Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/DD716A222ACC11EAAB36B444C4F9AE02.roa
File:                     DD716A222ACC11EAAB36B444C4F9AE02.roa (raw, json)
Hash identifier:          WSz2V/sotpR3gJkmMh94wQPcuajtaYW6M7zsjsYcooc=
Subject key identifier:   E2:E9:6F:1D:C0:EA:B6:48:F0:6D:BD:DE:01:89:66:CA:FE:5C:6A:79
Certificate issuer:       /CN=A916EB98/serialNumber=537A72BE6339378C4C4D29702BED7675CCCC146A
Certificate serial:       0C19
Authority key identifier: 53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/DD716A222ACC11EAAB36B444C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:43:47 +0000
ROA not before:           Wed 04 Feb 2026 19:15:50 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139913
IP address blocks:        103.147.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.crl
                          rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3097 (0xc19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EB98, serialNumber=537A72BE6339378C4C4D29702BED7675CCCC146A
        Validity
            Not Before: Feb  4 19:15:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a450a3-85c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:22:30:62:5d:d8:c8:e7:e1:6e:9b:60:af:
                    24:2a:c5:c8:91:f2:c7:de:d8:5f:78:2f:e5:ee:53:
                    97:3c:5c:11:f0:6a:b0:38:97:67:e5:7c:d3:fd:41:
                    8a:bc:0f:1c:8e:e3:27:03:62:87:64:02:42:f3:11:
                    ba:37:dd:a2:2b:77:75:38:83:96:27:93:08:de:c1:
                    4b:98:4e:4d:6c:63:f7:c5:4c:63:6e:8c:50:5b:ef:
                    d0:8b:68:6c:04:f7:8b:4b:ee:ea:eb:82:87:94:09:
                    ef:8a:c0:fc:03:29:e0:c3:02:ea:4c:d8:68:29:ee:
                    65:c7:f3:6e:e2:be:95:9e:76:c1:cd:fb:f0:ae:60:
                    cf:13:1f:31:bb:e7:27:e9:77:f5:a4:55:14:4d:bd:
                    5e:68:e7:11:36:86:d0:3b:e0:81:7f:0a:9a:ff:b4:
                    f9:1e:00:1a:1c:54:46:49:cf:02:b6:b4:e1:ec:b1:
                    54:cd:f5:4b:5a:e9:b5:f0:aa:4e:8d:8f:f3:8d:b6:
                    aa:ca:34:d6:76:82:3a:6e:b5:f4:2b:6a:f0:4b:73:
                    4f:a8:48:54:16:35:33:fa:0c:a7:f9:a3:3c:f8:7b:
                    01:b4:29:44:7e:15:d7:cc:d4:fd:b1:21:91:b4:47:
                    9e:5f:5e:85:4b:dc:ad:ab:09:f7:da:c9:f2:c2:74:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E9:6F:1D:C0:EA:B6:48:F0:6D:BD:DE:01:89:66:CA:FE:5C:6A:79
            X509v3 Authority Key Identifier:
                keyid:53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/DD716A222ACC11EAAB36B444C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:12:96:10:78:7f:8c:c5:1e:1d:bf:a7:86:45:d7:86:36:35:
         ac:19:af:3c:52:32:cf:23:cb:b2:e6:74:6f:d2:5f:96:64:37:
         d6:06:8d:b2:16:34:e2:7b:d4:b6:af:1d:a6:a3:e4:2f:8a:a7:
         38:da:23:2e:2d:18:fc:f2:16:49:ba:69:ef:19:67:36:3b:03:
         50:69:a8:14:9d:9e:28:1a:2a:a1:57:2a:e6:32:e7:a3:38:2f:
         d8:ad:f5:66:7f:a4:91:bb:65:3a:04:b9:7e:b4:7e:ba:b5:99:
         7d:48:4c:72:97:78:ce:df:f6:dc:9f:ff:36:1c:75:61:4f:dd:
         b8:22:2f:d2:a4:bd:60:5a:22:6a:8d:e2:a5:08:61:cc:43:80:
         fe:3d:3a:94:24:74:87:b2:20:aa:2b:61:08:9b:c8:95:44:d1:
         f4:2a:1a:01:65:18:60:3a:59:44:59:80:b7:d8:f2:f6:ad:70:
         d1:7f:e6:e0:fa:79:22:2e:28:62:4b:34:a3:0f:7c:3d:fe:c5:
         f2:4e:47:1d:f5:88:73:35:cc:83:9c:49:17:a7:3f:21:c9:bc:
         f1:cc:8a:be:dd:a6:0b:73:d3:7e:26:4a:9b:a3:b6:11:a6:10:
         c7:02:c2:bc:15:f7:bd:93:05:3e:82:16:35:3c:de:8e:af:50:
         45:e6:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:49 2026 by rpki-client