Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/97D35382924311EC927C972FC4F9AE02.roa
File:                     97D35382924311EC927C972FC4F9AE02.roa (raw, json)
Hash identifier:          L7w9U1xIcAkgr7iuuigChOuAKtORsk2v9sh89ZFvz9I=
Subject key identifier:   F7:E7:42:D8:B4:2E:E0:54:93:A8:C3:0B:71:02:44:FF:11:7A:75:82
Certificate issuer:       /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial:       0448
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/97D35382924311EC927C972FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:23:12 +0000
ROA not before:           Tue 17 Feb 2026 00:21:01 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149453
IP address blocks:        103.179.238.0/23 maxlen: 24
                          2400:5020::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
                          rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
        Validity
            Not Before: Feb 17 00:21:01 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44bd0-06c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:41:3f:a6:98:e1:55:6c:3d:33:3e:26:68:
                    bd:04:02:74:81:8b:76:eb:c2:24:b2:30:b1:0d:92:
                    1d:5f:40:10:e6:6a:3e:f9:cd:a4:5a:55:ca:ed:cd:
                    c9:60:7c:c6:4b:24:3b:ef:e5:ac:67:3a:05:52:18:
                    d0:07:35:b6:cf:99:4b:e0:7f:56:c9:56:18:4c:22:
                    55:a1:df:00:8c:a4:fb:db:a2:ed:65:0a:ef:95:8b:
                    98:dc:21:14:db:61:b3:ff:1f:65:6a:df:da:00:64:
                    54:a5:48:87:ff:29:5f:39:ad:93:a5:ff:14:7e:1a:
                    d1:21:76:2a:25:7b:39:84:45:62:ef:ab:a7:0f:1d:
                    31:b2:13:35:27:36:d7:2d:9c:94:06:14:01:a2:48:
                    ec:9e:4f:d5:15:2b:96:3c:f7:7e:3f:07:c2:4e:d6:
                    6f:af:64:23:06:76:83:56:57:b4:45:2f:c1:6c:7b:
                    16:0d:57:7c:f5:e3:a8:56:2e:6e:19:cd:80:38:2f:
                    8e:fb:73:c8:3c:a0:35:f1:34:c7:c6:70:0f:6f:56:
                    d5:47:30:0c:14:d7:d8:37:4c:97:5d:9a:43:64:64:
                    c7:d6:86:9e:f0:21:d5:8e:9d:89:ab:de:eb:d8:13:
                    d7:71:ee:3e:47:35:16:55:29:b3:67:ef:bb:be:b9:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E7:42:D8:B4:2E:E0:54:93:A8:C3:0B:71:02:44:FF:11:7A:75:82
            X509v3 Authority Key Identifier:
                keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/97D35382924311EC927C972FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.238.0/23
                IPv6:
                  2400:5020::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:11:3d:06:04:ce:19:ad:6e:b9:96:f3:e3:c2:01:df:93:ab:
         4e:b7:ca:47:a1:a9:d4:85:30:68:54:52:1f:75:92:c3:3f:bb:
         1e:88:11:4c:9a:8e:c9:f6:5e:d6:3d:86:c1:43:f0:bb:bd:95:
         a6:c1:91:18:f3:97:4f:28:21:ae:be:22:2d:94:77:4e:9d:53:
         7f:cc:7d:cd:6b:42:1d:2a:03:87:6f:1d:22:5d:9d:c5:87:f1:
         b7:19:5a:07:4b:eb:e0:c8:f9:b4:33:b4:a4:20:1c:0e:29:93:
         02:ca:82:0d:5d:11:22:46:59:c3:90:58:50:74:17:2d:f4:1e:
         91:1f:32:5e:ba:a9:6d:43:28:50:1c:a2:eb:d8:e4:c9:90:86:
         b2:db:09:e9:57:1a:53:af:cb:b4:1c:e0:59:26:9c:5d:c7:a5:
         a3:44:e2:9f:9a:aa:c6:4c:4c:6b:39:4e:ac:f3:32:c8:e4:ce:
         03:fa:c8:23:4a:22:8a:e9:27:83:21:49:07:d5:3c:b3:77:c5:
         f8:f2:e5:07:5b:f2:5e:af:c4:c1:9a:0d:f7:00:86:ce:be:db:
         aa:56:e6:ea:e4:5a:48:40:df:06:b5:88:f7:5c:97:49:91:ee:
         ec:17:5a:7b:ee:6e:a0:d3:8d:29:41:62:9f:dd:d6:7c:64:6d:
         91:b7:9c:57
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew
NjlEMDRENTkwHhcNMjYwMjE3MDAyMTAxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGJkMC0wNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFxBP6aY4VVsPTM+Jmi9BAJ0gYt268IksjCxDZIdX0AQ5mo++c2kWlXK7c3J
YHzGSyQ77+WsZzoFUhjQBzW2z5lL4H9WyVYYTCJVod8AjKT726LtZQrvlYuY3CEU
22Gz/x9lat/aAGRUpUiH/ylfOa2Tpf8UfhrRIXYqJXs5hEVi76unDx0xshM1JzbX
LZyUBhQBokjsnk/VFSuWPPd+PwfCTtZvr2QjBnaDVle0RS/BbHsWDVd89eOoVi5u
Gc2AOC+O+3PIPKA18TTHxnAPb1bVRzAMFNfYN0yXXZpDZGTH1oae8CHVjp2Jq97r
2BPXce4+RzUWVSmzZ++7vrkI8QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPfnQti0
LuBUk6jDC3ECRP8RenWCMB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky
NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkZBQ0IvRjU1OThEMDg5MjQwMTFFQ0JFRDREQTJDQzRGOUFFMDIvOTdEMzUzODI5
MjQzMTFFQzkyN0M5NzJGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7PuMA0EAgACMAcDBQAkAFAgMA0GCSqGSIb3DQEBCwUAA4IBAQAx
ET0GBM4ZrW65lvPjwgHfk6tOt8pHoanUhTBoVFIfdZLDP7seiBFMmo7J9l7WPYbB
Q/C7vZWmwZEY85dPKCGuviItlHdOnVN/zH3Na0IdKgOHbx0iXZ3Fh/G3GVoHS+vg
yPm0M7SkIBwOKZMCyoINXREiRlnDkFhQdBct9B6RHzJeuqltQyhQHKLr2OTJkIay
2wnpVxpTr8u0HOBZJpxdx6WjROKfmqrGTExrOU6s8zLI5M4D+sgjSiKK6SeDIUkH
1Tyzd8X48uUHW/Jer8TBmg33AIbOvtuqVubq5FpIQN8GtYj3XJdJke7sF1p77m6g
040pQWKf3dZ8ZG2Rt5xX
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:00 2026 by rpki-client