Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/52531292718111EEA2596A60C4F9AE02.roa
File:                     52531292718111EEA2596A60C4F9AE02.roa (raw, json)
Hash identifier:          xAtT+WHdk8wH+J6tD5+jiUroriSZKOyNLMOepfOpKx4=
Subject key identifier:   4C:50:BC:6D:01:5B:18:D4:21:0C:82:A2:60:B3:23:70:4A:00:33:3D
Certificate issuer:       /CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
Certificate serial:       01BE
Authority key identifier: 6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/52531292718111EEA2596A60C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:39:39 +0000
ROA not before:           Wed 07 May 2025 04:11:06 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142279
IP address blocks:        103.166.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl
                          rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914949E, serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
        Validity
            Not Before: May  7 04:11:06 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3ed3b-acd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:aa:e3:aa:cd:bd:7d:dc:c9:60:4b:85:1d:
                    39:c4:a9:3b:02:45:53:69:24:24:46:9b:7e:e8:4f:
                    db:56:42:54:12:84:dc:3d:07:32:bc:2b:be:43:c1:
                    90:d0:30:fc:df:fd:ca:dc:f2:5b:56:ab:b6:5c:ac:
                    a2:37:e4:88:c0:6d:93:da:e9:08:24:d3:6e:88:19:
                    4e:9d:be:10:03:87:b9:f8:1c:9b:00:88:7c:a0:c0:
                    f8:2a:c3:75:f0:d5:eb:4f:1c:fc:14:9d:6d:66:da:
                    cb:a5:ed:0e:46:ac:c1:db:e4:2f:be:33:18:72:4a:
                    f3:0b:55:9e:c8:68:7c:02:9d:4b:b0:f8:89:58:79:
                    93:be:dc:fb:c7:25:84:86:c3:34:64:43:b5:ed:ee:
                    da:8e:3f:de:70:e7:f5:ef:96:a5:27:40:3b:d4:06:
                    bc:eb:79:5f:ee:48:f1:b0:6f:a7:9a:6e:3e:79:30:
                    07:b6:8d:ba:ac:ea:f1:0b:5b:09:3c:46:8d:00:2b:
                    59:6d:92:79:a1:2a:37:2e:d1:b2:d3:b5:3e:78:38:
                    40:b4:b8:5b:e2:6f:54:86:6d:62:38:7e:24:00:26:
                    06:d7:fa:bc:29:a2:89:97:16:de:10:56:9c:6b:16:
                    0e:a8:6b:ef:35:5b:71:c3:56:72:e4:84:56:88:04:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:50:BC:6D:01:5B:18:D4:21:0C:82:A2:60:B3:23:70:4A:00:33:3D
            X509v3 Authority Key Identifier:
                keyid:6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/52531292718111EEA2596A60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:b4:ce:3d:ab:83:2c:6e:95:1d:c3:91:57:9b:f4:a1:f2:4c:
         02:db:24:57:2a:f4:8b:d9:7b:bc:84:53:e3:b8:ec:da:a4:8e:
         f1:d2:76:2c:f0:42:37:75:13:ae:70:c4:a4:a4:99:2e:f1:91:
         ff:25:bf:f1:6c:54:15:b1:d5:dd:fc:28:11:b0:6c:10:9e:11:
         42:d0:09:d4:84:3e:2e:21:69:c1:a1:ff:5c:74:6f:84:20:1f:
         c5:15:a5:79:91:88:8f:ec:50:d1:be:5d:02:a9:03:4c:a7:64:
         4f:96:ae:d2:bf:66:c8:ee:48:8f:9b:a5:a1:d7:c8:7d:ba:15:
         8a:fd:86:c2:ac:04:32:93:53:a5:50:73:31:cd:2d:de:05:cf:
         59:b4:3f:20:68:fd:44:93:7d:46:19:a9:38:52:75:2d:a9:67:
         21:d9:53:33:c7:4b:54:8d:4d:93:05:60:af:96:37:f7:fe:47:
         6b:6f:0c:a4:2c:6f:46:88:3a:28:9e:b9:37:c6:73:6f:c9:81:
         52:4b:99:83:5d:3e:60:f7:71:e7:80:f9:f5:45:ac:1d:8c:e1:
         ec:70:a1:e7:f8:fe:19:f3:7d:ba:31:35:d8:f3:3a:4a:a9:fd:
         3b:61:a0:47:df:bd:ce:a3:89:9c:dc:c1:f6:da:19:e5:5f:d0:
         51:85:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:39 2026 by rpki-client