Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/BA9447BCA7D111EB8F85BA22C4F9AE02.roa
File:                     BA9447BCA7D111EB8F85BA22C4F9AE02.roa (raw, json)
Hash identifier:          G5KtMwriq0N6l25zffNg7VVDY9p7lXbgrSGO9joeZg4=
Subject key identifier:   A6:14:38:56:5D:A0:95:BA:09:73:F5:BB:77:19:CA:0E:AD:90:21:68
Certificate issuer:       /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial:       06AB
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/BA9447BCA7D111EB8F85BA22C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:57:18 +0000
ROA not before:           Fri 30 May 2025 23:33:25 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142061
IP address blocks:        103.166.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
        Validity
            Not Before: May 30 23:33:25 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a453cd-2245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:5d:d0:5f:da:23:83:2d:d8:ae:89:62:b8:
                    16:d6:c2:97:6b:52:45:10:a7:91:a7:f6:73:62:d8:
                    a3:84:8e:9c:bd:c0:c8:aa:63:be:46:9e:f5:ba:e9:
                    a8:bc:b5:16:de:d7:67:22:18:1c:c5:1b:c5:f9:84:
                    e9:b2:14:aa:a9:44:9d:ae:ca:d3:a4:db:3f:55:51:
                    a3:57:96:9e:22:aa:5d:2b:45:a1:8c:b2:2b:30:1c:
                    f7:10:1f:13:ac:e0:97:a7:6c:15:67:56:6c:f4:be:
                    b9:b6:db:63:61:3f:e5:2a:c6:c8:af:85:19:d7:3d:
                    16:05:4f:b6:cf:95:62:63:79:6d:56:bd:fa:7f:a1:
                    34:0e:83:dd:dc:71:ac:3e:2b:50:65:f3:b7:82:b6:
                    c7:e7:60:d0:44:64:64:d7:21:2d:75:db:6a:be:0d:
                    47:d1:cf:3c:3b:60:06:58:82:1c:bc:fb:01:21:7d:
                    e5:c6:d7:65:ad:23:ca:42:9f:d8:8d:9b:6d:45:8d:
                    c0:8a:aa:cb:3e:49:40:cd:bc:d3:2e:48:43:11:a9:
                    eb:b4:92:4c:ca:fb:e5:15:fb:76:c4:1e:07:30:9b:
                    8f:df:7d:e2:98:ae:8a:90:3a:3b:a3:5c:af:9f:25:
                    f6:7a:01:87:90:b7:b3:93:ed:c8:05:6e:5e:90:d4:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:14:38:56:5D:A0:95:BA:09:73:F5:BB:77:19:CA:0E:AD:90:21:68
            X509v3 Authority Key Identifier:
                keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/BA9447BCA7D111EB8F85BA22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:a5:c0:2c:e2:52:08:27:57:95:cc:a7:4d:70:bb:e1:db:14:
         33:24:52:a5:6a:85:e2:9a:1d:44:9e:8f:52:9c:70:b5:42:c8:
         fe:3d:a3:bc:cf:b9:16:93:3f:19:9b:29:da:9f:cb:c0:f2:98:
         54:29:73:ea:56:3a:ed:da:9b:85:41:4b:c3:b0:db:f0:2c:df:
         cd:52:67:66:c8:ec:bd:cc:3a:57:94:69:d5:7b:5e:68:e8:bd:
         8e:0a:bc:a2:2e:75:5e:4c:4c:8e:bb:e3:23:80:79:27:02:4a:
         70:d4:d4:41:f0:3a:37:03:6e:87:78:47:0e:ad:5c:09:a1:e6:
         35:ef:ec:37:bc:db:44:1f:0f:a0:4a:fc:49:99:6d:d9:33:16:
         4b:1a:1a:cf:e6:9e:8c:45:a3:06:04:73:16:49:69:d8:f5:04:
         7e:41:18:0b:ec:4e:e3:6a:2f:a4:8d:db:f3:01:c8:b0:38:12:
         16:c4:9e:81:45:35:a7:0f:28:7f:41:a8:47:29:e1:13:19:79:
         31:f3:70:48:ce:b8:dc:d1:fb:63:60:c1:2e:1b:00:4a:aa:29:
         7e:82:11:61:54:db:fc:3f:58:b4:28:65:ef:1d:57:a2:cd:0c:
         e0:34:dd:99:4c:ca:18:41:c2:15:66:9a:0a:f0:7d:e1:9d:61:
         7e:23:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:06 2026 by rpki-client