Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/215FAD42B98611E9A053044FC4F9AE02.roa
File:                     215FAD42B98611E9A053044FC4F9AE02.roa (raw, json)
Hash identifier:          o9Abyi/MKdfpzHukIV0+6UFoiozAzGZP2RU3WmijfSw=
Subject key identifier:   DD:12:68:13:47:FA:96:D6:2B:7F:B9:E3:B4:EC:56:FF:45:99:68:DB
Certificate issuer:       /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Certificate serial:       0E99
Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/215FAD42B98611E9A053044FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:49:44 +0000
ROA not before:           Sun 28 Sep 2025 18:18:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139293
IP address blocks:        103.140.238.0/24 maxlen: 24
                          103.140.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
                          rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3737 (0xe99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
        Validity
            Not Before: Sep 28 18:18:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a443f8-7db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:03:68:ff:eb:23:01:c8:f7:42:59:39:23:
                    ea:5a:6b:bb:f0:56:31:88:1d:e1:cf:12:2c:42:e7:
                    00:35:b3:f3:9f:e5:09:a7:6c:35:d9:0f:7f:8c:f6:
                    38:7e:d0:4f:28:71:8a:05:86:0a:61:26:1c:08:b0:
                    b2:e5:dd:c1:bd:63:39:f5:a7:d7:93:72:5e:f2:b9:
                    e9:d6:9b:ad:9c:e1:f0:7d:b3:4a:33:36:cd:b4:1a:
                    c2:e5:2b:6c:61:a3:0f:cf:04:1a:2a:a8:28:0e:2b:
                    62:8b:3a:88:ae:4d:7a:81:63:f1:b7:c2:ba:ff:db:
                    2c:82:24:13:46:36:ac:49:e3:9b:a6:72:f0:f8:ea:
                    57:08:01:9b:66:45:5d:b1:5a:f1:e8:9b:4d:97:0f:
                    80:6b:a0:73:8e:65:31:22:aa:ac:46:9d:02:f0:27:
                    42:34:3a:db:f9:9c:35:fa:2b:a8:c6:b6:07:cd:42:
                    2c:ea:fe:4d:37:d1:c1:d0:d0:0c:74:44:bd:aa:7b:
                    32:e4:0d:9c:fc:be:f1:bf:13:e1:72:a8:72:ca:2c:
                    cd:6b:1c:7b:da:54:49:1b:a9:6f:82:ef:a6:cd:b2:
                    14:00:72:14:ae:79:af:7b:a0:19:78:64:b3:4c:9b:
                    30:57:99:aa:ec:65:9c:21:66:0e:a6:6a:ee:73:f8:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:68:13:47:FA:96:D6:2B:7F:B9:E3:B4:EC:56:FF:45:99:68:DB
            X509v3 Authority Key Identifier:
                keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/215FAD42B98611E9A053044FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:92:a7:2c:7a:c2:1a:6c:ce:58:2d:16:5d:cb:87:53:60:
         5c:c3:09:32:01:23:15:42:c6:17:90:b7:7a:cc:b3:0d:57:6f:
         b8:c0:a6:1c:bc:eb:76:30:82:ab:ec:27:a0:f4:fb:ce:9d:53:
         b3:b1:cc:c8:1b:2d:63:42:be:7c:86:28:e9:2b:35:a6:e5:c6:
         9d:2d:c8:1f:ba:82:a3:e0:30:38:0b:84:d7:11:42:dc:8e:5b:
         85:b0:3f:a3:24:99:bf:75:ad:2d:1c:35:a8:7e:8a:1c:17:8a:
         9b:e5:99:3b:09:78:21:ea:64:d2:3b:3b:80:88:fa:15:07:62:
         2a:85:37:ca:e1:d9:f8:75:47:b6:52:0f:66:c0:cb:88:49:df:
         7d:52:dd:c9:cc:eb:1a:e0:ba:e0:9f:f7:b1:c5:5d:60:08:96:
         dc:25:14:86:2e:33:3e:07:56:50:47:52:b2:68:ef:a6:75:3d:
         f7:51:00:e5:6d:3b:78:fb:e1:60:6e:55:d9:63:7e:8d:65:88:
         2a:3b:cd:05:c7:a4:71:43:d8:42:d8:a8:95:11:00:e3:c3:71:
         59:40:c3:b0:e0:f4:17:06:d3:25:70:69:02:35:75:fa:0f:56:
         27:ca:0e:1d:98:de:f2:d0:2d:ba:09:18:bf:87:f4:be:e2:23:
         90:9d:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:37 2026 by rpki-client