Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
File:                     819150603F3411EF85BAC749C4F9AE02.roa (raw, json)
Hash identifier:          fmRvDrlAVUP4IPzjCxKSFO/W9oPKrGtnnlxwGGwestk=
Subject key identifier:   22:D7:1A:A6:3A:09:B6:8E:F5:55:40:64:D1:CB:A9:BB:9B:A4:84:D6
Certificate issuer:       /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial:       0498
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:30:35 +0000
ROA not before:           Fri 20 Feb 2026 13:11:21 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149483
IP address blocks:        103.180.202.0/24 maxlen: 24
                          103.180.203.0/24 maxlen: 24
                          2001:df0:5f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
                          rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
        Validity
            Not Before: Feb 20 13:11:21 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a477ba-c674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:f4:0a:b8:5d:06:25:b8:24:16:bf:c3:eb:
                    bf:01:d6:34:fb:c0:d4:56:e7:4e:48:05:de:3c:19:
                    48:2b:e7:af:72:cc:e3:2e:47:a0:1f:8c:3c:fa:a3:
                    b1:d3:d1:db:0c:08:19:41:78:f1:eb:ef:23:99:da:
                    88:b2:35:c2:af:cc:ac:9c:4a:52:38:03:f3:58:38:
                    31:b9:7e:af:b4:08:82:0b:75:65:27:52:c4:28:d2:
                    89:49:99:6a:8b:85:f6:80:ee:b6:fd:a0:c9:4e:b1:
                    3f:af:6c:bd:3f:35:08:1f:3a:72:3e:47:da:c2:60:
                    ff:9d:53:de:e2:81:d5:d4:d9:09:88:89:bc:a8:cd:
                    c9:1b:9e:c2:8d:f2:c9:f3:1d:09:a2:4f:c6:08:b3:
                    49:bd:1f:f6:df:a2:1a:bb:a5:3c:00:56:ed:53:bc:
                    58:2c:77:de:49:92:77:d5:b1:67:0d:3d:40:fe:86:
                    22:96:ec:1a:7b:70:1f:f0:9f:6d:4b:9d:57:68:4e:
                    a4:43:d0:c6:3c:b4:2d:94:f2:08:4e:42:1e:ff:fe:
                    cd:6a:b6:91:69:a9:d8:90:24:5f:02:23:d5:81:10:
                    9a:49:e1:6d:84:9f:d9:22:dd:ab:12:40:a3:cb:01:
                    b8:35:88:3e:d4:03:bd:c7:25:72:39:45:d2:66:0b:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D7:1A:A6:3A:09:B6:8E:F5:55:40:64:D1:CB:A9:BB:9B:A4:84:D6
            X509v3 Authority Key Identifier:
                keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.202.0/23
                IPv6:
                  2001:df0:5f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:92:5b:16:68:94:2a:e5:8f:49:43:44:02:c4:0c:55:17:
         12:52:71:fd:f6:e8:c6:66:c0:ed:df:93:c2:fd:31:7c:0b:98:
         66:44:ce:a4:61:89:53:9b:bc:fc:47:26:9e:0b:a1:b8:bf:a1:
         2e:f3:4f:78:2d:b1:e2:e4:ff:0a:c6:b6:88:ae:ba:81:e1:98:
         20:3c:d2:f2:d8:48:2b:b9:14:12:32:f1:12:6a:a9:c3:66:63:
         f2:02:04:bf:6b:6a:6e:7e:b1:90:d6:3b:cd:52:02:fd:96:d1:
         2d:3f:a9:94:00:1e:b6:62:ef:7d:7d:0d:03:26:21:82:50:e9:
         93:f8:45:d2:84:e0:0a:57:3f:bd:22:7c:db:8f:c5:40:22:bf:
         b7:c6:18:4b:af:6b:58:09:51:14:e7:e4:0a:9a:81:f2:65:c1:
         d8:73:8e:e8:76:31:88:2c:c1:e2:80:06:de:ad:61:41:03:0e:
         d7:90:c6:f1:b5:b0:b1:a4:a3:12:62:ae:34:18:e2:48:44:a4:
         b9:1e:80:75:19:04:7b:a8:d0:35:a2:fb:fd:61:61:2e:62:c9:
         6c:ac:e9:f4:b0:f8:9b:a3:b0:bc:f5:e2:05:e6:fc:47:93:d9:
         fd:c8:b2:dc:af:e7:29:d6:94:b3:2b:f9:47:8a:b1:f3:69:04:
         a7:e7:53:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:47 2026 by rpki-client