Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/026757CA3E2A11F19724AD26B6833773.roa
File:                     026757CA3E2A11F19724AD26B6833773.roa (raw, json)
Hash identifier:          yGLqEyfKOhCLMSX2whrGvvy8lUSZ6kp3DgyqhvORmyU=
Subject key identifier:   7C:80:6E:25:71:DF:B7:3F:4E:CF:2A:CC:EB:1C:BA:E9:81:34:51:E8
Certificate issuer:       /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial:       055A
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/026757CA3E2A11F19724AD26B6833773.roa
Signing time:             Wed 22 Apr 2026 09:02:38 +0000
ROA not before:           Wed 22 Apr 2026 09:02:38 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     63888
IP address blocks:        43.229.28.0/22 maxlen: 22
                          43.229.28.0/24 maxlen: 24
                          43.229.29.0/24 maxlen: 24
                          43.229.30.0/24 maxlen: 24
                          43.229.31.0/24 maxlen: 24
                          103.41.104.0/22 maxlen: 22
                          103.41.104.0/24 maxlen: 24
                          103.41.105.0/24 maxlen: 24
                          103.41.106.0/24 maxlen: 24
                          103.41.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
                          rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
        Validity
            Not Before: Apr 22 09:02:38 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69e88ead-56ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:92:63:81:ae:72:ed:02:72:49:e3:1d:59:
                    3a:52:d3:bb:7f:7e:0d:8e:93:8d:3c:b5:7b:a8:76:
                    33:c8:8d:9d:f4:25:0a:b9:e3:7b:56:ed:61:a4:71:
                    2f:2f:a4:5d:ad:b1:14:94:ff:3a:4c:19:a5:68:39:
                    8e:d6:11:29:43:dc:56:91:0a:5d:01:47:df:25:45:
                    b4:f6:fb:c2:a5:49:c6:a1:e2:78:47:85:63:d8:c5:
                    ba:f1:7c:0e:4e:92:87:a8:2e:65:b4:ec:40:d9:e6:
                    69:d0:3f:9f:7b:b7:8c:e2:1b:47:35:e7:b2:01:83:
                    3b:d9:6e:5f:a2:3b:f0:97:4c:9c:5c:c5:0a:b1:71:
                    3b:3a:ad:c6:47:c0:b8:f1:c9:ed:dc:60:00:98:81:
                    5a:f9:94:a8:85:80:3f:2f:a7:4c:a5:e4:44:5b:e8:
                    50:91:d2:33:41:fd:1a:fc:70:c4:fe:14:82:fd:c5:
                    f8:07:37:12:97:56:85:6f:b4:19:1a:86:b9:3e:e4:
                    62:6a:11:bc:43:6c:b1:31:be:1b:22:a4:ff:86:38:
                    84:83:e7:36:84:9a:86:b2:11:c2:1c:29:a5:d3:79:
                    30:c7:89:9d:72:88:d0:23:13:aa:13:d3:c1:b0:0b:
                    d5:b1:0e:b3:53:1b:71:47:95:42:a0:ce:5c:b3:ef:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:80:6E:25:71:DF:B7:3F:4E:CF:2A:CC:EB:1C:BA:E9:81:34:51:E8
            X509v3 Authority Key Identifier:
                keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/026757CA3E2A11F19724AD26B6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.229.28.0/22
                  103.41.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:51:b0:34:c7:fb:d5:81:4c:5d:2f:80:22:01:01:62:b9:f6:
         08:0d:b1:a7:40:3c:5f:7c:3e:c6:24:1f:46:e1:77:81:c2:55:
         3e:42:20:ad:a6:36:11:ff:f7:16:88:23:46:50:c2:d8:20:98:
         4c:57:cf:2b:30:88:57:98:84:4e:8e:31:36:26:3d:5b:91:5b:
         a2:3d:cc:40:43:df:32:ac:5e:eb:32:30:22:ce:30:87:06:07:
         17:7e:bf:3a:07:ce:1c:c9:f9:cf:d6:e4:67:54:1f:90:dc:26:
         d1:23:e3:d5:b5:fa:9e:2a:50:ab:ad:0c:b1:75:3c:6c:81:5b:
         72:a0:22:a0:1e:d9:b3:e3:ee:24:d7:c3:00:16:be:be:42:65:
         7b:08:9a:69:1c:11:93:38:c4:ae:0f:a3:fe:e9:dd:46:3a:a6:
         42:d0:ec:64:11:25:6a:6b:de:78:c5:57:9e:51:53:94:ae:41:
         7c:bd:59:ed:d9:48:a2:74:0c:01:49:e9:6f:35:69:bf:c4:a8:
         fb:58:ea:27:2c:1b:f4:4d:71:8d:9a:2a:00:7b:3e:7f:43:c6:
         0a:9b:b6:3f:ba:c3:ba:7f:0d:d9:96:d9:43:0f:4f:25:04:58:
         8f:2a:ad:ec:1e:53:91:dc:ed:f8:7c:63:a4:88:e5:ee:c5:95:
         27:90:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:15:30 2026 by rpki-client