Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E56CD3E8FF8311E9B1B99628C4F9AE02.roa
File:                     E56CD3E8FF8311E9B1B99628C4F9AE02.roa (raw, json)
Hash identifier:          yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=
Subject key identifier:   A0:CD:03:C0:73:7F:E3:87:5A:86:0E:8D:43:D0:AB:0F:34:3E:D8:21
Certificate issuer:       /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial:       0D03
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E56CD3E8FF8311E9B1B99628C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:58:32 +0000
ROA not before:           Mon 12 Jan 2026 18:15:03 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133043
IP address blocks:        103.126.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
                          rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3331 (0xd03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
        Validity
            Not Before: Jan 12 18:15:03 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46228-7af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:5b:d3:80:a3:73:55:af:9d:dd:8c:a9:3d:
                    af:67:6d:f6:a4:82:d4:ee:4b:c8:36:f5:75:06:5e:
                    c9:73:1b:a9:62:b4:77:3d:40:c3:5d:eb:ab:13:d9:
                    17:12:42:3f:41:11:04:35:5a:b0:c1:17:c2:a0:59:
                    ab:0b:c1:b3:ed:ac:e7:a5:10:70:0c:48:f1:a9:7e:
                    ab:9d:fb:51:51:10:73:28:ab:81:ed:36:be:36:cb:
                    80:3f:99:26:ba:b8:ee:15:5e:42:7a:de:f2:45:ec:
                    0c:24:a6:fb:6d:58:10:8f:18:4e:05:dd:39:bb:dd:
                    e4:00:fb:b7:f8:ba:4b:80:f7:76:eb:60:b3:a2:4b:
                    f8:4d:e1:64:33:7b:97:7c:c2:39:e5:a1:2b:26:71:
                    47:38:02:33:82:09:29:f7:a7:8d:39:d5:ee:09:cb:
                    88:a4:b9:c7:2a:49:80:1a:00:bd:4e:ca:ef:d6:60:
                    66:b9:e3:ac:f7:5d:27:4b:56:1d:3f:22:87:cf:88:
                    cd:67:06:72:22:6d:08:e3:a4:f6:03:37:bc:d0:20:
                    c5:e8:ce:b9:5a:e3:7c:b0:ac:ad:5a:b0:bf:0a:7f:
                    9f:f4:6b:ad:2c:d4:11:c1:74:a6:0d:1a:18:ec:8c:
                    1d:58:d9:9f:88:e0:ce:da:ba:38:b3:31:0b:89:fa:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CD:03:C0:73:7F:E3:87:5A:86:0E:8D:43:D0:AB:0F:34:3E:D8:21
            X509v3 Authority Key Identifier:
                keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E56CD3E8FF8311E9B1B99628C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:a5:91:8b:a1:5a:ba:34:b6:97:11:39:6e:8e:b4:e2:6d:
         20:fc:1e:a5:c8:a0:1c:ab:db:f6:3a:bc:f4:ac:94:40:2e:d9:
         5d:db:84:c9:fc:b4:ee:e9:6f:07:06:e0:51:03:7d:48:3c:d8:
         fb:96:15:b7:48:da:a5:76:1c:1c:af:93:63:12:da:70:0b:83:
         e3:cb:c3:8d:3e:13:00:38:61:da:96:14:e1:40:4e:de:05:57:
         05:a2:6a:a9:fb:86:f5:eb:27:71:f2:36:fb:4e:00:00:8f:f3:
         a6:14:a5:f2:b3:41:71:7b:3d:d1:f6:7b:5d:71:52:83:2d:68:
         f2:22:f7:c3:96:71:26:59:e8:76:e7:ab:ef:d3:bc:b7:68:5c:
         1d:b9:2b:62:0a:38:0d:08:a3:98:c9:c4:06:05:88:1c:f5:40:
         e5:33:63:f6:89:21:51:34:9f:91:4a:f9:c1:96:b2:bf:89:b3:
         95:ed:84:8e:52:4d:09:34:32:41:55:54:5e:eb:32:2e:df:21:
         f9:2e:5a:af:84:88:24:69:88:81:87:54:77:ba:64:fd:8e:f8:
         e6:98:62:f8:c9:43:d5:bd:bc:a9:c9:31:90:19:bb:fd:ac:04:
         c6:6c:19:09:e1:a3:1a:de:c1:bc:b0:22:c6:a0:6c:97:ac:61:
         13:0e:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:36 2026 by rpki-client