Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/426DB414718E11EA9F6FA85CC4F9AE02.roa
File:                     426DB414718E11EA9F6FA85CC4F9AE02.roa (raw, json)
Hash identifier:          uc2qcNB8l7xT1ZuFXX3eceO3rKMlz70tmK0IYsPapEk=
Subject key identifier:   FD:DC:D5:EC:DE:EB:DC:17:BE:BC:7B:09:AE:29:7B:AC:16:D6:6E:EE
Certificate issuer:       /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
Certificate serial:       0AD1
Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/426DB414718E11EA9F6FA85CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:36:49 +0000
ROA not before:           Wed 14 Jan 2026 19:16:07 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     140073
IP address blocks:        103.147.168.0/24 maxlen: 24
                          103.147.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl
                          rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
        Validity
            Not Before: Jan 14 19:16:07 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a513e1-f63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:48:13:4c:bd:2f:38:82:f2:fb:cb:25:23:
                    dd:32:e7:18:cd:af:f8:8c:27:99:c3:31:50:6e:aa:
                    0d:e2:7c:c2:ec:d7:13:5c:d5:89:aa:a3:b1:72:60:
                    f9:33:f7:49:34:da:d7:4e:b7:c2:19:a8:ac:af:96:
                    64:9c:d5:44:8b:ce:5f:d1:ee:54:af:1b:b8:aa:8c:
                    aa:8a:7a:58:70:7b:1d:c6:e7:77:18:24:78:0d:4f:
                    75:c3:aa:0c:7d:22:7c:66:10:97:05:99:0f:b5:3b:
                    f6:ea:68:cf:94:62:fe:d1:e2:27:57:88:02:cb:5c:
                    b0:e0:f5:3d:0a:b5:69:1b:7c:f0:6a:81:06:00:3b:
                    56:e4:c9:11:42:1a:70:8f:cc:06:fd:f7:12:52:7c:
                    90:ec:19:fb:d2:90:fb:90:ff:4d:db:03:f5:1a:7c:
                    b7:f3:ff:b9:ca:93:57:d3:08:a8:cb:0e:22:a2:f6:
                    2e:a7:1c:03:d9:54:2b:9f:6e:ab:d1:37:0d:74:9d:
                    6d:a0:7b:71:b1:09:0b:99:3e:1c:e5:55:66:15:a5:
                    67:83:9e:a4:5d:87:f8:90:7c:00:10:9a:62:ff:07:
                    97:f5:03:62:ed:91:e3:e3:1d:f0:98:fd:be:3d:32:
                    f9:7d:d6:5c:2d:27:2b:06:2d:0a:f5:b2:90:df:a8:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DC:D5:EC:DE:EB:DC:17:BE:BC:7B:09:AE:29:7B:AC:16:D6:6E:EE
            X509v3 Authority Key Identifier:
                keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/426DB414718E11EA9F6FA85CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:55:dc:48:7f:be:7e:76:58:da:93:3a:4f:b8:bc:76:ad:0c:
         af:17:af:45:e2:05:47:f8:34:96:b6:9d:2e:32:02:61:b7:9a:
         a0:18:59:88:05:8b:73:13:38:5c:14:6e:81:2f:c7:29:84:a3:
         1f:75:13:5f:c6:32:5a:4a:51:e9:6b:bf:80:6b:79:22:6a:31:
         7f:87:79:18:cb:12:67:f4:e6:9b:44:09:4e:ee:bf:c5:c8:10:
         03:b8:97:21:d1:a2:13:b8:59:95:b7:ef:c4:00:97:a5:ea:8b:
         c6:f2:a2:ec:72:3c:51:00:cc:d4:5c:d9:87:43:eb:9b:91:ef:
         76:f4:5b:b2:97:00:60:c7:df:22:a5:9f:d5:55:b2:87:39:dc:
         e0:a7:d4:fa:1a:60:b9:db:26:50:27:b1:9e:ad:e3:4c:af:5f:
         3b:e0:26:16:46:8c:e9:56:36:18:97:cf:03:25:1f:c0:6b:fd:
         19:f0:cc:f2:12:71:4e:bc:a8:34:6a:8e:69:b2:01:57:47:84:
         b8:19:d5:25:99:5f:49:40:86:90:23:57:36:ff:94:16:48:b0:
         34:6e:d1:07:3f:c6:89:a4:c3:9d:d0:68:9c:a4:f5:6f:93:f6:
         2b:13:99:bc:f6:a2:0f:44:aa:07:7d:b3:b6:b5:9b:40:7a:3f:
         bb:d6:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:35 2026 by rpki-client