Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa
File:                     0FFE5282122811F0AC9B4112C4F9AE02.roa (raw, json)
Hash identifier:          hvYPHarDWHv0diZ2Z9sjrMrnKIoU9wqJbUj+0JMrSEY=
Subject key identifier:   6C:C4:E6:7A:BC:63:56:8E:E0:FB:00:93:17:5E:53:C0:49:3A:1D:E8
Certificate issuer:       /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
Certificate serial:       0B71
Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa
Signing time:             Fri 06 Mar 2026 19:25:24 +0000
ROA not before:           Fri 06 Mar 2026 19:25:24 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137396
IP address blocks:        103.107.76.0/22 maxlen: 24
                          2405:cf40::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl
                          rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2929 (0xb71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
        Validity
            Not Before: Mar  6 19:25:24 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ab2a24-d566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:88:95:b1:85:a3:bc:57:04:84:e9:9e:c2:
                    99:5a:33:d6:49:4a:81:58:b2:d6:18:53:d8:57:f2:
                    ce:d6:91:da:56:96:d3:73:11:48:b3:c3:dd:ac:f7:
                    3c:25:ce:f4:26:c7:b9:48:58:d7:91:11:b0:42:68:
                    aa:a1:78:eb:80:bd:44:d0:55:35:3e:97:49:cd:f0:
                    a9:32:87:f3:2f:8e:49:e4:c2:25:23:08:29:a5:39:
                    93:0e:6e:86:c6:9a:55:4a:8f:87:1a:a2:fc:cf:bb:
                    e8:3a:b7:b6:2f:fb:99:20:da:87:f9:9b:ad:37:24:
                    33:a5:c6:df:fa:21:43:fa:7b:4f:fc:b3:84:2a:92:
                    65:ea:23:3e:c4:fc:23:36:aa:4b:b8:95:ca:b0:3a:
                    8c:fa:15:50:cd:f7:05:56:3a:42:9d:78:c5:30:11:
                    6a:94:8d:b9:24:81:84:dc:f4:6a:46:92:af:42:0b:
                    86:67:82:dc:55:cd:45:fb:2c:12:9b:1d:15:65:50:
                    25:01:b9:66:fc:5a:d5:0d:89:a3:00:67:42:a6:fd:
                    c1:81:d5:d3:80:f5:46:01:c6:b9:c5:ca:96:6d:6f:
                    bd:eb:59:83:a2:d9:ed:40:53:ee:f9:60:fd:f7:c1:
                    2b:c2:5a:a8:b2:c5:68:c7:47:19:6d:68:1a:66:41:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C4:E6:7A:BC:63:56:8E:E0:FB:00:93:17:5E:53:C0:49:3A:1D:E8
            X509v3 Authority Key Identifier:
                keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.76.0/22
                IPv6:
                  2405:cf40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:98:f6:f3:62:5e:6c:23:c2:d0:69:ad:b6:d9:ae:8b:60:ff:
         64:71:b5:6b:1c:2d:15:2d:d5:80:12:34:f1:e5:dc:a9:ff:fb:
         16:2d:26:78:fa:84:4b:f3:79:e2:a7:10:3a:18:42:a3:b5:e8:
         a2:4f:2d:ac:30:4e:e4:47:f0:37:4b:76:2c:d6:2a:52:85:cc:
         66:e0:67:86:f3:a3:c5:db:87:c0:6c:03:59:a4:61:ce:96:b3:
         a1:01:18:a0:a6:d0:6e:af:cd:a3:f0:3e:6e:43:e1:0d:34:92:
         da:48:73:96:65:64:05:63:cf:35:24:31:da:d1:94:12:69:df:
         67:21:03:59:91:b3:ee:7a:20:2f:cd:e9:28:89:a0:af:6f:75:
         f9:76:10:ce:2b:3d:76:e4:b7:f6:63:18:60:a8:33:82:c3:8e:
         08:43:18:12:4e:03:e9:0b:00:8f:e5:43:eb:e2:c5:1a:d4:3d:
         d5:b9:31:b0:37:44:6f:33:d1:a2:8b:be:ec:33:56:73:51:d8:
         8d:f8:63:c5:2f:b3:4c:55:19:2c:45:ef:bb:f3:1b:50:7e:9d:
         31:54:69:d5:43:12:ae:29:28:97:d5:b8:3f:22:83:fd:94:73:
         77:ea:bb:61:fd:b7:40:e6:41:3f:83:64:7c:2e:13:a2:f4:32:
         97:5d:b7:9f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICC3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3
NTM0QzQ3MzAwHhcNMjYwMzA2MTkyNTI0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFiMmEyNC1kNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3+GIlbGFo7xXBITpnsKZWjPWSUqBWLLWGFPYV/LO1pHaVpbTcxFIs8PdrPc8
Jc70Jse5SFjXkRGwQmiqoXjrgL1E0FU1PpdJzfCpMofzL45J5MIlIwgppTmTDm6G
xppVSo+HGqL8z7voOre2L/uZINqH+ZutNyQzpcbf+iFD+ntP/LOEKpJl6iM+xPwj
NqpLuJXKsDqM+hVQzfcFVjpCnXjFMBFqlI25JIGE3PRqRpKvQguGZ4LcVc1F+ywS
mx0VZVAlAblm/FrVDYmjAGdCpv3BgdXTgPVGAca5xcqWbW+961mDotntQFPu+WD9
98ErwlqossVox0cZbWgaZkG04QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGzE5nq8
Y1aO4PsAkxdeU8BJOh3oMB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE
NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUExQkUvNzAwODQ3N0U0RDYwMTFFQUFCNjM1Mzc0QzRGOUFFMDIvMEZGRTUyODIx
MjI4MTFGMEFDOUI0MTEyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2tMMA0EAgACMAcDBQAkBc9AMA0GCSqGSIb3DQEBCwUAA4IBAQAs
mPbzYl5sI8LQaa222a6LYP9kcbVrHC0VLdWAEjTx5dyp//sWLSZ4+oRL83nipxA6
GEKjteiiTy2sME7kR/A3S3Ys1ipShcxm4GeG86PF24fAbANZpGHOlrOhARigptBu
r82j8D5uQ+ENNJLaSHOWZWQFY881JDHa0ZQSad9nIQNZkbPueiAvzekoiaCvb3X5
dhDOKz125Lf2YxhgqDOCw44IQxgSTgPpCwCP5UPr4sUa1D3VuTGwN0RvM9Gii77s
M1ZzUdiN+GPFL7NMVRksRe+78xtQfp0xVGnVQxKuKSiX1bg/IoP9lHN36rth/bdA
5kE/g2R8LhOi9DKXXbef
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:53 2026 by rpki-client