Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/5747D682B8C611F085BFD10DC4F9AE02.roa
File:                     5747D682B8C611F085BFD10DC4F9AE02.roa (raw, json)
Hash identifier:          e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=
Subject key identifier:   A9:76:BC:74:A1:8F:94:B4:DD:46:4C:CB:9A:D7:4E:37:E8:08:37:2D
Certificate issuer:       /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Certificate serial:       AD
Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/5747D682B8C611F085BFD10DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:19:30 +0000
ROA not before:           Sat 07 Feb 2026 07:25:37 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     36224
IP address blocks:        203.105.174.0/23 maxlen: 23
                          203.105.174.0/24 maxlen: 24
                          203.105.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
                          rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
        Validity
            Not Before: Feb  7 07:25:37 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48332-292c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:8f:1d:30:16:6d:ca:97:64:30:d4:fd:c6:
                    03:19:da:57:9b:4a:14:e3:21:3b:81:80:45:62:3e:
                    40:6b:a9:11:53:6e:c6:3d:05:b0:fe:ea:66:4c:f0:
                    31:5b:dc:cc:67:5c:f2:d3:69:19:d1:5f:75:12:31:
                    3e:2a:49:35:bc:33:34:23:63:76:94:ba:6f:72:30:
                    5d:1b:25:6f:f1:96:13:ed:aa:00:90:ad:c9:6c:7e:
                    b3:76:47:3c:26:d7:5a:66:83:c4:86:88:10:58:7e:
                    22:64:67:f4:62:38:1d:0e:2a:5f:d1:b6:ec:fc:7c:
                    a0:f6:12:1f:cc:eb:a3:f7:13:17:ba:30:f7:83:ba:
                    0a:68:5f:ce:9b:43:25:27:21:f8:23:37:2e:48:b3:
                    76:4a:42:b8:36:27:9e:dd:bb:da:29:49:1a:76:0c:
                    ee:84:c7:9d:ff:a4:5f:4d:8e:af:a4:97:63:dc:8f:
                    22:92:05:7a:42:e3:8a:86:82:59:02:d6:fd:6b:2e:
                    2f:ae:0e:89:32:f2:b1:c1:be:5b:f3:1a:16:8b:0b:
                    97:f9:27:64:77:0d:38:a5:bc:1e:e9:01:53:6e:34:
                    b7:a4:66:c7:01:e1:c5:40:0e:82:ac:cc:c4:2b:1d:
                    0b:53:6f:db:1f:d6:90:ec:6a:55:96:1a:7b:33:d8:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:76:BC:74:A1:8F:94:B4:DD:46:4C:CB:9A:D7:4E:37:E8:08:37:2D
            X509v3 Authority Key Identifier:
                keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/5747D682B8C611F085BFD10DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.105.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:28:4a:79:5b:3f:45:1f:3c:f4:23:fb:48:f0:f0:3d:94:
         5f:fa:0e:5b:45:0d:4c:59:3b:8b:79:76:92:d2:b8:9d:a0:44:
         68:b4:32:e7:5e:ba:3c:9a:4e:d3:b5:4e:df:7e:fa:17:f2:4b:
         92:3f:1b:14:25:3b:c0:31:e7:e6:36:c6:e6:eb:0f:87:43:d8:
         b3:dc:23:b0:1f:07:01:a7:bc:63:d2:cf:78:79:e7:f9:8b:71:
         4e:ca:ed:f2:47:ec:d1:00:44:bc:5d:df:78:78:a8:7c:8b:fe:
         14:fc:86:1b:f7:0e:81:06:29:85:43:55:47:3f:c4:e9:ca:a5:
         30:3e:95:43:18:7a:d6:67:1c:3b:96:9d:73:64:8f:f3:8d:8f:
         2b:8d:16:e7:35:16:97:99:15:06:93:76:d2:21:66:7c:66:be:
         a9:3e:bb:3a:91:ec:0f:2f:dd:03:c9:49:26:0c:a2:84:b7:7d:
         5b:33:1a:70:d9:8e:ec:e4:e0:29:9d:ec:d2:da:65:e6:66:53:
         d1:3b:23:dd:65:9a:b8:c6:bd:a0:5a:38:76:ad:c2:a0:24:3a:
         41:53:d8:5f:31:e0:77:c2:bc:92:19:70:b4:28:41:21:8b:e6:
         aa:75:7e:f7:37:28:24:fe:a3:45:60:ff:9e:73:b8:00:59:eb:
         21:af:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:47 2026 by rpki-client