Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/48EFF31A621B11EF8FB5117AC4F9AE02.roa
File:                     48EFF31A621B11EF8FB5117AC4F9AE02.roa (raw, json)
Hash identifier:          67g+qKVwsfhFWOuOMEWITQ1nmAIPrEarQJhLRzQm0IY=
Subject key identifier:   45:FC:26:74:A6:C1:8A:33:12:7B:95:E1:20:B3:C3:CE:FB:F6:CA:3E
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       07D3
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/48EFF31A621B11EF8FB5117AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:00:56 +0000
ROA not before:           Sun 04 Jan 2026 21:17:29 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142019
IP address blocks:        103.205.18.0/24 maxlen: 24
                          103.205.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2003 (0x7d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Jan  4 21:17:29 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47ed8-8459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:08:28:3e:f7:3b:75:8f:d8:f2:12:ec:e9:
                    79:b8:b1:15:b1:3e:d4:5d:30:66:46:58:97:31:b9:
                    70:33:02:6e:ab:94:78:cd:cb:77:75:de:07:a9:e8:
                    7e:bf:3b:9c:22:05:e6:b7:e3:e4:ef:ac:0c:37:1e:
                    fa:03:c8:2b:66:27:15:77:e7:5b:02:86:6d:62:a8:
                    62:43:3b:b3:cc:7f:c3:b6:50:2e:c2:eb:ab:c9:34:
                    fd:74:73:5b:c3:5c:e8:41:20:fd:70:12:fa:33:cf:
                    d9:27:c2:09:ce:7a:26:2b:12:17:62:8b:39:80:f1:
                    dd:f6:7e:e8:a3:eb:cc:64:17:e9:af:50:8d:25:fb:
                    52:cd:a8:0c:92:1e:11:ff:97:59:71:08:32:53:6c:
                    4b:76:39:b6:42:82:46:ed:3e:69:d8:c7:27:fd:81:
                    6b:03:6f:9b:21:4d:d3:06:1e:f5:5b:12:2c:36:51:
                    ad:1b:c2:f4:86:d7:3d:a6:2c:f5:8c:00:75:e2:ff:
                    3d:49:e8:0e:a2:33:a7:4e:f4:8f:e5:13:53:74:54:
                    51:7f:17:eb:ac:07:22:79:87:12:a4:f4:b5:36:ad:
                    eb:90:cc:fc:e1:54:77:b5:79:09:5c:37:b8:ea:22:
                    0b:e7:e8:24:99:ef:3b:75:5b:a0:b4:97:ef:cb:fe:
                    df:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FC:26:74:A6:C1:8A:33:12:7B:95:E1:20:B3:C3:CE:FB:F6:CA:3E
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/48EFF31A621B11EF8FB5117AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:13:58:4f:b0:88:be:69:eb:15:46:a2:35:b8:d9:1d:45:f9:
         d8:c3:8f:1c:c0:a7:f1:96:a8:3f:10:78:5d:bc:7b:2f:54:0f:
         64:d4:cb:66:93:c9:6b:97:69:31:54:10:1d:bd:b5:55:e7:53:
         6c:36:3c:21:a0:84:21:2e:ba:8a:8f:a2:e8:6b:9d:76:0d:69:
         5a:ef:65:34:99:54:2f:66:bb:99:73:a6:64:15:3f:ce:88:a9:
         7e:c9:b5:65:f8:dc:53:48:66:bb:9b:0c:9b:8a:a3:dc:c6:cf:
         37:10:97:72:26:bb:c0:0e:e5:57:11:d0:8c:c3:21:1f:17:4a:
         e1:bf:7a:84:c9:06:1b:5e:13:9a:8a:5b:25:a0:bc:f2:d2:d1:
         92:ca:95:d2:7f:68:22:42:ce:3f:d1:e4:48:4b:57:3c:ae:be:
         ec:f2:e2:10:25:de:2c:06:0b:f1:87:8a:d9:c6:51:8a:3c:70:
         85:61:f5:38:68:b2:4b:13:a7:f6:c7:75:9b:5e:1f:7c:6d:91:
         38:45:1f:68:2e:88:ff:f6:6b:9c:28:25:4e:49:b6:1b:86:d3:
         78:f3:7f:7c:b9:91:a3:b1:68:b9:fb:d6:35:8b:6d:e5:54:59:
         66:73:3d:30:ec:c8:cc:3e:bd:1a:de:41:9c:0e:fc:5f:46:3b:
         62:9d:80:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:33 2026 by rpki-client