Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/019A77BC7F1811ECA6613535C4F9AE02.roa
File:                     019A77BC7F1811ECA6613535C4F9AE02.roa (raw, json)
Hash identifier:          XnpD+aQfltvr9L351WUkephAYUbFPlrralN67EYzxLk=
Subject key identifier:   75:00:45:05:69:79:23:A2:41:48:20:10:2B:FB:B0:A2:57:4B:A9:E1
Certificate issuer:       /CN=A913F680/serialNumber=E7F8C22361A9ECB761EBFB01E8B977C907A4F1F4
Certificate serial:       047A
Authority key identifier: E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/019A77BC7F1811ECA6613535C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:00:08 +0000
ROA not before:           Wed 03 Sep 2025 00:45:47 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140939
IP address blocks:        103.153.165.0/24 maxlen: 24
                          2001:df4:5180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl
                          rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F680, serialNumber=E7F8C22361A9ECB761EBFB01E8B977C907A4F1F4
        Validity
            Not Before: Sep  3 00:45:47 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40e28-6acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:ca:01:ac:df:c8:e3:59:ef:10:07:69:a2:
                    bb:3f:c2:55:b3:7b:f9:14:cc:27:72:7c:06:d4:d0:
                    ac:14:4f:b4:47:5b:2f:eb:a5:a3:12:04:44:8b:50:
                    11:47:a7:14:41:9a:e1:f4:5a:18:8c:ed:19:c9:ec:
                    5b:dc:20:99:24:be:ed:f1:37:bc:18:c6:91:48:0b:
                    11:d4:f9:a9:dd:7a:24:04:bf:6e:b6:91:40:38:22:
                    81:99:d5:b8:45:f1:8e:fc:04:30:d9:13:4a:eb:48:
                    4f:e1:ba:8a:db:ee:9a:cf:41:2c:e6:b6:de:da:71:
                    de:00:ce:7d:0d:0e:84:70:d6:98:6f:84:bd:65:da:
                    fd:51:25:e0:fc:13:b9:2f:47:a2:eb:fc:ac:ee:7e:
                    1b:02:ad:55:3d:d1:0f:8b:20:83:f9:6f:61:39:b4:
                    f2:97:e1:f1:5d:ac:c4:88:cb:7f:c7:f3:de:3e:54:
                    69:ad:b4:da:97:c2:78:ec:95:c1:09:83:66:c4:51:
                    89:7c:9c:20:66:1c:2c:85:ff:e9:3d:20:76:8d:de:
                    e0:da:fd:cf:ac:1f:fe:fe:5d:dc:6e:c9:03:1a:a4:
                    7d:f9:1d:a0:be:82:1d:36:2d:d3:7c:17:82:d6:fc:
                    ca:7a:8b:a7:6e:44:03:22:ff:5b:85:c9:b5:d9:89:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:00:45:05:69:79:23:A2:41:48:20:10:2B:FB:B0:A2:57:4B:A9:E1
            X509v3 Authority Key Identifier:
                keyid:E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/019A77BC7F1811ECA6613535C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.165.0/24
                IPv6:
                  2001:df4:5180::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:5c:a8:4e:f4:b0:38:65:40:8a:d8:88:2a:5d:90:e0:80:70:
         1e:84:97:dd:17:9b:a2:a4:c9:74:f3:a4:03:c9:72:a1:18:15:
         35:f6:fb:4a:39:2c:b2:62:2e:b7:7b:ce:4b:7a:dc:9f:8b:18:
         95:99:e9:66:cb:01:a3:7a:bf:e0:fa:7e:fc:ef:33:14:a9:15:
         46:0b:ad:32:ea:14:4c:f9:49:b8:dd:79:7a:de:08:37:82:01:
         f0:0b:0c:2b:6a:d0:cb:f1:cb:72:c5:a8:c9:03:d8:7a:83:d0:
         06:04:a8:bf:11:f0:3f:f5:87:70:92:72:21:24:f2:6f:55:c9:
         37:d7:39:69:e7:83:9b:bf:b2:c6:65:2a:b2:06:0b:27:35:db:
         08:3d:a8:6d:c0:55:73:2e:90:02:ab:fa:4d:24:9d:cd:1d:6f:
         7f:0f:5e:a4:5f:62:7b:ae:dc:47:33:4e:94:42:47:44:a1:f2:
         3d:76:86:8e:57:5b:c5:c1:2f:26:72:a1:44:a8:85:aa:19:ed:
         4a:06:2b:53:23:9e:f0:ad:ce:8e:dc:d8:cb:fb:cb:2b:56:4b:
         fa:4f:78:fa:7e:b6:e6:5c:3d:a1:89:ad:70:51:21:e9:71:18:
         4c:99:33:ec:f2:b3:e9:97:ba:80:7f:e4:3d:b4:b3:7d:07:18:
         9d:ab:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:34:55 2026 by rpki-client