Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7D1E4382F7E111F09133AC30656F56BC.roa
File:                     7D1E4382F7E111F09133AC30656F56BC.roa (raw, json)
Hash identifier:          zNF2ygfhhND/uBTDhIyFRkeFn/MaMe2JQ58piW9rdw0=
Subject key identifier:   F9:C9:A7:E8:64:8B:B9:0A:48:61:C3:9B:CB:F1:68:75:75:63:68:1C
Certificate issuer:       /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Certificate serial:       043B
Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7D1E4382F7E111F09133AC30656F56BC.roa
Signing time:             Sun 01 Mar 2026 17:43:08 +0000
ROA not before:           Mon 23 Feb 2026 00:20:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     4515
IP address blocks:        103.182.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
                          rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
        Validity
            Not Before: Feb 23 00:20:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a47aac-692f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:c9:39:23:0b:8a:9e:02:ea:1f:f8:0b:96:
                    98:bd:26:f1:5b:23:53:fa:cd:30:a4:97:60:7f:d7:
                    48:91:53:28:aa:f1:6a:85:a2:45:8a:43:91:2d:26:
                    eb:56:06:5e:84:6d:69:3f:f4:53:a3:73:2b:b5:1d:
                    6a:c6:44:0d:a9:ec:de:79:79:92:52:0d:d0:b3:46:
                    34:a5:3b:52:a0:2e:03:99:43:92:45:de:8e:1e:f3:
                    82:27:a2:b6:4e:3c:3c:15:31:de:53:ca:53:20:92:
                    09:3d:0b:24:6b:5f:28:d0:02:a4:57:ba:a3:52:b7:
                    66:85:f9:0f:e0:4b:a2:0b:94:cd:7f:03:ac:a4:29:
                    9a:c6:b2:8a:0c:11:4f:a2:eb:f5:d3:10:9c:5b:fa:
                    52:c5:f2:d2:45:8a:49:4b:68:fc:e2:22:4f:22:6c:
                    78:be:81:97:a5:ce:77:07:a1:9a:b2:20:f0:2a:f8:
                    cb:d8:99:2b:e5:7a:08:33:03:29:8a:c9:ef:d1:24:
                    3a:26:7b:e6:28:f0:c2:2d:d9:30:03:75:0a:84:dc:
                    a2:e5:49:a7:9d:e2:27:fa:3f:d8:1a:75:3f:33:22:
                    16:df:6e:b5:1f:06:4e:80:9f:08:d1:33:df:9f:da:
                    16:60:0b:af:52:b6:c5:02:0f:b6:78:ef:28:5d:4a:
                    c5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C9:A7:E8:64:8B:B9:0A:48:61:C3:9B:CB:F1:68:75:75:63:68:1C
            X509v3 Authority Key Identifier:
                keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7D1E4382F7E111F09133AC30656F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:b4:df:28:30:a2:fe:98:87:43:f4:ec:81:27:6c:c5:b2:
         6e:f8:f6:70:9e:3b:c5:54:c9:af:16:51:fb:cb:7b:79:69:3e:
         97:46:e1:87:73:ca:d4:2f:3e:94:b5:85:30:f6:ed:6a:21:b1:
         cf:b8:37:36:9e:45:b3:91:91:d8:8d:58:df:08:a3:17:ca:8d:
         ef:e2:9d:83:aa:50:3d:0e:0e:ff:5f:9e:a0:57:ba:65:c4:54:
         d2:70:1a:d1:9c:d5:16:75:a8:fa:ad:e4:7e:fd:26:69:03:83:
         5d:0e:2a:59:6c:9e:cc:a3:5d:bc:cb:6d:76:3d:52:20:ed:b9:
         e7:2b:94:52:fe:31:e8:9e:fb:27:43:89:90:fc:3f:0a:05:45:
         a9:44:0f:13:3f:16:59:84:c6:65:21:f9:3b:5f:71:9e:30:48:
         a5:e9:97:70:3a:04:4f:ea:ad:d1:96:b2:77:65:9e:36:9f:9c:
         99:3a:02:98:6b:31:93:7e:4f:98:e8:01:f5:18:d4:a3:61:1e:
         f2:ce:f6:7a:52:c5:13:ac:3f:95:72:93:c0:00:0a:ea:5b:1c:
         66:3a:5c:4e:ea:11:9d:3a:98:eb:25:f0:ab:14:1a:a2:c2:e6:
         93:3a:12:fe:fa:f5:a4:43:15:ed:fd:75:96:c0:63:64:dd:12:
         00:14:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:17 2026 by rpki-client