Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/306EFA64A87611F089A2B881C4F9AE02.roa
File:                     306EFA64A87611F089A2B881C4F9AE02.roa (raw, json)
Hash identifier:          PG1Zg9YWfOZJBdRe/N5qDFjYHzUKz1vx7yczTSRfIp8=
Subject key identifier:   BF:F7:8F:86:4A:D9:F2:B2:7C:F3:D2:94:14:92:C1:92:62:E9:3C:1E
Certificate issuer:       /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Certificate serial:       0129
Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/306EFA64A87611F089A2B881C4F9AE02.roa
Signing time:             Mon 13 Oct 2025 20:50:02 +0000
ROA not before:           Mon 13 Oct 2025 20:50:02 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     142602
IP address blocks:        103.26.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
                          rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
        Validity
            Not Before: Oct 13 20:50:02 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68ed65fa-b2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:5d:e2:86:ee:c6:fd:c7:0b:a1:db:a9:44:
                    cb:eb:4c:52:4b:a9:3a:e1:94:ae:82:3f:d1:a3:d7:
                    c2:72:ff:bd:41:5a:18:3d:14:bd:9e:24:ae:1d:a0:
                    e3:df:fe:3d:84:e3:b7:e9:29:1d:ea:3a:a4:fb:c9:
                    89:cc:e8:45:13:b8:f7:bd:32:f3:ac:9d:3b:b8:93:
                    71:35:34:24:73:2c:b4:05:18:de:b1:2b:e4:80:9e:
                    a3:c2:4c:3e:29:95:fc:77:df:18:73:5c:73:53:50:
                    fb:75:a1:07:00:ab:0f:5c:5b:58:ca:ee:d2:ef:d8:
                    61:6f:2b:d7:40:24:62:ef:13:6b:a0:06:30:c6:15:
                    ad:0a:26:eb:6e:83:c2:3e:71:97:c6:2e:46:91:79:
                    95:e6:8b:e0:32:97:53:df:8c:24:2b:eb:60:a0:0d:
                    bd:82:03:e2:aa:ec:56:db:ea:df:6c:a6:85:f8:04:
                    96:d7:78:9e:68:a5:53:9f:f7:f5:71:b4:9a:bc:f7:
                    4c:be:3f:93:35:5d:53:43:93:aa:5a:e8:e8:28:43:
                    81:e4:b6:ae:3c:8f:82:95:5c:00:60:1d:5c:f8:db:
                    ac:16:4d:94:5a:38:dc:50:ce:7a:83:ae:b4:3e:53:
                    ce:47:d1:73:c8:07:9a:01:4e:04:43:91:bd:3e:1e:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F7:8F:86:4A:D9:F2:B2:7C:F3:D2:94:14:92:C1:92:62:E9:3C:1E
            X509v3 Authority Key Identifier:
                keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/306EFA64A87611F089A2B881C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:c2:45:d0:29:79:30:2d:e2:d6:33:60:50:9c:35:54:cf:0b:
         74:74:0b:d2:b0:b9:2f:c1:4d:e4:3d:1d:4b:c9:26:d8:fc:47:
         15:c4:a4:ac:2b:6a:77:72:ee:11:42:ae:a9:9b:52:87:0b:9d:
         74:09:71:dd:8c:be:c3:10:05:31:d0:9d:c1:0b:86:91:5e:54:
         d9:5e:0a:75:09:8f:da:e7:01:60:96:1f:8b:9c:4d:55:09:88:
         3e:31:02:a4:aa:ee:b0:2f:b5:56:b9:ea:c0:83:50:6f:ae:b4:
         db:13:ab:79:26:33:4b:44:94:3e:6f:c1:26:08:69:95:17:67:
         6e:36:ba:2b:43:fb:6b:f5:21:44:99:30:5c:39:c7:c7:cb:4f:
         da:1e:d3:5a:1e:4f:ba:bc:f6:7f:e7:fe:2e:32:b0:39:ea:af:
         8e:bd:a5:aa:96:53:85:89:b7:82:5f:b4:82:07:f1:68:8d:09:
         bb:3a:c6:b8:52:99:a5:b1:0e:73:a4:a2:08:92:c2:3d:d0:9f:
         bd:cb:5a:c2:35:ec:00:5d:1b:27:22:99:d9:88:d7:ea:13:f7:
         34:9c:3d:6f:1a:87:83:44:c9:da:9f:fe:a0:08:8c:12:54:ab:
         ab:54:0e:6e:46:22:9b:4d:47:88:88:c9:a6:15:e0:06:1e:b1:
         32:34:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:26:25 2025 by rpki-client