Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/4DF26D46067211F18F3D57B53B3D8C67.roa
File:                     4DF26D46067211F18F3D57B53B3D8C67.roa (raw, json)
Hash identifier:          f6FziyQVx7683sQdlvalgQg53NovMzTPGvrr1jaYJqU=
Subject key identifier:   FF:09:4E:C9:93:33:B1:85:CD:70:B6:14:D6:F3:5F:EF:D1:78:38:96
Certificate issuer:       /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Certificate serial:       05C4
Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/4DF26D46067211F18F3D57B53B3D8C67.roa
Signing time:             Sun 01 Mar 2026 16:06:23 +0000
ROA not before:           Tue 10 Feb 2026 11:19:03 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     399461
IP address blocks:        103.171.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl
                          rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
        Validity
            Not Before: Feb 10 11:19:03 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a463ff-8332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:8a:a8:08:e3:52:51:9c:b3:46:36:7c:25:
                    39:5e:06:f8:49:de:ff:80:a6:8d:b8:c4:2a:41:eb:
                    92:29:4f:32:af:3e:af:db:2a:f3:06:4c:da:a4:c6:
                    2e:cb:f3:04:57:6d:45:03:87:b8:b5:b7:9b:23:29:
                    1f:46:b7:07:be:f0:07:64:a0:11:ea:55:12:40:46:
                    3f:97:ce:b2:8e:14:0c:5c:5a:da:7c:67:4d:56:24:
                    58:f5:26:4b:2a:c9:57:6b:cd:33:38:20:fb:8e:9b:
                    f5:c8:0c:61:c2:5d:03:ed:f4:20:19:d2:3b:2f:b6:
                    54:f8:cc:1e:25:94:c7:e8:ea:12:b6:14:06:53:14:
                    86:70:89:21:de:18:d3:82:82:c5:70:0a:b0:5e:29:
                    82:25:2e:25:72:32:13:77:e2:01:a2:e9:ae:28:b1:
                    bb:f7:e2:55:90:bf:aa:c3:c7:36:bd:36:7b:b7:76:
                    0e:a5:0e:bf:52:22:54:f8:91:2d:63:56:ac:42:97:
                    fb:aa:d3:9b:27:d0:6f:71:97:b7:e1:0e:61:e2:ae:
                    83:6b:f9:9f:d3:8b:48:a5:39:84:89:22:1a:4e:64:
                    d9:7b:f8:ba:47:a5:85:65:d5:a8:cb:b0:75:2f:8e:
                    76:f5:e4:bf:0a:9f:89:42:76:99:6f:f8:35:22:68:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:09:4E:C9:93:33:B1:85:CD:70:B6:14:D6:F3:5F:EF:D1:78:38:96
            X509v3 Authority Key Identifier:
                keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/4DF26D46067211F18F3D57B53B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:b4:e4:22:15:e7:47:63:19:58:01:a8:a6:9e:a3:7b:a1:63:
         ad:09:a1:4d:d7:9d:72:ff:14:ca:68:03:18:a7:d3:aa:7a:53:
         2f:a7:0e:9c:4d:e4:87:23:93:db:e5:c2:6a:19:9d:f8:d8:a7:
         79:0d:81:c6:09:db:ec:d3:b5:e2:5b:27:b1:f6:3b:30:39:bf:
         54:ba:5f:7f:bd:27:96:b0:f5:9e:27:76:3a:52:ac:3f:ce:91:
         2e:4a:62:2c:a8:8f:a1:2e:11:7a:f8:a7:8d:c2:69:21:86:3f:
         c6:b8:3c:a1:58:38:18:5c:7e:2e:77:c4:46:51:a8:3b:bf:bd:
         e4:1d:84:50:93:8c:a6:78:a4:86:63:33:48:72:8e:6f:6a:e0:
         47:5a:23:64:93:b2:52:63:c5:03:6e:be:ae:8a:bd:3f:5a:c9:
         80:b1:c4:b7:e5:80:10:01:1e:e9:b0:c8:e6:0a:a2:3a:0c:c7:
         e5:ce:a8:5a:c4:da:da:03:39:3d:5d:af:01:22:67:8a:22:5f:
         79:94:2c:f7:e9:14:27:db:2b:15:99:24:0b:5c:9a:ba:59:18:
         bd:53:1b:14:8a:5a:f4:49:28:94:b3:41:8a:13:81:4c:84:d1:
         27:53:da:fc:1d:f5:de:a8:fa:05:fd:b4:63:44:f2:f5:79:e6:
         77:3e:e4:87
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw
RkUyNUVBNEMwHhcNMjYwMjEwMTExOTAzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjNmZi04MzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBqKqAjjUlGcs0Y2fCU5Xgb4Sd7/gKaNuMQqQeuSKU8yrz6v2yrzBkzapMYu
y/MEV21FA4e4tbebIykfRrcHvvAHZKAR6lUSQEY/l86yjhQMXFrafGdNViRY9SZL
KslXa80zOCD7jpv1yAxhwl0D7fQgGdI7L7ZU+MweJZTH6OoSthQGUxSGcIkh3hjT
goLFcAqwXimCJS4lcjITd+IBoumuKLG79+JVkL+qw8c2vTZ7t3YOpQ6/UiJU+JEt
Y1asQpf7qtObJ9BvcZe34Q5h4q6Da/mf04tIpTmEiSIaTmTZe/i6R6WFZdWoy7B1
L4529eS/Cp+JQnaZb/g1ImgTAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP8JTsmT
M7GFzXC2FNbzX+/ReDiWMB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG
RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2
a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0Y4QjUvMjM5RDJBNDJGRkY5MTFFQkE4Rjc0MzYwQzRGOUFFMDIvNERGMjZENDYw
NjcyMTFGMThGM0Q1N0I1M0IzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6uIMA0GCSqGSIb3DQEBCwUAA4IBAQBAtOQiFedHYxlYAaimnqN7
oWOtCaFN151y/xTKaAMYp9OqelMvpw6cTeSHI5Pb5cJqGZ342Kd5DYHGCdvs07Xi
Wyex9jswOb9Uul9/vSeWsPWeJ3Y6Uqw/zpEuSmIsqI+hLhF6+KeNwmkhhj/GuDyh
WDgYXH4ud8RGUag7v73kHYRQk4ymeKSGYzNIco5vauBHWiNkk7JSY8UDbr6uir0/
WsmAscS35YAQAR7psMjmCqI6DMflzqhaxNraAzk9Xa8BImeKIl95lCz36RQn2ysV
mSQLXJq6WRi9UxsUilr0SSiUs0GKE4FMhNEnU9r8HfXeqPoF/bRjRPL1eeZ3PuSH
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:22 2026 by rpki-client