Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/449009F2387C11ECAE655C13C4F9AE02.roa
File:                     449009F2387C11ECAE655C13C4F9AE02.roa (raw, json)
Hash identifier:          3hqCz2s//bM7F9yk83SFGrz3hmeLWBDn7j2N0N+L1Gc=
Subject key identifier:   F5:A2:B9:25:9C:E6:FE:DA:39:0C:80:FB:E5:46:31:86:01:5C:FA:0A
Certificate issuer:       /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Certificate serial:       052A
Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/449009F2387C11ECAE655C13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:51:59 +0000
ROA not before:           Sat 03 May 2025 00:35:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142009
IP address blocks:        103.164.146.0/23 maxlen: 23
                          103.164.146.0/24 maxlen: 24
                          103.164.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
                          rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
        Validity
            Not Before: May  3 00:35:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3fe2f-cbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b9:b5:2f:9b:0f:1a:15:5f:e9:26:d7:bf:32:
                    b6:cd:8a:e7:3b:36:47:76:7f:6d:98:7d:89:a9:96:
                    bf:32:52:3d:8c:f9:9d:a9:95:ff:14:47:66:38:92:
                    ec:7f:ce:9c:53:4c:d3:d0:e3:6b:28:77:d3:d8:e7:
                    cc:bb:e5:63:54:08:a7:65:6a:0f:ea:7d:e5:ae:65:
                    1f:82:65:56:c8:c2:06:06:cb:20:ca:67:e2:4b:41:
                    f5:f9:0d:0b:b0:11:b8:b0:84:24:cd:64:1d:f5:9d:
                    d3:4b:47:41:f5:7c:c8:1f:e4:92:ba:c1:88:65:31:
                    f0:d0:92:35:50:b7:c3:26:f0:70:3d:d9:34:2f:f7:
                    26:4e:fa:45:50:41:f8:36:be:e2:67:c9:c3:32:e1:
                    9a:77:00:88:95:60:d6:ac:33:70:9c:d0:ff:19:a6:
                    f4:f5:a6:66:d4:c4:6d:fb:13:70:c6:64:30:8e:98:
                    07:d2:8e:dd:d1:a8:f1:26:58:95:8a:32:ef:98:61:
                    47:c5:3b:4b:19:09:bd:d5:73:be:db:17:3b:63:0f:
                    af:a7:ae:9b:bc:79:7e:07:9e:9f:c7:f7:4f:99:51:
                    66:bb:7b:2f:76:d9:b0:d8:c1:4e:42:1e:4a:da:d1:
                    28:1b:42:de:3e:51:83:96:36:2e:b8:48:b0:a8:db:
                    55:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:B9:25:9C:E6:FE:DA:39:0C:80:FB:E5:46:31:86:01:5C:FA:0A
            X509v3 Authority Key Identifier:
                keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/449009F2387C11ECAE655C13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:72:a4:88:85:4d:b6:c4:a5:f0:bc:ac:f0:a5:07:13:bd:26:
         23:d2:87:c7:dc:d9:6a:bd:2d:e5:fe:7b:93:17:0b:73:92:ef:
         e2:a0:70:f7:ea:2b:6d:5d:44:1d:26:dd:56:6a:5f:b8:5d:86:
         e9:24:c9:72:2a:83:90:94:1e:77:80:50:91:26:6a:27:cd:4f:
         65:2b:91:bc:fd:e3:ad:f9:37:a5:5c:f4:84:96:d6:63:bd:a7:
         db:3d:e4:83:c1:89:b9:2d:e0:47:47:90:8b:c2:45:bf:a8:19:
         6e:16:f9:ef:3b:3a:37:17:a8:72:d6:7a:38:1e:07:7e:79:0b:
         08:60:3b:bf:89:f8:e3:19:c2:5c:1a:2a:d1:15:ca:7f:8e:af:
         83:51:f9:13:88:93:c9:44:db:36:d9:48:09:0a:cb:a8:b7:f0:
         92:b3:52:c5:b0:72:38:3a:a6:25:de:ea:50:04:63:f9:8e:43:
         ba:56:b7:d5:6e:ab:65:49:76:3d:07:a8:5f:95:1d:a8:f9:05:
         c5:2d:44:6e:75:22:c1:aa:8a:41:cb:dc:24:fe:fc:50:28:25:
         09:f6:61:8a:01:4e:f4:d3:de:f6:0b:f1:de:71:5f:9e:ca:5e:
         56:b2:f9:56:2c:ef:91:c4:da:5a:e6:3d:09:54:97:fb:29:7c:
         fd:0c:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:11 2026 by rpki-client