Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/44CF316C29DA11EEAC070054C4F9AE02.roa
File:                     44CF316C29DA11EEAC070054C4F9AE02.roa (raw, json)
Hash identifier:          1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=
Subject key identifier:   00:43:3B:5F:BF:25:D1:77:BF:1A:45:85:BD:BB:7A:33:AC:C1:4F:99
Certificate issuer:       /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial:       021C
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/44CF316C29DA11EEAC070054C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:01:17 +0000
ROA not before:           Sat 31 Jan 2026 03:22:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     17794
IP address blocks:        103.247.92.0/24 maxlen: 24
                          103.247.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
                          rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Validity
            Not Before: Jan 31 03:22:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4389d-4d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:45:45:0a:e0:a6:da:1d:22:2f:11:ac:54:
                    3b:65:35:58:51:ee:59:99:da:97:55:b1:8b:ae:8c:
                    c4:d0:af:54:ba:b9:2b:cb:8c:d8:9e:be:bd:c1:1d:
                    4d:8b:0d:2d:0d:00:75:e3:5e:96:76:39:1a:6f:a1:
                    62:41:ca:0e:82:81:76:ad:89:df:64:d8:dc:47:a3:
                    33:02:92:b2:81:56:12:15:5e:eb:6a:c1:29:b2:7a:
                    e7:d8:d0:73:2e:16:e7:13:ce:9f:70:f3:0e:80:8e:
                    21:37:19:30:3d:a1:f3:af:04:58:2a:1e:9a:38:0f:
                    f2:85:0f:dd:24:9d:f5:5b:18:b2:9a:c9:00:db:82:
                    9c:5a:d4:0c:bf:65:1a:64:95:22:31:f5:25:9d:78:
                    e2:a1:b2:99:6a:f6:d6:02:d5:15:3e:80:2e:42:90:
                    3f:d2:9f:a3:79:e4:99:21:f9:bd:07:bc:31:92:63:
                    65:1a:9c:6c:c3:b1:28:2b:44:46:f5:6d:96:c3:e2:
                    78:f9:b9:6a:07:bb:bd:b3:42:da:bd:35:04:36:cd:
                    3f:73:8b:f5:e9:aa:37:cd:26:dc:50:fb:28:98:27:
                    62:87:ab:c2:1d:b4:d2:d4:e6:1b:fb:37:cb:51:99:
                    84:eb:0d:26:e3:8f:84:78:b7:d3:ba:20:41:80:c4:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:43:3B:5F:BF:25:D1:77:BF:1A:45:85:BD:BB:7A:33:AC:C1:4F:99
            X509v3 Authority Key Identifier:
                keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/44CF316C29DA11EEAC070054C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.92.0/24
                  103.247.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:47:0b:98:67:e7:20:a8:b3:c1:bd:c0:64:56:1b:fa:ae:e2:
         01:c5:53:be:af:20:4e:70:84:66:b3:7b:5a:f9:2a:aa:20:c9:
         cf:91:5f:aa:72:ca:c6:27:fd:67:c5:42:93:21:f9:76:ca:65:
         6f:2c:d3:6c:3b:db:a5:92:9f:ff:ee:6c:64:1e:97:c7:02:56:
         e9:9f:52:82:37:50:88:73:22:a5:0f:f7:24:ab:63:9c:f9:02:
         12:50:f8:62:1f:8f:df:96:a9:12:81:ca:1f:11:7c:0c:f7:b1:
         06:91:6c:6a:88:7b:b2:f7:14:db:a2:37:c0:fa:fe:44:10:05:
         84:80:9d:01:6f:97:93:ab:05:42:03:67:bd:9c:f1:6a:e8:dc:
         0c:28:ff:32:2e:b0:93:48:f7:51:38:f1:d1:29:3b:e8:97:9f:
         8c:88:3f:ca:80:f6:8b:62:4a:c0:c0:68:c6:13:32:9d:85:e2:
         e7:b7:f0:e9:c7:ee:d6:cb:ad:a8:41:3a:48:4d:d9:14:ff:5e:
         48:9a:3b:8a:6e:57:cb:fe:6a:0a:d9:88:6e:79:ed:07:2f:99:
         42:bf:bc:59:94:ef:fa:2b:09:9b:85:98:06:39:fc:96:c1:5c:
         89:09:54:94:47:3d:c0:08:5d:fd:23:f3:79:cd:b7:ee:25:1a:
         ff:04:8c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:34 2026 by rpki-client