Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/49E515C2C0F211EEA14E0122C4F9AE02.roa
File:                     49E515C2C0F211EEA14E0122C4F9AE02.roa (raw, json)
Hash identifier:          ENBlU08ik+Qfp6syg0uFnHZazCJHhmbXL8w+7drsKnY=
Subject key identifier:   FD:9D:09:E5:7E:CA:F5:FD:67:72:37:69:E8:62:1F:3D:F1:25:68:13
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0CB3
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/49E515C2C0F211EEA14E0122C4F9AE02.roa
Signing time:             Fri 20 Feb 2026 18:16:12 +0000
ROA not before:           Fri 20 Feb 2026 18:16:12 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     131216
IP address blocks:        103.127.84.0/22 maxlen: 22
                          103.127.84.0/23 maxlen: 23
                          103.127.85.0/24 maxlen: 24
                          103.127.87.0/24 maxlen: 24
                          2404:1d40::/32 maxlen: 32
                          2404:1d40::/36 maxlen: 36
                          2404:1d40::/48 maxlen: 48
                          2404:1d40:1::/48 maxlen: 48
                          2404:1d40:2::/48 maxlen: 48
                          2404:1d40:3::/48 maxlen: 48
                          2404:1d40:4::/48 maxlen: 48
                          2404:1d40:5::/48 maxlen: 48
                          2404:1d40:6::/48 maxlen: 48
                          2404:1d40:7::/48 maxlen: 48
                          2404:1d40:8::/48 maxlen: 48
                          2404:1d40:9::/48 maxlen: 48
                          2404:1d40:a::/48 maxlen: 48
                          2404:1d40:b::/48 maxlen: 48
                          2404:1d40:c::/48 maxlen: 48
                          2404:1d40:d::/48 maxlen: 48
                          2404:1d40:e::/48 maxlen: 48
                          2404:1d40:f::/48 maxlen: 48
                          2404:1d40:10::/48 maxlen: 48
                          2404:1d40:11::/48 maxlen: 48
                          2404:1d40:12::/48 maxlen: 48
                          2404:1d40:13::/48 maxlen: 48
                          2404:1d40:14::/48 maxlen: 48
                          2404:1d40:15::/48 maxlen: 48
                          2404:1d40:16::/48 maxlen: 48
                          2404:1d40:17::/48 maxlen: 48
                          2404:1d40:18::/48 maxlen: 48
                          2404:1d40:19::/48 maxlen: 48
                          2404:1d40:1a::/48 maxlen: 48
                          2404:1d40:1b::/48 maxlen: 48
                          2404:1d40:1c::/48 maxlen: 48
                          2404:1d40:1d::/48 maxlen: 48
                          2404:1d40:1e::/48 maxlen: 48
                          2404:1d40:1f::/48 maxlen: 48
                          2404:1d40:20::/48 maxlen: 48
                          2404:1d40:21::/48 maxlen: 48
                          2404:1d40:22::/48 maxlen: 48
                          2404:1d40:23::/48 maxlen: 48
                          2404:1d40:24::/48 maxlen: 48
                          2404:1d40:25::/48 maxlen: 48
                          2404:1d40:26::/48 maxlen: 48
                          2404:1d40:27::/48 maxlen: 48
                          2404:1d40:28::/48 maxlen: 48
                          2404:1d40:29::/48 maxlen: 48
                          2404:1d40:2a::/48 maxlen: 48
                          2404:1d40:2b::/48 maxlen: 48
                          2404:1d40:2c::/48 maxlen: 48
                          2404:1d40:2d::/48 maxlen: 48
                          2404:1d40:2e::/48 maxlen: 48
