Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa
File:                     B49D829014F411EA96EC5874C4F9AE02.roa (raw, json)
Hash identifier:          jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=
Subject key identifier:   5E:72:74:96:B9:D0:92:06:0D:7C:DB:AE:62:40:95:35:59:D8:FB:0E
Certificate issuer:       /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial:       0C90
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:29:15 +0000
ROA not before:           Wed 24 Dec 2025 18:16:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.145.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
                          rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3216 (0xc90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
        Validity
            Not Before: Dec 24 18:16:23 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4695a-c5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:ac:dd:e8:73:aa:9a:4d:a8:04:a5:f2:ce:
                    e3:54:fa:33:af:33:a9:c6:6b:3b:af:d0:7c:b7:26:
                    13:a2:98:4c:76:97:ee:62:23:ce:6f:c8:18:e3:23:
                    dc:38:c1:20:bd:8a:ad:66:01:84:c4:4a:c2:11:75:
                    9d:5b:ef:05:6c:84:ce:dc:d6:03:18:e3:c1:e1:28:
                    49:d3:e1:25:62:ad:ca:ca:94:95:33:46:85:fe:32:
                    f6:8a:f0:b9:da:e6:72:ff:bd:51:c5:95:6e:86:e0:
                    b3:61:d7:62:16:7d:25:a5:5b:46:e9:6b:55:7b:1c:
                    22:9c:e6:7c:7b:5a:c7:3d:3e:ee:27:70:85:f1:10:
                    69:60:76:37:0c:7a:dd:38:ee:39:73:28:18:91:1c:
                    a4:93:c3:e0:b2:c2:6a:a0:8c:a6:18:a2:b0:5f:e2:
                    fb:77:a0:5a:44:d4:12:bf:f1:79:7a:b8:75:45:da:
                    20:9a:2e:9c:c6:07:4d:6c:14:12:57:f9:32:ea:c5:
                    78:6c:88:5d:3b:c9:3a:13:a8:be:76:fc:86:82:e7:
                    88:af:38:76:37:af:9a:15:8c:a1:96:d1:f8:96:96:
                    2a:13:d4:f4:28:b2:6f:6c:17:41:54:7e:04:c0:7d:
                    a0:eb:28:85:47:f3:47:83:78:08:ee:2c:2c:c0:19:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:72:74:96:B9:D0:92:06:0D:7C:DB:AE:62:40:95:35:59:D8:FB:0E
            X509v3 Authority Key Identifier:
                keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:b6:4e:da:12:93:3f:d6:90:91:67:68:bb:df:cf:82:e5:
         19:bb:8e:43:3e:13:7f:f0:9f:24:bd:2c:1a:5c:56:72:9f:f1:
         e4:d0:f5:d2:1d:2b:52:8d:c5:4d:3c:17:fc:6e:98:a0:2a:e9:
         7c:05:24:71:6e:a3:8c:eb:6d:59:95:07:da:35:d6:43:dd:a0:
         71:3b:e6:38:25:55:50:3c:e0:15:f0:a1:12:b4:d9:a6:6f:8d:
         9b:ec:56:b7:48:f7:4a:42:27:8f:05:d9:cd:7f:54:93:98:b4:
         e8:79:01:b2:55:ad:d3:bf:ca:0e:86:87:ff:70:38:8d:7c:4a:
         80:8d:c6:49:eb:44:95:dd:52:4f:bf:76:bf:a7:59:51:00:b3:
         33:2a:2f:6f:5a:71:73:72:63:6a:4d:33:87:77:71:3c:9b:25:
         bc:fd:a8:3c:a1:d0:3d:87:95:18:f8:44:37:e5:1d:5a:e0:80:
         b0:ee:98:03:c7:48:29:5c:f1:ca:a0:8d:de:34:62:fd:b7:b1:
         b8:78:2a:50:01:30:a0:2a:32:30:fa:65:7a:9a:7e:3c:29:f8:
         f2:7c:ed:ae:2a:53:2d:c6:4f:a9:ca:fc:42:de:65:b7:ba:bf:
         b7:a4:a0:14:d7:62:40:21:a0:a8:53:f3:f8:21:f7:47:32:c2:
         87:b7:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:21 2026 by rpki-client