3:31:9b:00:fc:
         be:d1:d3:b0:5a:31:72:9c:2e:d8:ae:72:91:fe:cd:38:a5:7d:
         ab:1b:07:b3:db:1e:93:46:99:1a:e9:36:a4:df:40:d4:3d:34:
         28:28:74:d9:4d:f9:96:23:0f:0a:f4:2d:40:8c:2b:02:23:2a:
         60:96:fd:50:9e:9f:d4:8c:fd:f6:72:18:72:24:73:6e:7b:33:
         4e:6b:b7:e0:6b:f6:38:44:88:f2:e7:4f:59:f7:08:4f:ce:47:
         9b:38:30:92:8b:46:25:ce:eb:3d:c9:d4:d7:35:16:85:4a:21:
         1d:22:b9:f4:80:f3:ae:02:bb:79:5c:d1:15:52:6f:7e:07:ce:
         f1:06:97:3b:24:b0:d3:e6:7d:0b:af:c8:85:a5:ae:8a:b9:0f:
         9d:79:23:81:74:9a:8b:ec:7a:df:6d:ce:9f:ed:cb:51:a0:9b:
         8c:9e:07:73:4a:1a:f1:ad:07:47:56:2a:68:2a:40:32:c5:5b:
         bb:82:66:af:2b:6b:70:98:94:3d:73:27:b1:cf:e5:7b:51:57:
         92:c5:73:d3:f6:c6:fc:e5:66:5b:e3:df:70:77:20:81:6f:92:
         42:51:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:03 2026 by rpki-client