Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/172E487A416911ECB6B11742C4F9AE02.roa
File:                     172E487A416911ECB6B11742C4F9AE02.roa (raw, json)
Hash identifier:          lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=
Subject key identifier:   27:2E:39:02:83:3A:25:A4:6E:8B:BE:9D:4A:D7:10:2C:CF:83:82:3C
Certificate issuer:       /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial:       0CF0
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/172E487A416911ECB6B11742C4F9AE02.roa
Signing time:             Fri 24 Apr 2026 18:24:09 +0000
ROA not before:           Fri 24 Apr 2026 18:24:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25478
IP address blocks:        103.111.224.0/22 maxlen: 22
                          103.111.225.0/24 maxlen: 24
                          103.111.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
                          rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3312 (0xcf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
        Validity
            Not Before: Apr 24 18:24:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ebb548-377a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:9a:dd:44:4c:3f:fb:2b:9b:e0:c4:07:bf:6d:
                    bb:b8:7d:ed:e1:44:1b:11:bc:ea:e0:a1:46:eb:64:
                    07:57:93:5b:54:b7:d7:a0:8c:18:76:d5:0f:6c:4d:
                    3c:f8:68:bf:d3:f3:5f:67:bb:68:e8:45:9e:b4:1a:
                    0e:75:ae:81:64:63:1a:04:ad:12:b4:44:56:f9:94:
                    ea:8d:e1:91:94:78:fa:b9:c9:e0:77:bd:c8:38:3f:
                    a5:af:d9:11:e5:d0:f9:70:e4:d8:f7:04:6a:bb:c9:
                    d1:62:01:6e:e4:c9:d4:ec:04:e0:80:da:6d:8c:e2:
                    55:ad:f9:d8:4b:26:1a:76:8c:29:d6:9a:31:ba:7d:
                    4a:bc:37:86:9d:cd:cb:74:17:cd:9e:20:a8:89:3d:
                    5f:34:bc:4d:b6:f8:8a:2a:39:c5:83:98:1f:bb:8f:
                    d8:80:4e:f2:90:69:c3:af:d3:b9:6b:ee:41:31:44:
                    ad:c8:d2:42:b7:ac:4f:9e:10:88:db:23:3e:78:40:
                    ee:4a:39:f0:d7:55:b2:5a:8e:97:32:1d:23:06:9b:
                    0c:3f:ed:1d:52:21:f8:37:49:2e:6e:83:51:39:b9:
                    d0:15:7d:52:37:e2:58:7b:f5:c1:69:c8:c1:90:e9:
                    e0:bb:48:bf:e2:86:b9:9b:4b:31:73:e7:3b:a1:0e:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2E:39:02:83:3A:25:A4:6E:8B:BE:9D:4A:D7:10:2C:CF:83:82:3C
            X509v3 Authority Key Identifier:
                keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/172E487A416911ECB6B11742C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:82:36:40:c3:55:28:48:5e:a0:91:b0:a2:68:29:74:54:83:
         67:27:3f:5f:96:e7:1a:5e:b7:98:df:fd:ab:d0:21:d0:8f:78:
         76:8f:7b:4e:3a:a2:2a:34:0d:24:6e:ac:d7:fe:6f:bc:05:cc:
         09:0b:f2:56:cf:dc:49:31:1e:96:0e:59:de:d9:1c:0b:8a:35:
         c8:53:eb:2d:2b:9a:de:a6:bd:d9:7f:37:94:37:50:5c:cd:a1:
         6a:bb:54:44:3b:7b:0e:d6:cf:2f:d9:49:89:29:c6:dc:05:7b:
         b2:5c:46:4a:67:0e:57:73:45:e6:3e:00:80:ba:7d:0e:68:92:
         8f:73:d2:dd:64:ae:52:2d:0b:fe:1b:57:e3:2b:28:f0:8b:0e:
         37:ff:f8:c6:3f:5c:12:de:f0:29:1e:9b:73:c8:6b:c7:a8:d2:
         4c:3f:f7:61:e5:ea:a5:a4:27:89:fd:7b:f7:93:99:77:2a:fa:
         02:2f:d7:1a:82:d1:3e:6c:8a:cc:6d:59:cb:bd:96:d9:d6:8f:
         a7:95:5e:e8:d8:2a:62:6f:de:68:61:12:6a:38:b8:2e:a9:ec:
         64:00:f5:7b:f4:77:ff:22:d3:39:98:e9:44:8f:55:cd:88:30:
         03:46:31:ea:f7:36:cb:93:28:cc:fb:49:00:b0:3b:76:e3:07:
         65:2d:ed:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:43:59 2026 by rpki-client