Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/C154DA14E85C11EBA2171A25C4F9AE02.roa
File:                     C154DA14E85C11EBA2171A25C4F9AE02.roa (raw, json)
Hash identifier:          IPxwuDAs+rs/dWI7IwZQIjs7sZfbx/rQmmj734bJ2/s=
Subject key identifier:   E5:67:60:42:35:FE:B9:C5:74:AD:1B:EE:44:22:81:3A:82:FE:9C:CE
Certificate issuer:       /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Certificate serial:       1DD6
Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/C154DA14E85C11EBA2171A25C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:49:09 +0000
ROA not before:           Wed 18 Feb 2026 16:13:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136796
IP address blocks:        103.81.184.0/22 maxlen: 24
                          202.144.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7638 (0x1dd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
        Validity
            Not Before: Feb 18 16:13:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47c15-8532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:d9:19:8a:d3:d6:43:61:cf:4b:70:ad:13:
                    77:85:33:80:76:01:dc:7f:61:00:7b:9f:92:17:a2:
                    f0:16:40:0b:66:a7:78:9d:f6:75:d4:a8:ff:ae:1a:
                    ec:00:0a:89:48:d7:17:67:bc:57:16:e2:f1:45:30:
                    eb:de:da:c1:06:0e:00:9d:66:b9:6f:7f:cd:70:f1:
                    81:69:48:db:ff:dd:17:03:5d:3c:a4:bd:42:a7:c2:
                    39:e5:73:69:11:38:e1:65:69:7c:5d:46:08:dc:4d:
                    56:20:23:63:ea:43:4d:32:16:a5:bb:99:80:c2:ee:
                    94:38:6b:21:cf:61:2f:3a:8d:6d:f9:ca:8e:e2:e2:
                    68:8c:93:de:44:81:ea:1f:5d:3a:29:67:f7:bf:11:
                    b6:89:a7:ff:ae:0a:eb:74:41:f1:12:8e:93:b6:f3:
                    85:be:b0:8d:b5:eb:ea:38:07:58:a0:06:26:d6:fe:
                    00:41:35:f6:2d:c1:40:ae:c8:18:14:16:97:ae:4c:
                    0c:54:18:29:c4:88:6e:e9:1c:ab:cf:d2:88:77:be:
                    55:d7:c2:c3:79:8c:31:58:c7:43:fa:a9:da:96:34:
                    3e:8d:2b:9b:52:8b:77:6d:8d:ac:b4:ba:66:8b:0c:
                    76:a8:86:fd:a3:e4:57:80:cd:88:a6:77:44:fb:3d:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:67:60:42:35:FE:B9:C5:74:AD:1B:EE:44:22:81:3A:82:FE:9C:CE
            X509v3 Authority Key Identifier:
                keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/C154DA14E85C11EBA2171A25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.184.0/22
                  202.144.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:b1:32:0d:c1:e9:6b:50:a8:62:e4:fe:27:0f:6e:fa:3e:
         d9:5a:17:f3:ea:ec:7a:30:2d:94:ed:eb:86:4e:97:0d:88:82:
         f2:e3:6b:ac:4d:b9:2d:a9:64:41:51:3f:dd:cb:40:55:3b:a4:
         4c:44:5c:05:cc:21:61:ee:7c:de:19:95:83:24:50:e3:bb:7c:
         78:2c:90:65:6b:c4:fb:69:1c:dd:c3:a8:39:b2:48:5a:8d:8f:
         45:6e:b6:92:d9:c0:73:fa:95:85:38:9d:0f:90:72:06:60:ca:
         32:88:8d:16:ff:4d:be:59:92:50:34:00:87:5a:71:53:d2:c0:
         7b:d3:bb:90:73:40:f5:3b:35:fb:5f:61:71:1c:f3:f6:2b:e9:
         20:3b:25:54:99:60:5e:00:37:5c:05:73:6e:4f:91:6c:34:3e:
         5b:90:d3:af:3b:6a:c7:a7:88:46:8a:67:a2:b3:4d:9d:c6:7a:
         9a:fd:a9:15:99:bc:bc:05:9d:87:e3:34:24:9f:da:a4:17:51:
         b1:52:3c:28:d5:15:a2:8c:4c:c7:23:fd:85:f4:e7:94:e7:b5:
         1c:1b:4e:ec:17:d0:74:2f:12:c7:13:dd:e3:46:76:69:a0:d9:
         fe:03:99:32:28:68:28:81:5d:48:cf:ea:7e:5c:c1:6a:5c:e2:
         2f:d5:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:18 2026 by rpki-client