Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/F2B52DF6CBB611EB94FE6E68C4F9AE02.roa
File:                     F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (raw, json)
Hash identifier:          Xmjn71gL/YQIzR03KwfjQ2azJG6B5XbTMAuZDitsX1c=
Subject key identifier:   BE:CB:57:B6:5C:90:57:DB:93:CA:30:6F:A8:E7:05:D2:89:7B:E0:2D
Certificate issuer:       /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Certificate serial:       0D15
Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/F2B52DF6CBB611EB94FE6E68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:34:52 +0000
ROA not before:           Sun 30 Nov 2025 17:47:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139009
IP address blocks:        103.144.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3349 (0xd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
        Validity
            Not Before: Nov 30 17:47:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45c9c-caa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:ad:d1:e1:1a:b7:08:98:88:d6:78:ce:a0:
                    fa:79:e5:de:07:fd:41:8b:85:17:b0:8e:a5:4d:05:
                    f1:13:70:8f:11:7a:b8:99:be:65:0d:5b:b4:e0:91:
                    e0:86:41:72:1b:c8:fc:69:8f:5b:c6:85:d3:3d:cc:
                    da:f1:9d:6d:f1:90:39:2f:29:b4:d4:ce:d6:38:9a:
                    6b:33:ad:af:93:00:85:a5:2c:09:b0:f8:cc:eb:32:
                    2c:2d:a3:1f:e7:11:c8:1a:fd:bc:51:fd:38:83:bb:
                    19:f8:24:7b:9d:83:5b:6c:55:9b:04:2a:82:9a:5d:
                    60:41:72:d4:f2:c8:57:76:1f:ba:d8:3e:29:bb:9b:
                    11:cd:29:db:6d:47:b6:10:83:b2:73:b5:a6:0a:af:
                    b7:64:0d:2d:d2:88:f2:c9:8a:36:21:0e:57:80:e5:
                    9b:54:ed:c8:73:e2:1b:1b:35:5b:ce:76:30:82:55:
                    54:46:c8:45:63:d9:3f:5d:63:86:16:f3:bb:36:ac:
                    3b:3c:08:57:18:1f:34:ab:3a:d3:d6:69:1d:61:51:
                    f6:94:c1:79:d0:fa:99:30:cb:ab:6d:ae:8d:9c:7f:
                    5b:90:7c:2d:6b:89:61:e0:b2:38:86:11:66:83:63:
                    fc:86:da:0f:00:dc:40:37:b2:25:0a:43:8c:bc:6c:
                    21:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CB:57:B6:5C:90:57:DB:93:CA:30:6F:A8:E7:05:D2:89:7B:E0:2D
            X509v3 Authority Key Identifier:
                keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/F2B52DF6CBB611EB94FE6E68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:98:05:cc:04:9c:2c:0d:ee:76:4a:03:f4:bc:be:3a:04:e4:
         f6:93:a3:a4:71:a4:b1:ea:30:30:57:6e:9e:bf:27:d1:e6:8d:
         d3:83:dc:fa:c3:04:94:4d:e5:40:1c:2c:55:bc:10:9f:7e:f8:
         1f:58:4d:14:ff:2b:78:7a:b8:08:d2:68:23:a1:dc:19:48:fa:
         e5:c8:e8:7a:90:bd:ca:ff:ed:09:9b:f1:8f:43:8b:78:41:b1:
         41:d5:4d:b3:02:72:ac:91:89:93:5c:a1:36:ee:08:82:a0:00:
         bf:04:a8:73:65:60:ff:0b:6e:94:ea:3a:73:99:56:20:c6:fa:
         53:c8:8d:d4:d2:5c:d1:9c:fa:d7:81:8f:20:34:a9:b5:98:e3:
         bc:5e:65:2d:e1:f0:49:6b:ed:f3:7a:4f:43:00:f0:c4:fb:b9:
         c2:16:98:c5:69:be:54:4e:94:c3:5c:f6:08:86:7a:76:cd:d4:
         eb:94:c6:25:be:cd:86:27:44:b4:47:10:91:5b:29:ad:2c:06:
         b9:46:1a:35:17:74:e0:b3:aa:7f:19:d0:81:d3:44:8c:09:88:
         2c:86:4d:84:f8:d0:62:a9:05:14:91:fb:25:67:4b:1c:52:c7:
         50:4c:c6:5a:20:96:3a:1d:1b:73:79:fe:7a:d3:8c:bd:ff:8c:
         58:b5:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:33 2026 by rpki-client