Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/8577B1EAD1BF11ECA166E56FC4F9AE02.roa
File:                     8577B1EAD1BF11ECA166E56FC4F9AE02.roa (raw, json)
Hash identifier:          vL3KqpEU4oZPQpi3CDZrgp/2H+64KoJ+VsBp1hjYpms=
Subject key identifier:   25:B8:FC:80:D4:88:D6:3A:B3:D3:05:B1:3A:9C:56:CF:9B:CE:F6:C2
Certificate issuer:       /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial:       0D02
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/8577B1EAD1BF11ECA166E56FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 11:29:00 +0000
ROA not before:           Thu 30 Oct 2025 18:37:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     38336
IP address blocks:        103.130.112.0/24 maxlen: 24
                          103.130.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
                          rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 11:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3330 (0xd02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
        Validity
            Not Before: Oct 30 18:37:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5747c-d360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:3a:da:c6:85:41:02:b7:81:a3:8a:9d:de:
                    61:f4:48:0a:0b:a0:ff:13:d6:84:b8:7a:16:3c:7f:
                    99:79:e5:e8:72:17:fa:e4:c0:5b:75:0b:78:cf:26:
                    82:2f:76:c6:4c:72:a2:25:10:a8:7e:d8:31:1b:ad:
                    89:96:5e:0e:c4:97:46:8b:9a:ee:a4:d5:03:7d:57:
                    d9:63:8a:85:4b:33:1b:3e:75:6c:68:67:30:54:16:
                    e3:b5:c1:40:c8:91:d8:e5:32:a0:85:db:58:83:86:
                    3d:19:48:37:92:27:d6:2c:e3:c9:72:55:d4:24:6d:
                    be:fb:00:14:94:6a:94:2f:d3:20:7c:f0:b8:8c:de:
                    d6:c2:5e:2b:65:4e:75:db:62:65:5b:ed:ba:35:df:
                    ba:c2:be:9d:fc:19:d1:3b:f8:81:e3:31:76:d3:14:
                    c4:4b:70:93:ae:25:57:95:e3:28:83:73:15:ef:5c:
                    89:11:8e:2f:09:aa:e6:0c:ec:d6:1d:fb:b6:15:0e:
                    1d:25:18:9a:06:e7:ec:8c:11:92:aa:d6:9a:e9:0a:
                    8b:54:f1:77:80:81:60:6c:a3:8c:63:cb:c6:3e:8e:
                    02:0c:db:09:91:4a:6a:56:0e:b6:ba:0c:a3:e7:7d:
                    81:e6:55:a0:aa:5f:b0:f4:5e:36:be:f4:c5:6d:06:
                    d9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B8:FC:80:D4:88:D6:3A:B3:D3:05:B1:3A:9C:56:CF:9B:CE:F6:C2
            X509v3 Authority Key Identifier:
                keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/8577B1EAD1BF11ECA166E56FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:35:d5:f2:f6:1c:71:cf:92:9c:1e:92:81:51:4d:89:19:c3:
         ec:50:46:ed:fc:3d:50:ff:0e:15:7c:0e:ad:f2:9c:8e:85:be:
         b7:92:4b:3c:5e:cb:d0:22:4e:e9:73:d1:eb:47:bc:d5:3f:59:
         47:02:1b:12:7c:26:a2:40:4c:0b:b6:d9:79:67:33:9f:7a:37:
         e7:47:74:df:71:29:28:94:1b:21:ef:52:36:be:23:de:39:45:
         3d:ef:ff:b1:42:92:0c:1a:3c:8d:f0:42:e4:10:89:a6:91:73:
         11:cf:e7:1b:12:8d:69:e8:48:4a:92:61:99:4f:41:a0:9e:20:
         45:e2:5e:20:44:f5:ae:0b:53:3c:e3:8e:1e:c8:fd:b4:65:8c:
         72:76:43:45:3b:6f:ad:8c:b0:86:32:1f:f4:12:c7:0e:08:dd:
         9d:3c:49:b2:9c:96:7e:89:15:a7:24:9e:56:1d:76:91:54:99:
         73:2f:24:e9:25:55:d8:ac:90:32:95:94:f1:a3:fa:37:b8:ec:
         ab:79:f7:50:53:79:e2:e1:fe:f4:08:cb:9e:92:29:20:7b:20:
         40:40:61:47:3b:30:a5:1f:85:9e:2a:f8:03:26:64:3c:6a:52:
         2d:62:aa:e1:47:c8:d0:a6:5e:94:b2:c1:fc:d2:5d:58:57:0a:
         50:59:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:54 2026 by rpki-client