Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/DA1C00CE26F411F097943C73C4F9AE02.roa
File:                     DA1C00CE26F411F097943C73C4F9AE02.roa (raw, json)
Hash identifier:          SGaGLFsVBgEAxApKyS+98dldnAMLdkR3gvl7hPRvv3Y=
Subject key identifier:   6B:82:3F:5A:BD:2D:5D:69:32:2C:D0:26:F9:98:EC:28:8E:38:7F:DC
Certificate issuer:       /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Certificate serial:       01B8
Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/DA1C00CE26F411F097943C73C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:06:18 +0000
ROA not before:           Wed 01 Oct 2025 05:01:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     38715
IP address blocks:        203.173.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl
                          rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E42D, serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
        Validity
            Not Before: Oct  1 05:01:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a439c9-5db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:87:fc:30:99:f6:2f:ab:28:c7:8f:bb:33:33:
                    2c:05:f2:bb:3a:aa:f9:2b:21:86:da:14:b9:d2:93:
                    15:2e:c7:84:03:10:d0:b9:6f:08:43:5a:81:6c:2b:
                    b7:bc:50:4b:62:78:bf:c4:f0:77:6f:e6:b1:fa:b7:
                    8e:b3:32:0c:f8:bb:b3:2b:19:98:68:77:4e:02:95:
                    64:6a:7d:f3:3a:56:76:c4:dd:23:cc:e1:6c:28:3b:
                    ab:df:90:f1:96:50:88:ac:24:30:23:06:87:c3:e6:
                    87:65:29:b2:73:d2:bc:c6:80:02:e9:38:d3:b2:e0:
                    88:50:ad:eb:61:0c:98:c1:23:1b:d5:96:f4:78:50:
                    a6:bb:b7:a1:1e:ea:e5:62:db:14:30:ac:93:8a:e0:
                    f0:d2:db:ad:61:93:0b:b1:70:e4:a2:89:c5:a5:6e:
                    fe:ab:cd:50:79:02:72:8b:0a:c4:0c:1a:b4:52:9c:
                    d0:6d:bd:e9:f3:f6:6c:48:2f:27:a6:91:c4:89:68:
                    2d:16:7b:6c:cb:31:95:1a:d6:1f:5e:ca:1c:dd:f6:
                    27:53:34:bc:1e:6e:aa:bd:af:0b:04:41:9b:a5:a5:
                    ce:c9:d7:2f:ed:23:f2:7c:74:a1:8f:5a:ad:63:31:
                    58:82:a2:23:38:5a:65:4e:c0:c2:19:01:ed:84:54:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:82:3F:5A:BD:2D:5D:69:32:2C:D0:26:F9:98:EC:28:8E:38:7F:DC
            X509v3 Authority Key Identifier:
                keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/DA1C00CE26F411F097943C73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:c5:8b:77:12:d5:26:41:ad:06:3e:eb:6c:53:25:6d:41:12:
         01:28:85:05:9f:64:c3:aa:b4:bd:55:83:79:f3:f4:64:55:51:
         0a:05:d7:0e:66:70:b5:b4:70:6f:a8:76:92:93:b8:49:44:3e:
         6f:82:9e:ae:e1:31:92:d1:86:6a:f3:15:2a:a2:e3:0a:db:a5:
         42:8f:d6:8a:10:94:a5:cd:63:76:65:75:b9:f6:04:81:f6:b5:
         63:96:72:99:71:ff:1f:db:f0:b5:ad:bc:be:09:ab:36:32:7a:
         3b:cb:c2:87:b5:79:f8:32:a2:d4:e9:36:4d:35:94:99:66:5b:
         6d:2a:fd:25:2d:98:a2:c4:bd:d1:f9:96:97:5c:5c:bd:70:30:
         f8:e4:30:27:52:6f:cc:70:ef:78:bc:30:50:4d:f0:99:49:5b:
         a4:ba:cf:76:58:e9:38:d7:72:56:36:5f:28:8a:48:d4:77:ba:
         47:21:88:2a:10:87:83:c5:c7:85:05:99:c6:1a:14:07:97:e9:
         09:d5:4f:63:5b:9c:44:4e:06:f2:43:ac:8c:f1:f3:7d:ea:68:
         40:fb:12:f8:ef:00:28:1c:ce:78:08:2f:e7:84:f3:8a:09:cc:
         b2:43:a9:24:3c:34:7b:92:43:88:21:db:92:56:90:9a:a7:49:
         3c:6e:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:48 2026 by rpki-client