Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/F03F059C391D11EF9A100142C4F9AE02.roa
File:                     F03F059C391D11EF9A100142C4F9AE02.roa (raw, json)
Hash identifier:          T7BwJK11EDbjjMgak9Jz0bcyVcfswjNufbC7s1jOmog=
Subject key identifier:   28:0C:B0:A0:D5:02:91:E1:DB:1F:44:5D:A8:5E:D5:7F:5C:8B:66:E4
Certificate issuer:       /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
Certificate serial:       014D
Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/F03F059C391D11EF9A100142C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:03:29 +0000
ROA not before:           Wed 11 Feb 2026 00:20:18 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149501
IP address blocks:        103.181.74.0/23 maxlen: 23
                          103.181.74.0/24 maxlen: 24
                          103.181.75.0/24 maxlen: 24
                          2001:df0:6ac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80, serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
        Validity
            Not Before: Feb 11 00:20:18 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48d80-2601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:6f:6a:a0:9d:c5:9b:fc:4b:37:aa:4a:0a:
                    0c:be:36:97:eb:67:d6:67:38:a9:77:cf:b0:bb:04:
                    f1:d1:e1:ae:ba:e0:4c:66:af:46:93:b6:d1:6b:74:
                    4b:04:eb:2a:6c:f6:f5:52:81:b3:49:87:d8:6a:3b:
                    79:73:c4:b8:f5:f5:6a:02:a3:11:4b:65:43:f0:f1:
                    7e:4f:5d:38:cd:1d:23:99:a6:61:22:de:85:f7:a8:
                    e9:37:cf:fb:3c:df:1c:88:51:e2:21:ee:ce:fa:18:
                    f0:95:b3:e0:b9:68:01:99:54:ae:aa:bd:37:32:e4:
                    88:59:c6:71:ff:74:0c:12:f8:9b:cd:8a:31:76:b7:
                    0e:0a:95:55:6a:15:0c:99:36:19:aa:d2:f0:24:e1:
                    3f:1e:80:65:d3:21:24:ce:8d:08:cd:8e:12:4c:7e:
                    24:f1:8b:c5:ba:92:86:71:d2:f1:f2:7b:1d:b1:48:
                    e8:e1:67:e7:50:4b:c8:04:ad:15:0c:a5:55:1c:37:
                    0c:15:8c:d6:ca:49:69:00:05:8d:ae:c6:cb:5e:4a:
                    d4:9e:e9:da:35:66:50:72:88:28:b2:77:9f:30:a9:
                    0f:8a:11:8d:46:7a:d3:6d:45:8e:aa:17:25:fe:ce:
                    80:92:6f:b0:3e:a4:77:71:d0:2d:59:2c:77:df:25:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:B0:A0:D5:02:91:E1:DB:1F:44:5D:A8:5E:D5:7F:5C:8B:66:E4
            X509v3 Authority Key Identifier:
                keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/F03F059C391D11EF9A100142C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.74.0/23
                IPv6:
                  2001:df0:6ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:43:7b:88:eb:a1:ba:59:84:ba:f7:77:b7:88:0e:c7:ef:b7:
         88:77:4e:50:ea:60:39:77:b1:d5:aa:3f:44:06:8f:20:62:f5:
         1c:ec:52:45:3b:5c:4d:8e:79:3d:4e:ce:cb:74:27:97:04:4d:
         1d:67:c9:73:ca:e2:96:53:52:1a:46:23:53:cb:a9:29:b5:30:
         7a:ca:cf:d5:9a:51:f1:1e:89:7a:3d:39:d9:52:80:00:e8:f2:
         30:2e:02:36:9e:1e:25:f9:35:f1:ca:00:53:1e:be:19:6f:be:
         91:77:0d:85:94:ec:90:3f:97:d3:a4:38:3e:c1:4d:a9:6f:cd:
         df:11:74:30:ba:21:39:77:d6:88:9d:5e:d9:81:20:77:d7:c7:
         2c:6c:d9:02:73:4e:78:b5:f3:08:64:03:72:6e:21:3d:f8:6e:
         68:90:9b:8d:ba:0c:e8:0e:d1:cd:5a:7a:bc:3a:ec:9c:59:c7:
         f5:21:cc:e4:76:49:ad:dc:c5:0d:0f:3f:43:db:72:6d:5d:73:
         fe:a7:0a:1d:5d:0d:a0:af:43:5c:c1:69:51:ba:8d:b5:a1:a7:
         65:47:75:cb:45:56:ec:1d:bb:9f:ac:c8:28:fd:b5:30:41:be:
         67:2a:5a:ca:8c:17:c1:08:51:48:ed:4b:d6:66:04:ba:1f:5e:
         b0:42:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:39 2026 by rpki-client