Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/1C8D941432FB11F19CCB9904AA833773.roa
File:                     1C8D941432FB11F19CCB9904AA833773.roa (raw, json)
Hash identifier:          Vdjw7w1PeyzPAqEcj94Cecz0zkFI9OWxcvUoO7uwc2g=
Subject key identifier:   AD:2E:9E:58:04:43:BA:8D:5A:F4:33:71:C5:3A:DB:79:78:0E:97:71
Certificate issuer:       /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial:       24B2
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/1C8D941432FB11F19CCB9904AA833773.roa
Signing time:             Wed 06 May 2026 16:22:46 +0000
ROA not before:           Wed 06 May 2026 16:22:46 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     133064
IP address blocks:        103.26.36.0/22 maxlen: 22
                          103.26.36.0/24 maxlen: 24
                          103.26.37.0/24 maxlen: 24
                          103.26.38.0/24 maxlen: 24
                          103.26.39.0/24 maxlen: 24
                          2001:df3:a000::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
                          rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9394 (0x24b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
        Validity
            Not Before: May  6 16:22:46 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=69fb6ad6-1f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:85:19:15:8b:2e:86:71:3e:24:f7:d5:c3:
                    3d:11:0d:69:76:aa:96:3e:76:4b:60:1f:07:5d:ef:
                    72:6a:99:0c:5a:7d:20:43:6f:6f:37:15:6c:a2:d1:
                    21:6a:74:9c:19:86:5d:a4:db:10:12:56:5b:6a:e3:
                    89:89:86:5e:6a:87:b8:ef:5b:57:b8:41:fd:32:31:
                    55:b1:ff:ca:89:0e:9f:9b:4c:8a:64:f9:9b:5d:1b:
                    7a:4d:5c:84:66:ae:96:b7:2a:09:71:77:80:a7:6e:
                    76:62:ee:94:e6:a4:f3:67:f4:cf:b7:0a:29:72:98:
                    9f:c2:d1:6d:80:f9:9e:65:01:52:79:8e:97:f7:05:
                    8b:53:e1:ee:48:54:85:36:b3:25:72:7b:3e:20:96:
                    b3:9e:4b:2f:d0:e7:6c:64:e3:9b:04:4d:02:d1:50:
                    25:ec:46:ab:d6:33:92:e3:6b:47:60:94:5f:94:3f:
                    d9:56:4f:6a:e0:9b:bd:2b:a5:9f:cd:33:75:ce:36:
                    34:b8:ce:72:45:99:b1:06:39:e5:fa:10:5d:9b:e1:
                    7f:37:ea:0e:d5:ce:78:dc:da:1d:49:6e:26:af:fc:
                    a8:6e:03:6b:44:de:5f:06:06:8f:d9:c2:6c:18:75:
                    57:30:55:e5:94:9a:7d:cb:4a:64:02:68:53:bf:7a:
                    3d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2E:9E:58:04:43:BA:8D:5A:F4:33:71:C5:3A:DB:79:78:0E:97:71
            X509v3 Authority Key Identifier:
                keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/1C8D941432FB11F19CCB9904AA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.36.0/22
                IPv6:
                  2001:df3:a000::/46

    Signature Algorithm: sha256WithRSAEncryption
         0b:77:a6:19:b3:9a:d0:17:ff:81:fe:5f:ab:89:df:cc:2b:60:
         b4:58:6a:be:38:eb:27:8a:42:91:0c:0d:f8:12:a8:09:24:e6:
         0a:94:a6:09:d1:0d:cf:11:08:c8:7a:20:49:ae:2a:8d:d8:5b:
         1c:77:9d:da:fa:b1:bf:52:bf:32:0c:33:d2:33:4b:5b:41:13:
         39:a8:e0:5e:a3:97:3a:87:fb:a2:1d:ae:f9:6a:02:64:c2:c6:
         69:b0:1b:60:76:95:39:2d:20:35:3c:78:80:46:7e:c9:2a:67:
         27:d3:39:e8:6f:0e:5c:97:63:a7:b7:d2:fc:ba:cb:71:38:da:
         d5:85:81:b5:3c:1a:d1:a1:25:54:a1:8a:9f:9f:0a:5a:3c:9a:
         bc:fe:e6:2a:f3:13:47:d5:83:bd:ac:9e:02:be:a7:6e:21:93:
         94:47:29:0f:3b:15:20:01:c2:9d:5f:4b:2c:d1:aa:c3:e0:d5:
         1f:3f:a3:46:13:a9:f8:75:78:e5:23:a8:d9:57:85:19:f1:25:
         85:74:3f:6b:fc:76:2b:40:d0:37:2b:64:a8:0a:d5:57:c4:d0:
         59:84:66:25:3a:87:3d:84:ac:3e:b3:67:ba:47:4e:de:e7:0e:
         22:a4:c4:e3:59:48:a0:cb:66:e9:0b:46:ea:07:8f:98:76:40:
         39:53:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:17 2026 by rpki-client