Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/27EECF18EDF811ECBCAF5567C4F9AE02.roa
File:                     27EECF18EDF811ECBCAF5567C4F9AE02.roa (raw, json)
Hash identifier:          gkL9IgqrwOkZIyg24mdNbqROTtOYERD4H34jArPhYAs=
Subject key identifier:   6B:35:DA:EF:2D:3E:8F:5E:A2:17:C0:57:2A:84:59:C8:42:14:B9:71
Certificate issuer:       /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
Certificate serial:       037F
Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/27EECF18EDF811ECBCAF5567C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 01:32:41 +0000
ROA not before:           Fri 03 Apr 2026 01:32:41 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     135405
IP address blocks:        103.135.216.0/24 maxlen: 24
                          103.135.217.0/24 maxlen: 24
                          103.135.218.0/24 maxlen: 24
                          103.135.219.0/24 maxlen: 24
                          2404:84c0::/32 maxlen: 32
                          2404:84c0:1::/48 maxlen: 48
                          2404:84c0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl
                          rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915280B, serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
        Validity
            Not Before: Apr  3 01:32:41 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf18b9-ce22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:c2:47:c3:28:fb:3f:3d:da:29:9d:b6:80:
                    78:14:16:4b:aa:cd:f6:ee:6f:c0:a3:67:52:23:34:
                    32:1f:b3:56:97:1e:f7:72:8c:1b:43:21:17:70:5f:
                    46:de:17:c8:6f:39:6a:10:8a:d3:fd:ba:40:47:c0:
                    00:de:87:9d:4c:d7:03:1a:7e:9f:f8:e7:54:ea:30:
                    8f:66:d2:36:a9:e6:47:92:55:15:d6:92:8e:c5:e4:
                    e9:5f:79:09:ac:1a:04:04:7a:9f:94:51:15:ed:e1:
                    21:9c:36:6f:ef:fe:a0:dd:93:b6:3e:1c:64:03:f0:
                    b9:be:01:50:b8:37:94:fd:80:f4:a6:67:e9:6c:db:
                    c9:14:92:4a:8b:1c:9b:34:f9:58:8d:99:0d:de:f7:
                    5d:9a:d9:ce:de:60:9f:16:0c:71:de:52:40:1e:8a:
                    ee:07:b4:86:c8:b3:08:c4:9d:d2:d9:3a:82:82:2d:
                    7e:07:d0:9c:c8:70:29:cf:22:f0:a1:9f:b5:46:1f:
                    6c:b5:11:ea:70:a6:26:ff:5c:73:d4:9a:63:b5:9a:
                    da:40:25:46:e3:50:5b:d0:a1:c0:46:1f:1a:28:b1:
                    ef:1d:73:ac:4e:88:01:ef:f9:f9:bd:9e:3d:fc:64:
                    b9:30:ea:79:be:45:c7:eb:58:9e:50:ec:57:c6:5e:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:35:DA:EF:2D:3E:8F:5E:A2:17:C0:57:2A:84:59:C8:42:14:B9:71
            X509v3 Authority Key Identifier:
                keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/27EECF18EDF811ECBCAF5567C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.216.0/22
                IPv6:
                  2404:84c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:3a:2d:71:ab:3c:98:47:ef:cf:e3:54:97:e8:69:cd:09:fc:
         4c:cc:25:71:27:10:a2:92:71:04:6b:1c:bb:9a:07:71:04:65:
         f2:6c:0a:23:d0:fe:a0:c4:ae:ee:c6:d2:44:56:da:4e:56:a2:
         e4:a0:2f:c7:bc:1a:4e:3a:77:6e:87:a5:33:09:be:12:85:06:
         6f:68:93:cf:44:38:5d:bb:66:29:fb:b6:c3:3f:0e:d2:c6:24:
         4e:8f:42:3b:62:91:84:54:1f:82:5d:23:29:a9:fc:91:3d:cb:
         a8:51:df:58:3a:a1:98:5d:ae:98:c5:86:bd:75:ce:4d:99:04:
         99:0c:ca:ec:a3:7b:9a:af:b6:65:f0:2c:2d:e1:5f:09:54:d9:
         84:d4:2a:75:a0:3f:23:e3:36:bc:af:5d:4c:f5:63:5c:a3:7a:
         3d:7e:95:ac:92:01:b7:be:f5:8e:a5:22:ad:73:fd:83:06:a6:
         43:78:c4:2f:b8:86:ba:c1:fc:12:63:be:2e:ec:f0:fb:87:eb:
         ac:4d:ee:4f:64:5b:89:c4:54:0c:e9:de:35:cd:8a:8b:55:a1:
         6e:fa:16:90:e7:ab:73:eb:7b:2e:bc:9c:90:11:7e:3a:c1:9d:
         6c:58:5e:3e:68:fb:7b:c3:b5:5f:d1:d3:9a:8a:08:62:44:d2:
         44:14:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:54 2026 by rpki-client