Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
File:                     038C732E874611EB83B41D39C4F9AE02.roa (raw, json)
Hash identifier:          j8BYrRTXBbaeTTqgpqoP0f1iBbPMGpxA0WeG0MfgZmQ=
Subject key identifier:   49:B2:BC:2B:86:95:2D:F2:61:77:40:74:F8:86:17:84:64:A5:ED:A3
Certificate issuer:       /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Certificate serial:       0803
Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 21:27:28 +0000
ROA not before:           Thu 04 Jun 2026 21:27:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135351
IP address blocks:        103.214.208.0/22 maxlen: 24
                          144.48.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
                          rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
        Validity
            Not Before: Jun  4 21:27:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21edbf-12ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:1a:32:40:47:bc:d6:39:a1:4a:23:4a:c1:
                    74:11:e4:c4:e0:e6:c5:d7:f0:14:74:dd:15:d0:4d:
                    c3:81:e4:03:2e:a1:bc:8d:05:29:cd:ce:75:52:6c:
                    34:3a:46:26:c8:ec:6f:bb:4f:f2:cf:a6:11:04:f9:
                    fb:07:27:70:a8:a9:71:80:78:9b:a4:ce:d6:8d:15:
                    d0:d8:76:32:62:a6:8d:36:a4:31:27:e1:02:a0:57:
                    3a:49:9b:a1:5e:cb:32:39:67:9f:d1:4a:bd:d0:dc:
                    e2:a0:c8:a9:b5:37:a0:3e:71:fe:f7:c8:2a:1c:0b:
                    77:47:08:4d:4c:56:5c:21:07:94:0d:d7:bb:3f:02:
                    39:6a:f9:2f:47:64:ed:0a:87:47:de:4c:f4:43:79:
                    a9:1a:45:f4:cf:4c:56:58:06:d5:6d:b7:ab:c8:5f:
                    b0:50:b9:b1:ec:0f:e1:c6:bd:ea:6f:a5:5b:b7:6b:
                    22:92:ee:8e:4f:26:48:ab:92:41:7c:34:e2:1a:02:
                    f4:56:1b:05:cf:62:89:ec:bf:48:ad:af:5f:b7:9d:
                    11:6e:21:aa:49:1c:6d:e1:7d:1e:0d:26:06:38:76:
                    11:98:89:3f:78:ca:71:37:7b:0a:45:1c:5b:73:f1:
                    03:37:13:45:bd:a4:93:db:74:42:01:85:c5:d7:15:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B2:BC:2B:86:95:2D:F2:61:77:40:74:F8:86:17:84:64:A5:ED:A3
            X509v3 Authority Key Identifier:
                keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.208.0/22
                  144.48.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:32:eb:da:0b:45:ec:96:12:b6:b2:0a:0b:31:d7:4a:91:d3:
         00:61:63:ae:fa:d2:3b:e5:07:ac:3b:f8:0b:01:da:e6:a6:51:
         e5:58:80:08:79:cd:95:b6:e3:b4:76:bf:1b:78:40:b0:d0:2e:
         c0:19:36:c8:2d:9e:fc:cd:b7:4e:76:d5:de:ba:75:dc:02:5d:
         34:6c:51:ef:96:2c:c1:2d:20:cf:9d:18:e7:e3:33:5c:29:7a:
         d0:d4:86:11:c2:c8:a8:c8:0e:1f:94:9a:1a:7d:8a:0d:18:4b:
         ef:b1:fa:d1:76:73:17:b8:12:da:3c:77:1b:f0:4d:b0:ca:e4:
         d1:a6:45:d5:e6:25:d1:55:da:cb:ab:6e:6a:ad:80:77:a0:cc:
         b4:68:98:9e:c8:2c:6b:c3:fd:cb:de:13:f3:96:1e:0f:55:02:
         9e:d9:55:46:ce:6f:ed:e3:22:c6:bc:e4:bf:3d:bd:be:2c:ce:
         04:55:a7:bc:d6:fd:b1:88:a8:4e:ea:b0:a5:32:35:3f:3e:98:
         25:2f:36:30:7b:b6:5e:d6:6c:16:69:df:7c:d0:54:e1:c1:fd:
         5f:1f:54:23:8f:4a:7d:86:d1:b3:6e:87:43:8c:34:34:44:22:
         fb:d9:b8:c0:45:38:f9:e3:91:ff:18:98:0f:d8:67:69:69:41:
         ef:8a:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:36 2026 by rpki-client