Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/00C79724968F11EB9A79630BC4F9AE02.roa
File:                     00C79724968F11EB9A79630BC4F9AE02.roa (raw, json)
Hash identifier:          evzBYalt3P7Z1C145/+ZPloNbKFxFQ0L1echtcdQBnM=
Subject key identifier:   2C:3C:AA:4C:56:4C:BE:23:87:F9:26:DA:C6:57:9D:E3:61:A5:0B:03
Certificate issuer:       /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
Certificate serial:       06BC
Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/00C79724968F11EB9A79630BC4F9AE02.roa
Signing time:             Sat 14 Feb 2026 22:19:47 +0000
ROA not before:           Sat 14 Feb 2026 22:19:47 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136933
IP address blocks:        103.148.124.0/23 maxlen: 23
                          103.148.124.0/24 maxlen: 24
                          103.148.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
        Validity
            Not Before: Feb 14 22:19:47 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6990f503-e2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:10:43:ef:cc:36:38:e1:19:a4:71:23:18:07:
                    6c:b4:90:e6:12:2c:87:9b:6d:97:13:54:ec:98:c4:
                    7d:e0:17:4d:53:e2:08:a9:62:68:fd:ff:a1:a4:27:
                    e2:89:d9:09:5c:24:e7:1f:1c:1c:a6:65:87:1f:7a:
                    bf:27:3f:56:0c:db:ca:d8:d6:62:c9:49:a7:61:8b:
                    ad:9c:d2:fb:02:91:b7:e7:b6:d8:e5:ec:67:d9:e4:
                    c6:c5:5b:6b:58:4c:ed:dc:20:43:3a:05:b8:c7:f8:
                    38:5d:ad:8e:b8:24:6a:c9:72:ef:06:31:30:c1:62:
                    48:a3:9e:98:f9:8b:05:5d:12:87:38:e0:a0:33:20:
                    93:91:07:d3:56:0c:4e:d7:36:5e:61:ce:2c:63:43:
                    da:a9:34:ab:8d:61:55:62:4b:53:9d:09:6f:ee:35:
                    79:bc:41:31:d9:ad:9c:40:8d:3f:2b:b1:8e:79:fe:
                    dc:41:46:bf:06:55:61:68:1f:35:df:4a:a9:16:ff:
                    1d:26:83:a3:07:c2:bf:56:32:f0:ca:0d:0c:63:12:
                    ca:fc:a1:d8:74:36:13:26:28:c4:74:db:07:7f:80:
                    e2:77:c8:69:f8:3b:44:85:9e:a6:f4:21:1f:8f:f3:
                    9b:5d:70:d6:18:90:05:60:08:c2:18:f7:c8:ec:08:
                    e6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3C:AA:4C:56:4C:BE:23:87:F9:26:DA:C6:57:9D:E3:61:A5:0B:03
            X509v3 Authority Key Identifier:
                keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/00C79724968F11EB9A79630BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:2f:4c:d8:89:be:01:6d:57:6d:f3:bc:96:f4:cb:7b:b8:
         ff:14:31:5d:de:d4:33:1b:42:a0:d0:4e:e0:0b:25:92:4d:8d:
         f7:0b:14:75:e4:94:69:b3:e8:fd:24:74:ac:dc:cb:c4:ce:90:
         5a:61:b3:87:49:88:5b:79:58:96:c5:30:72:68:5c:c7:bc:93:
         da:ac:4d:50:46:a2:0a:56:c8:c1:ca:62:57:91:aa:a2:22:95:
         12:e1:5d:e7:46:47:53:54:b4:d7:26:96:68:be:fb:9d:17:13:
         15:46:25:0c:46:06:4b:92:de:54:6f:3e:e0:d0:27:dd:04:8c:
         30:19:4f:2f:96:e8:c2:97:59:36:dd:06:15:07:6e:96:ff:76:
         b4:75:7f:87:2f:12:21:cb:0a:7e:fe:80:45:08:32:84:0d:64:
         30:94:af:ca:d1:80:2a:e8:6a:11:ea:82:6d:e5:73:89:96:c5:
         b6:ef:b5:0e:01:72:5c:83:1a:ac:6a:3f:ff:7e:54:f3:d1:67:
         7e:aa:26:98:fe:5b:41:66:4f:4d:e4:41:9f:98:b9:06:2e:4f:
         e0:74:e6:85:32:eb:c3:e2:8f:8b:78:52:f4:cf:16:b5:92:4d:
         16:10:63:b5:f1:2f:e8:52:62:97:de:9a:20:41:b6:de:eb:17:
         07:11:19:fc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy
NkEwMjE3RTYwHhcNMjYwMjE0MjIxOTQ3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTkwZjUwMy1lMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4xBD78w2OOEZpHEjGAdstJDmEiyHm22XE1TsmMR94BdNU+IIqWJo/f+hpCfi
idkJXCTnHxwcpmWHH3q/Jz9WDNvK2NZiyUmnYYutnNL7ApG357bY5exn2eTGxVtr
WEzt3CBDOgW4x/g4Xa2OuCRqyXLvBjEwwWJIo56Y+YsFXRKHOOCgMyCTkQfTVgxO
1zZeYc4sY0PaqTSrjWFVYktTnQlv7jV5vEEx2a2cQI0/K7GOef7cQUa/BlVhaB81
30qpFv8dJoOjB8K/VjLwyg0MYxLK/KHYdDYTJijEdNsHf4Did8hp+DtEhZ6m9CEf
j/ObXXDWGJAFYAjCGPfI7AjmBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCw8qkxW
TL4jh/km2sZXneNhpQsDMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2
OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQ3MkQvOThCQTQ2QjQ5NjhEMTFFQjkzRkEzNTBBQzRGOUFFMDIvMDBDNzk3MjQ5
NjhGMTFFQjlBNzk2MzBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlHwwDQYJKoZIhvcNAQELBQADggEBAEyOL0zYib4BbVdt
87yW9Mt7uP8UMV3e1DMbQqDQTuALJZJNjfcLFHXklGmz6P0kdKzcy8TOkFphs4dJ
iFt5WJbFMHJoXMe8k9qsTVBGogpWyMHKYleRqqIilRLhXedGR1NUtNcmlmi++50X
ExVGJQxGBkuS3lRvPuDQJ90EjDAZTy+W6MKXWTbdBhUHbpb/drR1f4cvEiHLCn7+
gEUIMoQNZDCUr8rRgCroahHqgm3lc4mWxbbvtQ4BclyDGqxqP/9+VPPRZ36qJpj+
W0FmT03kQZ+YuQYuT+B05oUy68Pij4t4UvTPFrWSTRYQY7XxL+hSYpfemiBBtt7r
FwcRGfw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:00 2026 by rpki-client