Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/B4F0A9F800A011E8B6C9E20AC4F9AE02.roa
File:                     B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (raw, json)
Hash identifier:          uLAMMJ1ZH6DI7iyetTkGs+yUb4BJj72QELCzByPN7qk=
Subject key identifier:   2B:3E:CD:46:39:54:D2:5F:79:1D:F3:2F:FF:2A:B9:EC:E5:B4:B8:FB
Certificate issuer:       /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
Certificate serial:       188D
Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/B4F0A9F800A011E8B6C9E20AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:43:35 +0000
ROA not before:           Fri 14 Nov 2025 16:34:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     14907
IP address blocks:        103.102.166.0/24 maxlen: 24
                          2001:df2:e500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl
                          rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6285 (0x188d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF76, serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
        Validity
            Not Before: Nov 14 16:34:42 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a44287-863a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:e6:1e:63:b0:30:7c:4b:98:a7:b4:3e:ab:
                    f8:7e:70:89:53:1f:ac:c3:f2:d4:40:58:dd:4f:48:
                    2a:42:09:7d:aa:58:32:7c:ae:27:a5:b8:50:3c:6e:
                    d2:d0:34:c1:72:ac:a1:e2:ac:f5:9a:de:b6:45:82:
                    0a:4f:23:d1:8d:fd:8c:3d:ab:43:c4:e4:43:ca:e9:
                    70:71:ae:57:37:c8:1e:43:30:17:50:15:1d:ed:2a:
                    ee:1f:85:a8:5e:3b:17:62:0e:3e:98:86:92:73:4d:
                    77:ff:ee:54:45:9a:45:fd:0b:4a:67:fa:77:f8:d8:
                    af:19:2b:e7:64:4e:0c:8b:2c:65:09:9f:f1:8f:a0:
                    0e:3b:c6:c0:3b:5a:1a:fc:a7:6b:6a:9f:0f:17:b9:
                    cf:7a:30:dd:d4:fd:ea:a0:6b:e8:6e:20:88:58:92:
                    35:a0:52:36:bc:1c:b3:5a:2e:26:c2:38:ae:c6:1f:
                    d4:42:bf:af:65:24:f0:cb:16:22:2f:c5:ac:ba:89:
                    21:87:00:e1:b3:cf:27:b4:90:22:c4:83:a5:e1:c2:
                    37:62:93:d2:5c:1a:87:4c:c5:e2:98:cf:c5:22:d7:
                    c8:c0:33:50:3d:e3:18:0d:52:d7:aa:58:4b:be:9d:
                    53:ba:08:d7:15:1e:63:88:a5:62:2b:5b:de:10:8d:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3E:CD:46:39:54:D2:5F:79:1D:F3:2F:FF:2A:B9:EC:E5:B4:B8:FB
            X509v3 Authority Key Identifier:
                keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/B4F0A9F800A011E8B6C9E20AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.166.0/24
                IPv6:
                  2001:df2:e500::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:de:9e:19:ed:cf:ff:ee:93:48:55:85:cb:a6:31:0e:05:0f:
         67:76:91:94:5f:41:97:77:b4:fd:02:58:94:b5:28:83:18:30:
         d6:97:ae:9b:3e:46:9d:80:37:41:33:62:96:63:0e:e7:e9:b8:
         f7:2f:f6:86:88:fb:2e:18:34:f7:4b:81:ee:a0:79:b2:af:86:
         f3:7c:f7:e1:11:a0:fd:3b:8e:8d:85:63:6f:af:53:f2:5b:fe:
         b4:6a:2c:73:1a:ba:e5:04:36:cf:b3:04:40:9e:54:7c:3f:db:
         29:2a:45:e6:c8:49:e0:31:39:ac:6b:d7:fe:ce:a8:9c:d4:b9:
         26:6b:15:69:87:61:cc:d4:97:51:e3:c4:07:a5:95:b0:eb:92:
         63:77:83:0d:93:de:e5:cc:f0:ee:79:00:39:0e:bb:8a:c3:1e:
         fb:58:f5:0c:8e:be:04:54:ff:b5:0b:40:f8:64:f6:2f:2e:f0:
         f4:09:5f:71:10:7c:a1:a7:b4:1c:58:f7:0a:91:4a:bd:23:ee:
         52:06:46:fe:4e:e2:bb:b5:93:06:14:21:2a:48:38:70:d6:b1:
         b2:33:ea:46:c4:e7:27:62:6f:73:32:85:ed:49:0c:44:cb:83:
         2e:52:b8:e9:c9:2b:99:d0:00:c1:2f:76:ff:52:76:35:cf:1e:
         f4:df:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:56 2026 by rpki-client