Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/A2239B14782011F0A1950D84C4F9AE02.roa
File:                     A2239B14782011F0A1950D84C4F9AE02.roa (raw, json)
Hash identifier:          5DzMHobT3fixkjq5oY5EZAc6t2lRyOkthuLjkofacKs=
Subject key identifier:   58:A5:69:37:2F:77:9A:BB:AF:20:74:5D:D9:1C:DB:7E:D6:55:87:1B
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35A8
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/A2239B14782011F0A1950D84C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:32:50 +0000
ROA not before:           Wed 13 Aug 2025 08:36:40 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     55361
IP address blocks:        122.8.15.0/24 maxlen: 24
                          122.8.16.0/24 maxlen: 24
                          122.8.17.0/24 maxlen: 24
                          122.8.56.0/24 maxlen: 24
                          122.8.62.0/24 maxlen: 24
                          122.8.82.0/24 maxlen: 24
                          122.8.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13736 (0x35a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Aug 13 08:36:40 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a48652-ee58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:96:99:12:c8:fa:49:a9:6d:a1:48:53:f3:
                    f3:07:b9:f3:9e:f4:1f:1f:65:30:29:1b:35:1a:92:
                    b1:c1:8b:42:7c:90:25:51:6b:1e:dd:58:1d:8f:9f:
                    ef:8d:0e:18:1d:6f:e9:d0:5c:55:b5:78:ef:47:6b:
                    a2:8e:2e:23:86:05:a2:ed:fb:09:8f:8a:ae:ab:37:
                    ac:f5:a7:c0:5a:64:ba:41:87:4f:76:13:59:3e:66:
                    40:4a:4d:89:b4:39:36:98:d7:6c:1a:e6:1d:2a:10:
                    b2:08:c0:55:35:e5:91:67:8a:88:14:e6:a3:13:61:
                    82:af:c6:b0:d3:3c:9e:71:88:7a:0c:31:24:20:aa:
                    31:52:e2:22:a8:38:58:91:b4:99:1b:d5:1b:bb:50:
                    b9:d1:ee:db:b1:78:3c:7a:70:24:5d:d4:1f:f3:21:
                    99:b6:a7:88:96:f3:ef:55:a8:25:2a:f7:c4:c7:08:
                    65:82:29:52:8b:e0:a0:9a:e2:6c:66:a8:93:3f:24:
                    0c:db:0e:f3:47:17:23:4e:6e:b6:14:ce:41:ec:bd:
                    4b:45:99:5e:84:57:78:7c:40:87:29:31:0a:51:3d:
                    f8:31:7c:91:33:a4:6a:75:4d:a3:67:72:d3:2b:f0:
                    3f:f4:87:6d:39:52:94:73:3e:75:5a:9c:b7:06:70:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A5:69:37:2F:77:9A:BB:AF:20:74:5D:D9:1C:DB:7E:D6:55:87:1B
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/A2239B14782011F0A1950D84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.15.0-122.8.17.255
                  122.8.56.0/24
                  122.8.62.0/24
                  122.8.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:41:5e:fa:c1:86:a2:14:6e:6c:5f:f3:65:fb:7f:d1:1f:b2:
         f1:7b:36:c7:4d:67:9f:f2:11:ba:cb:4e:b3:db:d4:31:60:e5:
         4c:b2:fb:83:9a:a8:08:b7:c9:ab:0b:90:c3:67:f1:7f:d1:87:
         65:6d:07:db:59:97:d2:26:b7:c6:4f:c3:c6:0d:91:ae:22:81:
         38:b3:58:e4:07:a6:88:26:cf:7a:c7:9c:e6:14:78:77:0a:9a:
         7e:ca:a2:13:9e:bf:46:18:15:28:75:61:a7:4a:f6:62:a2:7a:
         1d:44:3f:db:23:5e:f9:f0:57:b7:e2:24:6f:2d:8e:a2:12:a8:
         14:b3:30:18:75:35:4e:c3:dd:af:09:62:6a:4f:25:1a:3f:07:
         02:84:5d:e9:8d:21:09:0e:46:21:a1:ed:c6:b2:ce:ff:7c:f2:
         1b:de:1f:21:d8:b3:f7:4c:8a:e6:9d:7a:af:14:99:3b:e4:fe:
         17:3f:df:34:f5:de:0d:d2:57:ed:5f:55:e6:65:e4:64:07:e8:
         5c:66:2e:e3:6d:b1:2b:bc:b5:95:c3:06:a7:9f:46:5f:9c:6b:
         20:52:96:16:8e:bf:22:fd:c9:c2:2d:b3:05:04:9d:3b:2f:f7:
         fe:51:b6:99:14:0c:f5:e8:91:e3:94:45:c8:35:76:87:b8:11:
         6b:e2:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:57 2026 by rpki-client