Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/76CF6D4C746E11EE8A2F7739C4F9AE02.roa
File:                     76CF6D4C746E11EE8A2F7739C4F9AE02.roa (raw, json)
Hash identifier:          XLgQJAlWVch8scm5gOeRiMod1Yqb7zXlciOs/wb7oF0=
Subject key identifier:   0B:69:61:6C:00:D7:83:3E:70:5D:68:CC:C6:4A:B9:5A:42:75:79:EC
Certificate issuer:       /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973
Certificate serial:       01F2
Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/76CF6D4C746E11EE8A2F7739C4F9AE02.roa
Signing time:             Sat 13 Jun 2026 03:32:17 +0000
ROA not before:           Sat 13 Jun 2026 03:32:17 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     140625
IP address blocks:        103.151.62.0/24 maxlen: 24
                          103.164.234.0/24 maxlen: 24
                          2001:df3:ac80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl
                          rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C15B, serialNumber=15361347A10814A3E668B7269FE20707B18E7973
        Validity
            Not Before: Jun 13 03:32:17 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2ccf41-fd72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:5a:b9:1c:60:2b:a0:1e:ca:5a:7b:39:8f:
                    b2:21:00:04:87:32:e1:83:90:2e:7e:77:a5:89:b6:
                    b4:6d:02:7d:7a:99:a5:1f:45:cf:4b:40:48:2b:80:
                    80:f7:1e:67:c4:e0:66:c0:34:8b:b1:fc:e5:c5:74:
                    52:7d:e5:de:2d:b9:c7:44:be:42:0c:56:ac:a1:d7:
                    80:aa:99:d6:79:41:21:6a:37:92:2a:b1:5b:62:32:
                    3e:01:22:50:2f:40:ab:69:af:58:88:b2:09:98:a7:
                    0f:77:8f:2f:c9:b2:58:e0:ab:81:7f:72:40:85:73:
                    ba:c7:d0:64:35:25:9a:9a:af:03:f5:f7:5b:5d:50:
                    16:6f:5f:10:de:59:dd:35:b8:65:80:fa:df:1b:cb:
                    93:db:da:ba:9a:21:a3:4f:5b:c7:40:28:1c:f9:76:
                    0e:94:59:aa:f0:83:c8:95:fd:1f:10:b9:10:61:9b:
                    14:99:f4:22:83:0b:6d:4a:e1:59:8e:8b:83:8d:7b:
                    e8:83:83:b4:b2:76:a2:7a:c7:a2:a4:c8:ea:86:ef:
                    23:94:8f:f1:a5:a8:b8:25:b0:5f:b8:51:e9:42:c5:
                    5f:3d:ad:82:4b:d4:23:45:e9:b7:10:43:e2:7d:8a:
                    8c:a7:25:e7:4f:1c:1c:a7:01:0d:0c:77:be:bf:36:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:69:61:6C:00:D7:83:3E:70:5D:68:CC:C6:4A:B9:5A:42:75:79:EC
            X509v3 Authority Key Identifier:
                keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/76CF6D4C746E11EE8A2F7739C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.62.0/24
                  103.164.234.0/24
                IPv6:
                  2001:df3:ac80::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:81:db:f7:3a:da:54:22:ef:3f:2d:67:23:a3:9e:ae:57:92:
         d0:1d:1f:41:b5:f3:ad:da:9b:e9:6d:7d:ee:7d:4d:34:59:da:
         23:65:23:c2:07:3f:89:35:9f:f4:e3:75:6d:78:fc:e2:22:eb:
         42:c4:96:2f:c1:54:8f:65:54:ad:a4:9b:7a:17:ad:50:c8:42:
         02:ea:46:ea:5c:a6:bd:05:ba:46:04:b7:85:b1:65:b8:ff:cd:
         b0:cd:9b:c7:a1:e0:81:77:2f:02:13:84:ad:60:7f:ae:4d:8c:
         56:db:b7:04:9e:25:72:aa:9e:76:46:c8:34:28:d9:6f:97:e1:
         b0:fa:8c:07:f1:e3:22:ef:c0:a6:14:f8:b0:f0:a0:f3:08:1b:
         dc:ef:21:89:92:47:b0:ab:5f:6d:ea:18:f7:5e:15:4c:fe:58:
         74:e0:5e:1a:38:ff:8e:f1:e0:cb:ae:45:57:af:6c:66:37:b9:
         5e:99:be:82:6f:c4:ee:e0:b6:a6:ff:a0:89:b9:0f:23:8b:d8:
         66:5b:92:ac:ae:c6:72:fd:3a:09:ca:8e:c4:d9:2a:e9:d5:06:
         e7:45:f9:df:93:1d:dd:15:32:42:99:f2:a4:3a:6b:b6:c1:ac:
         d5:66:d5:de:44:6a:9c:b6:51:a4:cd:1d:bc:0e:36:e6:c9:aa:
         98:55:40:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:18 2026 by rpki-client