Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/A7119C2E8FEE11ED83F3C543C4F9AE02.roa
File:                     A7119C2E8FEE11ED83F3C543C4F9AE02.roa (raw, json)
Hash identifier:          FvyHMarOz25InZt6YctOwt9XRbwIcy8gaQ8eogmzCSU=
Subject key identifier:   29:C7:8D:7E:D1:ED:CF:E9:B5:57:81:5D:58:C0:18:9B:2C:26:38:B7
Certificate issuer:       /CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
Certificate serial:       0252
Authority key identifier: 11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/A7119C2E8FEE11ED83F3C543C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:07:34 +0000
ROA not before:           Fri 03 Oct 2025 02:58:21 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150329
IP address blocks:        103.13.166.0/24 maxlen: 24
                          103.13.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26, serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
        Validity
            Not Before: Oct  3 02:58:21 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a40fe6-6b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:b6:6b:a0:68:3e:63:c6:7d:31:fe:4c:04:
                    e9:c8:66:2d:e7:f0:e9:0e:6e:2b:20:c2:dc:db:18:
                    a3:e1:d4:11:60:ba:e1:33:cb:56:5d:83:61:f2:34:
                    ec:6d:1b:21:af:9c:ac:7e:93:85:5f:85:b8:67:a8:
                    f8:4a:2e:50:e3:61:5b:85:32:6b:68:bf:e6:0b:da:
                    90:a7:16:8a:99:ac:06:e1:30:90:01:f4:98:80:85:
                    b9:15:2c:4d:04:a2:7a:da:87:61:d5:b7:56:83:f9:
                    6a:6a:4a:86:19:47:9c:10:b0:c9:0d:9d:21:1e:1a:
                    77:06:00:a9:01:79:dd:f5:6a:c4:36:53:fb:45:25:
                    f5:36:96:0d:74:c2:a6:dc:74:18:fa:1a:cd:09:89:
                    85:9f:d2:ac:c8:f9:d0:f5:0a:0f:ee:a6:d3:0c:ea:
                    9f:df:72:83:d0:32:fa:4b:64:e2:ec:50:6d:79:35:
                    5f:60:40:34:7a:4f:ee:1c:ec:a3:71:39:3d:83:85:
                    ff:19:1f:45:51:c1:f7:dc:ff:2b:b5:57:db:de:f3:
                    9f:74:0b:49:fd:54:52:01:21:a6:a2:8e:e2:64:da:
                    a2:5e:15:0c:4f:62:92:ba:c6:a4:f5:cc:f4:bc:bb:
                    e9:72:26:21:2e:91:8a:16:c3:2a:d6:9f:8a:5b:29:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C7:8D:7E:D1:ED:CF:E9:B5:57:81:5D:58:C0:18:9B:2C:26:38:B7
            X509v3 Authority Key Identifier:
                keyid:11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/A7119C2E8FEE11ED83F3C543C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:75:95:af:1a:b5:b7:60:f4:f3:e7:4d:77:1d:44:4f:22:
         d6:32:7f:73:93:7d:bb:68:97:24:e0:a0:00:b5:8d:55:24:4a:
         2f:fe:a8:5a:db:d6:12:93:83:9a:31:02:d7:95:cb:23:73:73:
         09:80:fa:a1:09:4e:fe:f4:2e:3a:3d:d4:c6:ae:d7:00:35:6a:
         f7:a1:e6:30:33:f1:53:59:82:9f:23:97:45:a6:25:2e:46:b3:
         30:c6:55:9d:dc:47:48:85:36:65:3e:42:d7:88:f7:5f:9c:6d:
         fe:ef:3c:ea:f0:e2:7b:40:da:12:db:fc:33:4e:cc:82:fc:77:
         8f:e7:d1:27:56:a8:ac:57:03:7d:39:b1:f3:de:b1:af:9c:e3:
         03:15:e6:6d:08:e3:c9:6f:c5:cf:64:c5:28:80:cc:34:27:e2:
         dc:2b:8a:dc:f0:a6:3c:a8:c2:2e:6b:cd:87:94:d0:c4:5b:e6:
         7a:3b:9b:40:a8:04:75:ce:1d:39:4d:2a:30:93:16:c6:dd:8f:
         b0:6b:b3:97:53:7c:07:0e:b1:06:47:6e:9b:de:c1:7d:8f:82:
         09:4b:58:3e:40:3d:a5:da:21:45:89:14:34:57:e3:03:1a:bd:
         d6:ca:b4:2c:d9:99:5f:5c:94:3e:1e:d0:18:bb:a2:ee:02:72:
         64:ab:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:34 2026 by rpki-client