Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/49E05638EA0B11F09069D0EA6F6F56BC.roa
File:                     49E05638EA0B11F09069D0EA6F6F56BC.roa (raw, json)
Hash identifier:          5lCa0uM9qsyo4Ls9OwY1shMD+q998RLPGqM4GruFZ8A=
Subject key identifier:   A9:03:7A:45:48:15:FB:63:FD:80:1F:F1:06:07:95:19:34:C7:5C:11
Certificate issuer:       /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial:       0BDF
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/49E05638EA0B11F09069D0EA6F6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:34:24 +0000
ROA not before:           Wed 21 Jan 2026 08:40:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.23.72.0/24 maxlen: 24
                          103.23.73.0/24 maxlen: 24
                          103.23.74.0/24 maxlen: 24
                          103.23.75.0/24 maxlen: 24
                          103.246.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
                          rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3039 (0xbdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
        Validity
            Not Before: Jan 21 08:40:55 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a486b0-4134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:4c:32:b7:3f:af:c1:b3:17:4c:04:e7:84:
                    9d:5d:cb:9e:ce:4b:31:e5:42:cc:23:ca:5a:34:8a:
                    f4:01:7c:7d:23:4c:d4:50:8b:45:fa:73:4c:aa:a5:
                    15:48:b4:d8:cd:25:97:c7:16:a9:58:cb:32:d7:1c:
                    61:bf:12:64:be:81:fc:92:f2:5b:39:03:a4:81:51:
                    2d:7b:9b:4e:e8:2c:6f:d3:2e:2d:72:57:2c:94:a2:
                    f6:be:79:5c:b4:fc:88:ed:76:e3:19:9a:e0:44:1f:
                    15:08:14:0e:4e:05:e1:26:b1:90:06:bf:00:6a:33:
                    5d:f1:18:a5:0d:1b:38:fd:9b:27:b1:18:b1:09:cb:
                    8d:9e:fb:f1:a7:7a:bb:f0:5e:ce:51:75:3e:bf:92:
                    c0:03:9e:ed:da:3c:22:99:90:b3:03:95:29:79:5c:
                    fb:94:e6:b9:d5:a8:dd:ba:7d:ea:96:90:cd:66:37:
                    f3:9e:f7:05:93:e2:0e:00:3c:9e:d5:05:e3:77:fa:
                    b4:a2:a3:4e:85:4d:5b:8e:16:ae:54:5c:e3:55:5c:
                    1a:d6:de:bc:0c:61:85:99:36:ac:2a:f7:59:dc:23:
                    1d:47:67:91:ed:fb:e0:56:d7:a2:46:70:84:82:3a:
                    b2:ad:47:79:4b:44:c5:1c:e6:92:75:74:81:8a:74:
                    cd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:03:7A:45:48:15:FB:63:FD:80:1F:F1:06:07:95:19:34:C7:5C:11
            X509v3 Authority Key Identifier:
                keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/49E05638EA0B11F09069D0EA6F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.72.0/22
                  103.246.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:fb:e5:8b:52:40:ff:a1:3b:5c:b8:ed:67:a6:b9:3f:23:f7:
         1d:c6:29:67:68:4e:fa:a2:ef:1f:fb:db:6d:2f:b4:67:a4:b0:
         37:8e:d6:fb:d3:4c:eb:83:e5:16:7e:a2:e7:18:b1:55:0c:e1:
         fb:22:d6:5e:a7:eb:d7:7e:0a:9e:bc:2d:99:89:3e:f7:b6:f5:
         a4:92:1c:7e:12:49:fa:13:93:f4:90:cd:45:f9:2e:81:fb:09:
         09:b8:71:1d:86:8e:92:24:b2:ca:04:ec:49:55:3e:45:6e:2e:
         95:6d:2d:48:0a:a9:47:80:67:9f:d2:ea:6c:65:cd:93:29:54:
         88:3a:61:31:10:7b:ba:30:83:a5:e6:64:03:dd:dd:1d:49:5b:
         59:64:c3:b4:d9:2d:b3:a4:07:92:74:de:a3:6d:c2:ec:ad:79:
         82:fc:89:df:09:6b:f8:25:bf:f5:88:5f:c7:f6:64:53:e6:e3:
         64:00:e1:8d:0b:f0:1d:9d:f7:62:92:f2:dd:00:fe:09:19:a9:
         ea:f5:ca:0c:c2:95:a6:8c:b8:85:ea:0c:3f:fa:8f:fe:e9:36:
         a7:c4:0a:1f:b6:4e:7f:a5:44:0a:c8:06:f0:50:2e:84:2c:af:
         45:e0:ec:3a:53:79:20:4f:e0:67:09:ae:6c:4e:78:b2:81:b6:
         1a:04:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:20:25 2026 by rpki-client