Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/B945FB7A386011F0A5422D16C4F9AE02.roa
File:                     B945FB7A386011F0A5422D16C4F9AE02.roa (raw, json)
Hash identifier:          luRlkjknr5cyqJXtQcjerKPfeg9veut1Yjq2qhoOCvM=
Subject key identifier:   42:FB:5B:F5:31:B9:B1:D2:F8:12:10:B8:B5:3C:88:1C:39:FE:65:AD
Certificate issuer:       /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial:       06CF
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/B945FB7A386011F0A5422D16C4F9AE02.roa
Signing time:             Sat 02 May 2026 23:28:01 +0000
ROA not before:           Sat 02 May 2026 23:28:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135019
IP address blocks:        103.166.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
                          rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743 (0x6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
        Validity
            Not Before: May  2 23:28:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f68881-284f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:8b:d9:7b:bc:28:f4:02:56:c9:45:70:68:
                    16:d6:50:0c:4e:70:09:41:b9:50:3f:48:65:a8:c5:
                    cd:df:34:6f:da:31:84:2a:de:9a:98:4d:5a:65:2b:
                    2c:46:ab:f3:7c:b9:9e:9a:71:e1:f7:13:1e:3f:16:
                    7b:24:bc:96:c5:ca:a7:be:e4:47:02:83:dc:a3:74:
                    38:67:70:de:96:4d:82:77:86:d5:42:d4:f0:c1:a2:
                    ff:43:b1:c1:8c:51:4e:11:5b:aa:7f:2d:dd:0f:d5:
                    30:bf:19:2a:4d:37:44:ad:ec:62:8c:48:46:10:40:
                    94:3a:d2:36:9d:a1:ac:45:5e:50:43:13:4d:2b:6b:
                    14:8b:bc:83:ce:54:27:88:e5:ea:f5:de:37:c3:19:
                    00:e0:9f:9c:73:52:df:87:02:e5:3f:b9:30:a0:35:
                    22:be:7a:31:59:65:11:d1:e4:fd:ea:a5:0e:67:ab:
                    f9:b8:73:3b:95:13:27:f1:b5:6e:46:05:e7:b5:da:
                    ac:6b:cc:a8:99:d9:5d:c5:19:1e:ef:a5:ed:33:90:
                    e7:23:f3:a9:e7:6f:d0:d5:db:c6:c3:bf:74:18:75:
                    59:2f:0b:37:26:bc:b2:e7:c7:a5:00:71:d1:e0:1f:
                    95:a4:cb:68:7d:28:5d:a5:e9:d5:49:ac:98:84:d5:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:5B:F5:31:B9:B1:D2:F8:12:10:B8:B5:3C:88:1C:39:FE:65:AD
            X509v3 Authority Key Identifier:
                keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/B945FB7A386011F0A5422D16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5d:5d:71:4f:22:0d:d3:7b:7d:99:3f:7b:21:71:8a:d2:0a:
         cc:16:c6:ae:d2:da:14:5a:61:8f:fe:39:11:27:99:3e:25:48:
         28:54:1f:99:b7:a1:39:2d:43:76:e5:b8:c4:c1:42:d5:a7:32:
         b5:48:b4:78:9e:4d:d2:fe:9c:f1:b6:7b:ef:6e:50:51:cb:00:
         11:f5:76:8f:5a:54:86:14:8f:4d:52:15:2a:61:c0:1f:49:f5:
         82:83:54:5e:1d:45:5b:42:50:67:d2:75:d7:ba:2b:f7:32:98:
         7c:eb:3c:e9:b7:ca:b0:12:be:87:8d:1e:76:e7:44:b0:27:4a:
         cb:b8:ad:f8:8e:17:05:d4:fb:e6:22:cc:6f:e4:c3:ac:07:db:
         c2:eb:e5:a4:d7:0e:9a:25:0b:f1:ee:07:21:f0:8d:6e:c0:dd:
         83:f5:67:72:29:67:bd:0d:8f:01:3d:db:11:24:0a:af:76:31:
         66:f6:15:db:67:5d:e6:d1:72:4f:22:3a:21:23:98:8d:93:70:
         6a:b8:3e:f3:ba:c0:fe:d6:dd:7f:3e:a0:15:e9:bf:54:32:d4:
         9c:6e:3a:7e:d0:f2:45:e9:aa:07:34:5c:b7:3b:00:46:5f:f3:
         84:fd:89:15:8e:3e:b4:1c:32:a4:e3:49:1b:74:1a:89:65:b3:
         6d:86:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:39:19 2026 by rpki-client