                          2404:1d40:2f::/48 maxlen: 48
                          2404:1d40:30::/48 maxlen: 48
                          2404:1d40:1000::/36 maxlen: 36
                          2404:1d40:2000::/36 maxlen: 36
                          2404:1d40:3000::/36 maxlen: 36
                          2404:1d40:4000::/36 maxlen: 36
                          2404:1d40:5000::/36 maxlen: 36
                          2404:1d40:6000::/36 maxlen: 36
                          2404:1d40:7000::/36 maxlen: 36
                          2404:1d40:8000::/36 maxlen: 36
                          2404:1d40:9000::/36 maxlen: 36
                          2404:1d40:b000::/36 maxlen: 36
                          2404:1d40:c000::/36 maxlen: 36
                          2404:1d40:d000::/36 maxlen: 36
                          2404:1d40:e000::/36 maxlen: 36
                          2404:1d40:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3251 (0xcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Feb 20 18:16:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6998a4ec-f5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:dd:43:8a:8a:f2:59:cd:29:e9:d5:59:c8:
                    10:9e:99:0f:e9:b0:fa:0c:3d:d1:67:28:e4:da:16:
                    59:a5:66:03:53:a1:bd:a9:5a:ec:1f:be:25:e0:18:
                    d4:42:0f:8e:c1:b9:5b:03:2b:ab:b4:fe:15:29:dd:
                    5b:b0:af:00:a0:a3:82:1c:ed:9c:7b:c7:01:6d:12:
                    53:9c:91:8f:39:89:02:8b:4e:7a:a5:6f:75:63:2e:
                    ef:16:2a:2c:d8:f1:8a:d5:44:eb:a2:d4:dd:a5:16:
                    b0:25:bb:0b:a5:7b:63:c5:ab:d9:2d:7c:7d:1b:bf:
                    2f:e1:a5:0c:16:29:df:ae:6f:f7:df:9d:25:a5:23:
                    c7:36:84:31:a3:bb:06:8c:5e:f3:f6:09:3f:b8:18:
                    9e:6a:08:87:fe:23:11:34:40:5c:29:0b:e6:04:cb:
                    78:62:fe:81:5f:f2:3d:b3:24:f0:6b:2a:86:b7:ef:
                    16:97:10:05:86:95:e5:2c:e4:fb:8c:6a:27:04:bc:
                    dc:f4:ee:a6:ee:05:32:0e:77:81:07:b6:34:5d:5f:
                    4c:dc:f7:bf:97:9a:fa:79:cd:68:43:12:0d:a5:30:
                    df:c9:eb:06:33:aa:ae:ae:ba:25:60:84:c7:8b:d5:
                    73:53:e9:02:69:01:17:be:5f:58:68:ed:1e:b3:9b:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9D:09:E5:7E:CA:F5:FD:67:72:37:69:E8:62:1F:3D:F1:25:68:13
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/49E515C2C0F211EEA14E0122C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.84.0/22
                IPv6:
                  2404:1d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:9c:e3:9d:d4:f7:3d:47:8d:7a:4a:4d:7c:9f:d4:b8:9e:
         35:a2:06:e4:74:91:26:c0:ac:09:24:d2:a2:c2:48:56:f4:3c:
         ea:71:6e:28:f2:44:27:de:9e:70:b6:11:41:f9:e3:f6:52:2a:
         5d:0f:62:ca:e3:05:6a:a4:46:ea:6d:37:00:32:32:b0:f9:c2:
         bb:46:9f:62:31:98:0d:1b:41:97:d0:20:74:d7:d5:1d:51:d2:
         dc:68:af:72:3b:d7:52:92:de:31:a7:ab:fb:cc:e6:f6:c3:ea:
         44:99:e7:65:90:d8:fc:e3:f7:c8:2d:f5:4f:42:8f:ae:cf:c8:
         06:f3:21:3b:1e:af:4a:27:df:fd:93:5b:3d:7a:af:1a:64:a3:
         1a:3d:b0:1e:3a:1e:4f:89:a3:25:e2:68:71:d6:bc:98:c7:53:
         7c:08:06:e3:cf:01:f1:83:7c:a4:cf:b2:2a:4b:4e:ce:f9:95:
         0d:32:f4:9a:cd:64:9a:3c:4b:e7:a8:78:13:0e:da:0a:b0:25:
         89:61:fe:68:b9:39:9c:47:5f:95:af:7b:7d:7d:98:fe:13:2c:
         d2:8b:4d:fc:73:54:16:fb:8b:1d:6c:40:48:cd:86:a7:4b:61:
         44:6a:50:1d:ff:62:61:de:60:af:ef:68:4e:f5:53:4f:72:a5:
         cb:a5:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:15 2026 by rpki-client