Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/EECD7500CF6E11ED915AD729C4F9AE02.roa
File:                     EECD7500CF6E11ED915AD729C4F9AE02.roa (raw, json)
Hash identifier:          DOXhX1leics2/OlA+16D6wHVTeejyQT2l+nsM3RKbHM=
Subject key identifier:   77:A1:34:B1:68:1B:F0:1D:45:37:F0:26:2B:1E:8C:0E:F4:DF:C2:B0
Certificate issuer:       /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Certificate serial:       0711
Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/EECD7500CF6E11ED915AD729C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:45:48 +0000
ROA not before:           Wed 18 Feb 2026 22:18:59 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     131314
IP address blocks:        103.163.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
        Validity
            Not Before: Feb 18 22:18:59 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a45f2c-e266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:6f:c9:58:0f:1f:98:44:cc:4e:01:3f:de:
                    67:d0:6e:a9:67:b6:f6:fa:b4:a6:12:f5:ed:2d:79:
                    dc:f4:94:d7:40:48:a4:a3:f3:6a:96:69:1d:f8:4b:
                    e2:8d:ac:5b:bc:0a:50:9e:b1:ac:fa:97:cb:52:62:
                    c9:61:b4:63:09:a2:fd:ea:78:57:07:de:e9:95:cd:
                    b1:ff:8d:2c:3c:88:52:8c:ff:c7:b5:1b:a2:34:8a:
                    80:23:b2:4e:e9:1a:4b:65:d1:a7:aa:12:55:f9:dc:
                    f9:36:09:9e:a1:a0:df:60:f9:ff:98:2c:ab:d1:13:
                    05:17:97:1b:2b:26:cd:10:80:ff:12:9b:55:02:1d:
                    0a:d3:ff:6c:ed:df:b2:35:d6:08:0f:2a:c0:bb:d4:
                    68:02:a1:5e:f2:4c:ba:8d:1e:4a:c6:3a:cf:4d:f4:
                    b4:08:8c:99:9d:ef:99:82:2f:72:3d:17:36:da:e1:
                    1b:eb:49:65:ac:91:a1:1a:bb:f3:e1:67:9a:b4:e9:
                    b6:fb:7b:94:30:61:d1:58:de:79:5f:ee:2f:d4:27:
                    88:55:18:d2:93:03:0c:db:5f:3a:60:6c:1b:09:07:
                    73:68:11:e3:f7:f8:00:34:0e:1d:f9:62:21:d4:9c:
                    4c:15:f3:48:39:15:18:3a:ea:96:50:07:61:e1:9b:
                    88:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A1:34:B1:68:1B:F0:1D:45:37:F0:26:2B:1E:8C:0E:F4:DF:C2:B0
            X509v3 Authority Key Identifier:
                keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/EECD7500CF6E11ED915AD729C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:21:df:01:9b:1b:e0:01:49:75:d8:89:b0:7f:77:18:0e:
         09:9a:c7:80:33:82:c9:ff:db:97:1d:9f:f4:85:4a:b2:6a:47:
         46:ca:cb:a8:2c:44:34:60:99:64:18:c5:08:7c:7f:9d:12:ae:
         bf:d6:74:1b:b0:72:e7:e0:c0:98:17:f5:df:f9:e2:39:63:c7:
         3b:50:1a:67:cd:86:96:25:bf:ce:65:23:7a:42:e7:b7:7f:2a:
         84:a8:9e:4a:b2:2e:d4:31:ab:28:13:91:36:5b:4e:0e:b4:20:
         78:72:a2:48:fc:f9:a8:28:a4:11:0a:43:70:b5:44:4e:91:bf:
         94:c9:44:dd:df:4c:03:6e:45:cb:e3:07:96:43:28:ca:3a:c3:
         d8:75:29:65:14:fd:ba:70:66:e9:31:10:22:52:06:a7:79:14:
         69:b9:52:61:6d:bd:de:34:55:1a:94:44:75:9e:0c:c3:2e:64:
         65:47:f6:42:56:2e:b9:a4:e5:d5:fa:be:42:92:29:f8:27:fc:
         51:eb:b3:9c:df:20:ef:f8:cd:74:63:e8:12:1d:31:3e:6e:8c:
         20:3c:28:61:29:11:27:fc:b2:91:f3:38:ba:26:04:ba:e7:0b:
         7d:5e:4d:b4:fd:28:4b:53:6e:23:da:13:3a:a1:29:73:2d:34:
         b7:ed:3d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:27 2026 by rpki-client