Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/4A7F0102747811EAB3C2634EC4F9AE02.roa
File:                     4A7F0102747811EAB3C2634EC4F9AE02.roa (raw, json)
Hash identifier:          wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=
Subject key identifier:   47:1D:8E:14:8E:7B:4C:B7:7C:7F:8C:B9:6D:74:5E:E3:02:6C:5D:B5
Certificate issuer:       /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial:       0AA4
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/4A7F0102747811EAB3C2634EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:00:53 +0000
ROA not before:           Fri 02 Jan 2026 19:16:26 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     17819
IP address blocks:        103.103.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
                          rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724 (0xaa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
        Validity
            Not Before: Jan  2 19:16:26 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a462b5-ea96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:c3:df:68:f7:e2:2d:2b:3c:23:f5:d5:91:
                    50:db:b6:1e:be:82:70:5e:6a:8d:1a:84:99:15:5d:
                    c9:99:17:d0:ab:29:1e:8b:fb:20:97:ac:87:58:b0:
                    fe:fa:47:13:6e:61:b3:f8:da:f2:70:f9:aa:22:d7:
                    9a:20:2f:47:f8:19:3f:7c:03:a8:81:7f:06:3c:eb:
                    43:41:73:05:1b:d3:f1:cc:59:34:83:17:c5:8e:ba:
                    de:43:91:e3:15:da:02:70:ff:2e:e3:c9:29:47:a4:
                    f0:1a:33:37:ab:6c:29:9a:14:e5:3c:d3:98:a4:af:
                    52:b3:5d:7d:ef:c3:9f:5f:a1:4d:b0:e3:86:39:d5:
                    11:4c:76:d0:70:8a:8a:4a:47:64:e3:07:26:10:d3:
                    97:5f:db:e1:4e:bc:dc:f1:ff:6d:3d:4c:94:9b:d4:
                    6f:36:1c:98:15:4c:78:e7:9a:98:38:9f:87:51:32:
                    ea:00:b4:12:53:f0:66:94:a1:8a:20:aa:fb:81:b6:
                    42:3a:11:28:54:31:e4:6d:2e:8f:fd:37:cc:99:6d:
                    76:ae:81:87:94:30:ad:90:10:98:2b:40:f8:6a:a6:
                    29:7d:b5:c3:c5:4c:4b:60:84:33:86:ce:2a:11:6c:
                    57:0b:83:0f:b6:a3:17:01:ea:f3:9d:fb:67:8d:63:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1D:8E:14:8E:7B:4C:B7:7C:7F:8C:B9:6D:74:5E:E3:02:6C:5D:B5
            X509v3 Authority Key Identifier:
                keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/4A7F0102747811EAB3C2634EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:3e:95:c9:48:1e:1f:67:a4:0f:c4:5e:dd:89:8c:b8:88:8a:
         87:e0:68:89:c4:5f:48:c4:e2:05:8c:b3:e8:65:00:4c:9c:f5:
         12:81:d0:e2:4d:1b:08:7c:95:e7:ab:77:2f:41:b7:1a:46:74:
         f7:6a:06:c5:bc:56:38:46:02:2d:f1:10:e7:11:db:1a:d2:93:
         c4:30:b0:23:e3:48:8e:bd:59:6e:a5:10:b5:22:be:ed:47:45:
         63:7c:86:8c:d8:63:30:2a:ba:ba:08:71:ed:16:a3:e2:09:22:
         6b:97:13:70:bc:58:5c:03:f5:74:2e:ff:33:ea:8d:ee:ee:e2:
         4c:06:9b:dd:fa:36:ca:10:95:3c:63:d7:ce:7f:94:64:e7:b5:
         e3:4e:bd:73:79:67:9b:52:df:25:75:66:b1:b0:05:e6:1b:39:
         de:f2:85:d9:09:82:13:33:28:da:2b:78:72:71:10:5e:a5:2e:
         b7:9b:b5:70:b5:66:0f:d4:98:2a:6a:c6:a7:51:9d:45:28:4d:
         e4:cc:3a:5e:a8:b7:17:81:90:93:d5:d1:17:b5:2b:1b:d0:41:
         c0:ba:f2:54:97:a3:b6:d8:85:cd:67:01:b8:c2:17:d2:c5:c6:
         5c:a3:29:1d:fd:7f:54:c1:fc:1c:e0:28:39:9f:4b:b3:80:74:
         80:df:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:47 2026 by rpki-client