Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F180E2B24FD011EFBC17A55DC4F9AE02.roa
File:                     F180E2B24FD011EFBC17A55DC4F9AE02.roa (raw, json)
Hash identifier:          WVSuSVu9XtzUKG1iJdX4QT5xrlejU2MB2s3fixWP2cM=
Subject key identifier:   B8:D8:14:88:41:D6:2F:F3:3E:CC:DC:F0:38:5A:AE:7F:89:A3:27:FF
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35CC
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F180E2B24FD011EFBC17A55DC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:13:54 +0000
ROA not before:           Tue 31 Mar 2026 16:13:54 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     6079
IP address blocks:        122.8.36.0/22 maxlen: 22
                          122.8.96.0/22 maxlen: 22
                          122.8.100.0/22 maxlen: 22
                          122.8.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13772 (0x35cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 31 16:13:54 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf2c2-13db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:e2:8e:35:96:d1:4b:6c:d4:66:76:68:8a:
                    01:04:1d:bf:1b:3a:b9:3e:6f:18:90:51:02:01:2f:
                    9d:79:ff:d9:eb:14:21:f3:69:b6:09:37:3a:cf:23:
                    de:31:f0:9a:73:c9:c9:fa:58:ba:5e:37:98:61:3a:
                    68:51:bd:a3:d2:9f:b4:a9:ab:b2:13:25:69:66:ee:
                    86:40:04:d5:99:65:83:4b:41:5f:f9:ad:b9:aa:3b:
                    a6:bd:a8:cb:08:da:28:55:5c:2f:1b:2c:b9:ef:d5:
                    aa:f3:af:44:06:9d:06:50:0b:15:34:c4:91:b2:0a:
                    95:b7:78:e7:06:87:75:81:e8:c6:e2:d8:9b:95:62:
                    06:ed:63:52:1b:ea:d8:75:e4:57:d2:ca:e4:e8:be:
                    99:2e:70:54:ad:58:02:90:fe:48:b6:f5:1e:e7:ab:
                    4e:2f:86:4b:93:42:25:cc:34:43:87:8f:16:37:d0:
                    d2:ba:35:c0:91:93:43:60:26:5b:61:10:6e:f6:28:
                    3a:93:07:6f:98:f1:e0:67:05:71:fa:a9:09:f8:d1:
                    b5:e2:af:43:b2:79:59:4e:02:fb:d2:89:f2:93:78:
                    60:36:a8:3f:d4:bb:f2:fb:b7:66:eb:f9:a7:25:10:
                    d3:c2:5f:4b:02:d1:df:8c:d1:ca:e6:fe:9e:fd:dd:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:14:88:41:D6:2F:F3:3E:CC:DC:F0:38:5A:AE:7F:89:A3:27:FF
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F180E2B24FD011EFBC17A55DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.36.0/22
                  122.8.96.0/21
                  122.8.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:b6:06:74:f7:17:44:fc:5d:88:3c:69:62:40:a8:ca:88:a9:
         1b:28:d0:63:8a:fc:c0:56:dd:4d:43:69:30:c3:0c:4c:cc:88:
         3b:0f:03:61:8c:2c:90:09:52:e0:22:a1:2d:c8:0f:0f:ab:af:
         43:80:1d:c6:ec:18:94:75:c1:ab:06:9c:c0:18:9d:0b:6c:72:
         cb:d4:d9:a2:f0:38:37:4b:15:ac:91:b4:6c:79:68:40:fa:42:
         a7:8e:99:b0:2a:88:95:6b:43:47:52:8a:b0:52:c4:40:46:0a:
         0c:9e:01:2d:20:4d:14:41:71:39:f1:43:a2:c6:3d:bd:1f:eb:
         8a:b3:30:65:31:f4:d5:bf:d7:22:f4:59:86:28:2d:8b:e1:0d:
         c7:e0:3a:dd:f2:42:b8:d5:2a:0c:32:68:12:e4:90:36:13:c3:
         12:46:ec:e0:cb:a6:dc:3e:05:ce:81:9c:59:45:0e:a2:7e:09:
         e4:d3:ca:e5:12:1c:ec:9b:6e:57:26:e0:65:23:52:ad:d6:74:
         04:91:a1:23:5a:41:43:c0:94:22:32:b9:89:03:db:9c:7e:7c:
         6b:4b:c2:86:17:4c:ac:c1:06:f2:0c:94:f1:52:f8:08:de:d7:
         16:8c:8c:cf:3e:5e:7d:12:e3:ae:23:42:e0:b8:db:c4:ff:9b:
         40:93:17:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:43:13 2026 by rpki-client