Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/C1313974CD3611F0AF85B537C4F9AE02.roa
File:                     C1313974CD3611F0AF85B537C4F9AE02.roa (raw, json)
Hash identifier:          7PSBZE761r99nDq7w69lc/15R18Rh5o4JUDDZj20TGE=
Subject key identifier:   F0:9D:C3:43:22:E5:61:CF:31:B5:74:97:16:4A:6D:FF:04:B7:D4:3C
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       10F1
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/C1313974CD3611F0AF85B537C4F9AE02.roa
Signing time:             Sun 31 May 2026 18:05:11 +0000
ROA not before:           Sun 31 May 2026 18:05:11 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134153
IP address blocks:        103.138.26.0/24 maxlen: 24
                          103.138.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4337 (0x10f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: May 31 18:05:11 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7857-bdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bc:f5:f7:0b:d5:97:15:62:89:84:29:7d:f1:
                    e9:a1:99:cc:da:d8:0a:8c:17:a1:70:83:25:88:f7:
                    75:03:53:7e:88:a8:40:68:d8:76:2b:d0:d9:fc:84:
                    04:f7:55:7f:dc:ac:39:7b:46:0e:a2:a3:0b:37:ef:
                    50:62:c0:b0:b1:0a:7a:ae:c1:58:21:e6:bc:99:4d:
                    8d:cd:3f:93:1b:cf:b1:74:ae:9b:51:95:00:5d:55:
                    8c:39:bf:b2:75:da:f4:a4:bb:2d:bb:42:19:cf:29:
                    02:61:f0:a9:86:b2:35:48:e2:d7:3f:9e:1a:25:29:
                    46:74:b9:3b:66:4b:73:66:ff:e1:72:43:70:ee:45:
                    ae:6a:63:36:62:ab:c9:f0:0d:c1:2c:a0:56:77:80:
                    75:37:ab:57:f1:4d:1f:63:28:eb:57:42:eb:c2:d2:
                    94:19:c9:4a:d7:5a:86:e8:d4:02:89:53:65:0c:23:
                    52:96:68:c5:31:67:5c:7d:8e:a9:91:21:bc:d1:61:
                    d2:99:44:95:51:90:2e:20:e3:f4:6c:50:be:38:0f:
                    46:ed:06:24:08:46:ba:f5:bb:08:72:f8:8b:43:d9:
                    74:4f:35:a4:a4:5e:90:36:e1:05:f5:8b:02:9f:a2:
                    52:40:db:ed:eb:e9:c8:70:50:85:da:51:16:3a:e0:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9D:C3:43:22:E5:61:CF:31:B5:74:97:16:4A:6D:FF:04:B7:D4:3C
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/C1313974CD3611F0AF85B537C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ee:32:8f:0a:a5:36:64:0d:e9:3d:59:1a:03:d4:f3:e1:52:24:
         06:7c:37:cc:e5:27:f0:91:e6:f4:7f:98:14:90:97:85:ba:a6:
         01:42:1d:66:91:65:62:87:38:e7:57:43:b2:4b:23:70:ea:37:
         8e:92:4b:a4:b3:0b:30:d4:8c:58:67:bc:0d:5b:25:10:83:d7:
         2f:58:d8:d5:ca:70:4c:44:c2:d1:d2:78:1a:1f:c0:08:47:b1:
         53:0c:59:8c:be:62:93:9a:52:13:d2:ab:1b:3c:63:42:bf:13:
         63:de:ae:f2:6a:b6:68:83:20:ff:a5:a2:01:81:79:de:4f:45:
         2a:48:0d:91:3c:82:80:5b:59:43:11:23:f6:25:d8:71:90:3f:
         d0:9f:0b:6f:dc:40:6e:26:6b:19:86:d0:d7:db:0f:45:7a:c4:
         ee:9e:2b:af:27:8d:7d:05:0a:44:c4:dc:cf:a3:73:6b:26:9d:
         ce:f2:bd:38:f4:d7:ff:4d:2d:93:7d:a5:14:87:40:3b:15:bc:
         0c:ba:49:b0:93:5e:9c:14:99:72:2b:b2:47:a5:bb:40:13:b5:
         52:e9:36:50:f1:51:56:dc:fa:01:25:30:80:95:44:e7:84:cf:
         3a:a4:dc:53:4d:29:70:8d:4f:fe:03:f8:35:09:4b:98:50:01:
         4a:7e:9b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:45 2026 by rpki-client