Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/58A4A3E2B73A11ED8A2A8964C4F9AE02.roa
File:                     58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (raw, json)
Hash identifier:          yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=
Subject key identifier:   F7:B0:70:01:D9:8E:05:E1:B0:A0:34:3F:48:56:94:3B:A8:82:ED:1F
Certificate issuer:       /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
Certificate serial:       04F8
Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/58A4A3E2B73A11ED8A2A8964C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:48:10 +0000
ROA not before:           Wed 24 Dec 2025 23:20:26 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     63969
IP address blocks:        103.177.124.0/23 maxlen: 24
                          2001:df0:2240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl
                          rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
        Validity
            Not Before: Dec 24 23:20:26 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a45fba-6558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:67:d0:0f:f8:0e:e7:6d:2e:f8:b1:07:c2:45:
                    3a:7a:86:a0:67:c0:35:e4:eb:f7:04:a2:9b:86:0a:
                    f1:ca:d5:4c:61:4b:d2:e7:da:42:62:a5:d7:0a:cf:
                    1c:c7:fa:08:4d:f7:04:be:fd:82:4b:5d:2d:12:4d:
                    e2:90:c2:26:18:d4:a7:3f:94:14:fd:7b:f0:f6:83:
                    d9:29:90:91:56:bb:c7:15:2d:5b:4c:a0:3b:61:d4:
                    2e:6e:9d:c2:aa:53:60:0b:15:3e:a0:e3:7e:99:dd:
                    43:f6:e2:c9:a9:b7:53:d6:42:bc:9f:77:18:1a:31:
                    80:e1:26:05:f6:22:ae:c2:55:e4:d7:4c:57:54:40:
                    89:b0:f1:50:b8:9b:7a:ab:05:ba:89:84:67:49:c7:
                    37:c9:6b:5f:46:ba:20:58:08:9d:99:ef:e2:79:5f:
                    b0:d7:b4:bd:2d:a3:9a:75:39:c8:cd:a3:a3:77:1a:
                    02:9f:b2:6e:3b:98:e9:36:1a:02:ac:fd:cd:d3:32:
                    f5:a0:9c:fd:16:60:3b:77:ea:a7:4c:0a:d7:eb:d4:
                    fe:d1:8f:a8:43:bc:0e:ae:ac:45:be:a7:87:49:a5:
                    4c:99:46:2a:33:89:fa:17:02:27:39:3b:9a:f4:67:
                    b7:58:e3:a0:33:c5:87:f2:7f:3a:ca:24:7e:7d:6e:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B0:70:01:D9:8E:05:E1:B0:A0:34:3F:48:56:94:3B:A8:82:ED:1F
            X509v3 Authority Key Identifier:
                keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/58A4A3E2B73A11ED8A2A8964C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.124.0/23
                IPv6:
                  2001:df0:2240::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:86:18:1b:70:38:bd:ec:2a:7d:14:ce:72:fb:24:4f:a0:cc:
         bb:2d:e4:9e:7c:43:2c:95:54:1f:62:21:e9:6d:5f:f1:6e:1b:
         04:29:8e:1b:62:df:7c:26:85:f6:48:5c:04:b1:2e:85:68:25:
         0b:d9:37:ca:4c:e2:2f:f0:e6:83:0a:34:18:57:44:91:5c:03:
         6f:90:3f:d6:d1:0b:45:bf:5e:e1:08:27:3b:08:3f:92:1c:c5:
         ee:49:70:65:4e:46:14:a6:cb:cf:50:8d:54:75:be:3f:7d:75:
         ce:88:ec:26:5c:de:e1:b2:8a:db:ac:52:e6:0b:78:fd:bb:ed:
         47:a6:cd:e5:56:ed:79:c5:2d:2a:24:93:2f:57:3a:6e:6a:ec:
         2a:9e:14:28:94:3a:80:85:e2:f0:7d:0d:a1:f1:70:b1:0e:99:
         1a:a2:25:17:ff:14:e2:b3:1a:1e:e9:2d:fb:a9:4a:2e:78:71:
         4a:0a:f2:21:17:45:b2:e8:b2:2a:69:01:65:f1:8c:e7:88:07:
         e4:8c:d1:8b:d3:ac:42:fb:e1:0a:6f:25:0e:be:07:14:0a:6f:
         fd:b0:0e:60:b6:44:7d:86:80:47:09:f9:ec:f1:ce:3a:d9:fe:
         6e:7a:bd:83:9a:4d:02:e5:6a:3f:f3:b9:c4:76:86:4d:6b:91:
         ab:47:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:52 2026 by rpki-client