Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/4ECD37E0B13D11E59299870AC4F9AE02.roa
File:                     4ECD37E0B13D11E59299870AC4F9AE02.roa (raw, json)
Hash identifier:          whabSfJZZUmEcENnSL6elVe6Rz4BQWYC8eWUhtMr2Qk=
Subject key identifier:   C8:69:0E:02:2F:22:FE:B2:7C:92:60:85:6B:F1:04:72:22:8C:2A:D8
Certificate issuer:       /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Certificate serial:       3005
Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/4ECD37E0B13D11E59299870AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:37:56 +0000
ROA not before:           Mon 14 Jul 2025 15:52:11 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     131454
IP address blocks:        103.27.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
                          rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12293 (0x3005)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
        Validity
            Not Before: Jul 14 15:52:11 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a44133-8cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:5f:c4:64:ae:a7:c1:b8:b0:4e:a7:6b:4f:
                    b4:2e:b6:f1:9b:72:7e:d3:04:1e:42:ef:1f:1e:3e:
                    c4:05:ae:83:43:54:17:d4:11:10:4a:c5:32:58:00:
                    64:ef:77:49:3f:9b:b3:e7:ad:dd:39:3e:24:67:71:
                    b5:b1:16:7c:40:c2:95:12:e1:56:c1:50:14:6a:3e:
                    eb:63:06:e8:23:1f:cb:23:69:4d:ad:7c:0a:1e:39:
                    19:2b:e3:e0:11:64:9b:6b:f5:f6:9f:e8:4e:09:e9:
                    f5:dc:f4:d5:d4:c2:46:43:bc:55:03:5d:11:53:9e:
                    cf:70:0c:ca:fe:90:e0:91:c9:7e:82:a1:40:0e:25:
                    97:60:ec:ce:24:d7:a4:57:0f:1c:28:6c:d2:4e:b5:
                    d4:ca:c2:f8:42:9c:4d:6f:50:ed:bd:b5:7b:3f:da:
                    13:a4:0e:f8:38:47:1a:29:71:dc:f4:55:ed:b3:68:
                    73:11:de:17:9a:cc:5b:e9:81:b8:22:7e:89:06:fb:
                    6b:12:1f:40:42:32:8a:ef:cd:95:12:68:de:97:f4:
                    ac:49:b5:b0:8f:42:54:69:e1:2b:5f:4e:d9:05:48:
                    0b:3d:81:c5:1f:85:3a:bb:ca:1f:14:92:20:8f:98:
                    2b:6b:a6:52:81:81:76:03:53:0f:c6:c1:c6:11:d3:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:69:0E:02:2F:22:FE:B2:7C:92:60:85:6B:F1:04:72:22:8C:2A:D8
            X509v3 Authority Key Identifier:
                keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/4ECD37E0B13D11E59299870AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:04:6d:07:35:78:d7:c4:ee:63:c4:d8:eb:2f:58:ac:51:18:
         0c:2c:6c:ab:ad:1d:34:ba:40:0b:42:52:eb:f8:64:6b:5c:6c:
         a2:7b:fa:47:15:c3:d0:09:e1:a1:a3:65:e7:9b:ec:c7:ec:b3:
         d2:6d:3f:33:2b:db:f2:6e:2b:0e:dd:e3:1f:a8:c7:72:86:78:
         a7:26:92:1d:5d:91:32:9b:03:e9:25:b8:93:57:cf:32:a8:d2:
         9e:f4:e2:a2:8e:9f:f6:40:7d:24:79:5b:7a:39:ca:2c:4c:ef:
         8f:d1:fc:8b:17:ed:fc:be:a3:89:56:c7:fd:8d:bb:01:5c:50:
         20:dc:34:f4:62:f8:82:2b:01:20:db:1f:c7:79:b2:f2:8c:9e:
         7d:d5:b7:07:79:c9:eb:5c:44:b4:f1:86:d9:f4:bb:9e:22:49:
         1f:81:42:90:e3:2c:75:f8:da:ef:bb:e2:3b:c6:9e:02:46:0f:
         53:3e:04:35:71:29:c2:25:76:40:2d:63:f2:73:7c:5d:bb:11:
         79:ae:b0:36:4a:69:72:7b:a5:4e:c7:2f:a8:57:07:4d:e6:b9:
         b5:22:c0:e4:5f:3e:99:c3:6b:80:62:23:96:f5:bc:d0:5f:bc:
         be:6b:07:17:14:a8:fb:c8:c7:5c:a6:61:67:70:9c:42:5b:23:
         54:c9:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:23 2026 by rpki-client