Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/CF257402276E11EEBE7B7B49C4F9AE02.roa
File:                     CF257402276E11EEBE7B7B49C4F9AE02.roa (raw, json)
Hash identifier:          tSRgGzOhLs6moPs3c2f7rXoICY7UOY0speuEy5ZJlC4=
Subject key identifier:   69:80:02:D2:C9:AF:C2:8B:2E:76:DB:C9:D6:98:57:43:CE:5A:12:0E
Certificate issuer:       /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Certificate serial:       0D33
Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/CF257402276E11EEBE7B7B49C4F9AE02.roa
Signing time:             Tue 10 Feb 2026 18:15:31 +0000
ROA not before:           Tue 10 Feb 2026 18:15:31 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135386
IP address blocks:        103.133.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3379 (0xd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
        Validity
            Not Before: Feb 10 18:15:31 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698b75c3-4e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:06:d1:81:4d:7d:00:e7:97:9f:18:b0:de:
                    3e:04:1c:a9:b0:4a:5c:bc:30:bb:79:9c:21:57:01:
                    82:0e:ac:83:9d:e7:a0:e3:d6:5f:f4:30:1c:74:09:
                    fe:b2:42:00:2c:d6:34:4b:0c:41:35:4f:df:e3:88:
                    16:47:90:df:12:bd:c3:68:7c:c4:e9:7c:42:e8:73:
                    b2:26:86:e7:7b:85:8b:0a:81:b4:69:b7:e9:2f:19:
                    26:02:e9:84:db:d0:17:a9:0e:25:3e:67:d3:17:7b:
                    58:bb:aa:61:c4:f6:2b:24:de:20:e4:52:27:b1:58:
                    50:27:04:9d:9e:7c:f8:ef:4e:d4:07:c4:bf:6f:82:
                    cb:bd:c6:5c:76:07:a1:19:03:10:f6:a8:0f:02:28:
                    bf:d0:d2:24:fc:69:83:0b:82:3a:53:0b:05:96:48:
                    a7:12:24:13:c9:33:3b:b5:5f:1e:e5:0f:c7:a4:95:
                    74:f9:3e:1f:07:fd:9e:0e:2f:8f:50:5c:fc:08:eb:
                    8f:fd:da:e7:bf:11:cf:e1:44:57:41:47:e2:c6:f2:
                    3c:7e:62:b7:d0:79:a3:02:b7:39:9b:9d:31:bc:e2:
                    71:f3:1b:69:e9:bb:e9:a8:09:c4:61:cf:1a:35:9e:
                    45:af:d6:04:01:09:fb:aa:bd:cc:1b:1e:32:e0:8e:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:80:02:D2:C9:AF:C2:8B:2E:76:DB:C9:D6:98:57:43:CE:5A:12:0E
            X509v3 Authority Key Identifier:
                keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/CF257402276E11EEBE7B7B49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:2d:a8:b2:7f:87:0d:73:ef:81:cc:86:84:41:e9:86:26:8a:
         ea:7d:39:1f:07:07:17:13:87:ea:65:3c:d9:fb:f0:00:39:15:
         73:38:fb:b9:f0:0d:ee:61:e9:69:08:11:75:80:78:77:16:50:
         06:f6:a2:b0:e2:fb:8f:b0:f9:81:90:99:c7:e6:42:02:40:60:
         fd:60:d7:fe:f3:b6:4a:74:14:68:ff:64:ec:df:50:0e:90:9f:
         2b:44:c1:49:1a:5a:a7:8f:bf:77:5d:6e:17:64:15:a9:a2:00:
         01:16:83:a3:7c:de:73:95:e5:82:a2:ca:c1:61:89:fc:c0:8f:
         0b:22:8c:e7:3c:cb:4e:e9:88:20:db:1a:fb:92:21:14:d5:ec:
         a3:56:6f:7c:64:54:c9:a0:bd:ab:48:71:ee:6c:6b:16:8a:6c:
         63:bb:7b:cc:08:ae:1d:03:93:7e:1d:a0:fa:0b:8b:a3:43:8d:
         f3:0c:71:91:29:2b:ef:49:07:8a:ea:6a:39:a2:80:b3:42:d7:
         09:0b:1d:fa:f2:5a:d8:69:a2:85:81:24:e8:da:28:59:13:26:
         cc:e7:3f:b3:e6:cc:41:ac:3e:56:84:41:7d:ca:b8:ae:b2:2f:
         fb:af:bf:f1:ab:74:96:fe:15:e0:86:bf:cb:26:c7:74:fb:3b:
         f0:95:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:47 2026 by rpki-client