Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/471FC532E6FC11EE84213C0FC4F9AE02.roa
File:                     471FC532E6FC11EE84213C0FC4F9AE02.roa (raw, json)
Hash identifier:          Ec8W4gQuX0b++CAV01O5jV4Wjhz49qlbass79pnKtTU=
Subject key identifier:   C1:47:95:0A:51:EB:51:FB:90:68:C2:50:9B:39:32:40:ED:2D:E1:C4
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0E2B
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/471FC532E6FC11EE84213C0FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:09:21 +0000
ROA not before:           Wed 04 Feb 2026 18:14:54 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152479
IP address blocks:        103.133.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3627 (0xe2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Feb  4 18:14:54 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a472c1-eb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:6b:86:f1:13:39:d9:b6:19:eb:f8:70:9b:
                    66:dd:f8:70:0e:04:84:86:7e:8e:7f:72:5d:2c:7b:
                    42:2f:4d:f5:e0:be:75:d9:57:95:e1:61:aa:01:54:
                    19:8d:1c:7f:72:cc:dc:3d:34:49:9f:10:1a:3d:d2:
                    e2:f3:ff:e0:85:ae:33:2a:6b:d8:18:86:61:18:3f:
                    9e:6a:10:e2:0b:b9:c1:38:91:5e:7c:2b:12:64:4f:
                    aa:1a:53:2a:8a:7b:5a:45:ad:d5:f4:c4:6b:45:89:
                    bf:25:a3:9d:09:46:6a:b6:d6:d2:13:85:60:7d:03:
                    50:18:6e:5f:a6:ab:d8:71:4f:7b:14:c1:ad:6f:35:
                    b7:9c:8b:06:d4:d0:7c:3b:5b:b3:9f:d3:f6:ec:ca:
                    b9:fc:dc:98:4e:3a:60:f1:d7:69:8e:be:cc:f9:eb:
                    ff:77:0f:34:8e:21:95:4c:0d:a9:7b:1e:51:8e:3c:
                    c8:7d:92:37:18:09:e9:5b:ec:7a:06:05:84:20:5f:
                    62:b3:6e:74:dc:49:31:3e:e6:ee:72:ce:59:47:7a:
                    fc:0c:3f:ce:52:eb:7e:03:8d:50:9a:5d:c6:30:39:
                    3c:13:c3:d4:ff:91:64:3e:58:4a:31:36:7a:06:ac:
                    c2:7e:4b:6b:79:2c:0b:16:72:da:25:6a:ff:ae:d1:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:47:95:0A:51:EB:51:FB:90:68:C2:50:9B:39:32:40:ED:2D:E1:C4
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/471FC532E6FC11EE84213C0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d3:c0:9e:d3:68:23:55:df:5b:62:48:71:c9:33:28:5c:90:
         bf:1f:31:18:3e:2d:76:8b:69:df:fe:40:7c:3c:33:5b:48:6a:
         4f:da:18:90:eb:d0:b0:30:05:5c:6c:43:cf:77:4c:7f:9a:22:
         da:9a:6b:ef:ba:ff:ef:1b:20:1b:74:d2:a2:e4:35:6f:c7:65:
         ac:51:30:26:f7:cc:29:a5:23:44:c3:46:a6:6f:7c:55:d7:ee:
         fb:ea:4f:6b:ce:db:d3:40:bd:c9:da:e9:cf:da:fb:6d:29:c4:
         d5:9f:56:4c:1b:cb:68:28:b5:ca:30:ad:9a:95:ee:ad:3f:41:
         02:18:7e:9d:2a:38:4e:ee:50:49:17:ef:43:b9:56:9a:8c:39:
         e0:53:44:da:f9:98:81:7a:c0:ea:1f:80:24:a8:99:71:26:2f:
         61:4d:ba:97:c6:0f:e4:15:98:0a:2b:72:aa:80:47:a9:14:02:
         f3:ac:6d:91:f5:65:94:1b:f9:44:15:a4:1a:9f:b8:58:e5:c0:
         8f:54:7e:8c:05:fb:df:19:5d:9d:cb:5f:15:d5:27:87:4b:b4:
         c9:a9:b9:72:ae:99:1f:7b:0a:a8:fd:ce:98:aa:08:ea:99:9f:
         0d:59:15:14:30:85:46:2b:59:80:49:9a:91:4b:cf:a2:44:30:
         55:ce:28:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:47 2026 by rpki-client