Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/200E2B0059A011EC83255663C4F9AE02.roa
File:                     200E2B0059A011EC83255663C4F9AE02.roa (raw, json)
Hash identifier:          UULcaQHNKBDfda2HKLf0hDbfYUd2cHh9DhOCF4t/roI=
Subject key identifier:   7C:92:B8:9D:96:9D:FE:6A:98:5E:24:8C:B1:B0:D8:5A:E7:82:BF:C8
Certificate issuer:       /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial:       0553
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/200E2B0059A011EC83255663C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:07:20 +0000
ROA not before:           Wed 28 Jan 2026 23:20:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147315
IP address blocks:        103.174.206.0/24 maxlen: 24
                          103.174.207.0/24 maxlen: 24
                          2001:df7:d480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
                          rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
        Validity
            Not Before: Jan 28 23:20:03 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46438-16fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:31:a6:6d:95:de:db:3b:b4:50:42:2d:0c:
                    de:3c:c4:d6:93:66:ba:7d:ab:0e:e7:24:5e:d2:6d:
                    69:3e:d6:54:9c:71:4d:2d:05:b8:00:0e:e9:a1:72:
                    fe:ef:34:e3:71:18:1d:16:ea:f9:9e:e6:68:65:fa:
                    d5:b8:46:b1:ed:8b:05:3f:e1:4b:3b:7e:23:d1:a6:
                    5d:60:59:d9:d9:42:83:af:cb:30:0f:c6:d5:29:d3:
                    cf:13:6a:80:a3:9a:e2:00:19:72:1f:e4:4c:38:a1:
                    4a:7b:fc:84:39:b3:f7:f9:d9:aa:b0:f4:92:1a:aa:
                    50:55:8a:4d:87:0f:38:3d:0d:71:0a:a6:e2:08:83:
                    f2:80:20:29:bd:ab:6e:b2:b0:e9:bb:53:6c:8e:56:
                    b4:0c:e5:fa:01:87:50:4d:fa:35:04:d7:0d:00:3c:
                    7a:59:cc:44:2a:fe:a5:0f:3e:75:57:00:3f:fd:e9:
                    22:63:56:7f:dd:37:a7:96:a6:5f:ec:5c:3a:f3:be:
                    91:3d:6f:d4:dc:af:8b:80:96:e0:a3:28:1d:18:de:
                    3e:70:3b:7e:d7:fe:a8:95:d5:ce:ef:66:21:7d:d1:
                    10:6d:fd:9b:98:ca:da:b2:78:b1:6d:82:97:94:b3:
                    11:71:7c:87:5a:e9:ee:e5:cc:52:fa:8c:86:7c:eb:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:92:B8:9D:96:9D:FE:6A:98:5E:24:8C:B1:B0:D8:5A:E7:82:BF:C8
            X509v3 Authority Key Identifier:
                keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/200E2B0059A011EC83255663C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.206.0/23
                IPv6:
                  2001:df7:d480::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:97:be:9f:0c:ca:f5:5b:ae:b3:12:f5:42:98:91:4e:f5:
         f9:bc:fe:d3:bd:35:82:1f:e7:dd:13:80:39:12:36:e3:c7:9c:
         5a:d7:99:27:e9:3e:e2:73:58:04:c9:d2:0e:6a:04:50:85:62:
         30:d5:b6:a9:c3:19:73:c8:32:cd:5c:74:c9:60:92:92:f8:86:
         8e:7d:52:4a:a5:c8:bf:9c:9f:2b:c5:de:2f:50:f4:a5:b9:06:
         84:d2:41:9c:d0:e7:72:e5:1b:d5:21:66:c5:eb:a1:70:98:29:
         29:c0:b8:57:2a:9a:21:3d:a8:c5:b5:b8:2e:b3:e6:0a:15:3f:
         05:3e:b5:4e:ed:a5:94:40:f0:19:5e:00:7b:ec:bc:9c:7d:66:
         f0:17:29:69:3d:0d:a5:34:28:74:86:f3:4b:3d:24:46:fa:c6:
         00:96:b9:cd:da:7b:41:53:62:82:fb:60:f8:d3:6e:4a:87:0e:
         43:ef:e3:16:d9:1d:33:d9:eb:2f:bf:ee:7a:5e:74:be:ed:05:
         8f:20:ad:f8:ab:04:ab:57:c9:fa:d4:5b:14:9b:f7:32:fd:bf:
         75:50:d6:75:3f:2d:dc:69:f3:1b:a2:fa:66:63:4b:10:34:e5:
         26:30:ca:9b:7b:3e:d4:ee:d1:ac:98:ae:d7:66:ea:f1:83:d2:
         dc:fe:12:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:35 2026 by rpki-client