Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/C80572DEF70911ED9D4B561AC4F9AE02.roa
File:                     C80572DEF70911ED9D4B561AC4F9AE02.roa (raw, json)
Hash identifier:          NLPxqKYUf9lOT/IENYdccH8n5nolWXb5/WWyykUnYuA=
Subject key identifier:   F4:38:13:34:2E:C0:B5:10:73:42:C1:20:02:9B:DA:37:24:2A:A3:94
Certificate issuer:       /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial:       024A
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/C80572DEF70911ED9D4B561AC4F9AE02.roa
Signing time:             Sat 13 Jun 2026 02:31:49 +0000
ROA not before:           Sat 13 Jun 2026 02:31:49 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135654
IP address blocks:        103.137.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
                          rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
        Validity
            Not Before: Jun 13 02:31:49 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2cc115-9fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:70:e4:de:d0:16:0d:39:82:ca:e9:6b:e6:
                    fb:44:62:35:4a:4d:24:34:a2:9f:3d:4d:dd:47:1f:
                    2d:ad:bc:be:b1:07:b0:91:dc:09:36:62:72:1c:03:
                    f1:7f:02:27:4e:17:52:ab:bb:ba:b3:fb:f6:bc:ed:
                    ca:7f:16:86:18:ef:77:dd:55:d7:a7:b9:12:57:dc:
                    19:58:47:a2:0d:bc:a1:55:ea:6c:30:7a:5d:0f:cf:
                    3b:82:ed:45:19:fb:29:13:5e:dc:8c:db:e3:f1:15:
                    94:f0:e7:66:5b:d9:e1:d4:e7:f3:9e:2f:12:ca:44:
                    3c:2f:01:95:39:2a:29:db:b4:aa:d7:ea:57:42:be:
                    ee:7f:00:a3:b8:5c:51:c1:9e:c8:60:d8:e1:73:b7:
                    96:8e:92:bc:56:4b:5f:e9:ff:eb:1e:a9:d5:fa:0e:
                    f1:62:46:4d:be:1f:c5:a4:8a:bc:d2:12:54:38:ca:
                    4c:be:15:9c:fe:44:f3:7e:7e:c5:74:f3:6d:ba:f3:
                    a3:a3:03:22:c3:2f:f3:6c:3d:b8:84:97:50:b8:7f:
                    94:54:60:e4:e1:a4:7b:89:4b:cd:8d:49:c7:7f:6c:
                    62:b8:bc:16:21:05:f3:97:01:14:a8:9a:45:cf:98:
                    46:e9:71:dd:99:6d:9d:dc:a1:12:d6:36:91:18:a3:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:38:13:34:2E:C0:B5:10:73:42:C1:20:02:9B:DA:37:24:2A:A3:94
            X509v3 Authority Key Identifier:
                keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/C80572DEF70911ED9D4B561AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:b4:5d:4e:5b:6f:f0:0a:d9:a6:6e:ac:2c:1e:06:32:54:
         93:eb:e2:dd:49:ca:4c:37:70:7a:97:57:74:34:97:70:21:d0:
         1d:dd:85:5d:e3:de:8d:49:a2:76:5c:3a:c9:c2:0f:19:5f:8a:
         44:e9:47:bc:95:b2:bb:0b:8a:6e:eb:fa:6b:3c:06:fb:b9:99:
         63:82:dc:08:08:64:97:ca:e4:a7:a0:b9:a1:3b:87:2e:37:44:
         c6:e2:1e:00:43:55:b1:73:f7:b9:72:52:27:18:96:b1:f6:b2:
         8c:8c:e8:c1:df:e4:b7:86:49:6e:6b:4b:fa:22:10:f6:09:d8:
         1a:e4:96:bb:51:b7:4e:97:57:e8:46:01:db:88:7e:60:e6:39:
         e7:40:e0:b3:6c:7e:16:81:29:b7:7a:b4:85:56:8b:f8:f6:09:
         02:33:b3:ee:bd:11:06:78:b5:2e:78:06:a6:7b:15:41:7a:03:
         c3:11:45:a6:25:27:05:50:45:f8:9f:30:ed:87:8c:b5:0d:62:
         69:b8:94:a6:14:7a:54:55:f1:a4:56:a4:3c:0a:fc:14:8b:b1:
         70:e6:38:e8:1b:d6:61:81:f8:b5:8f:10:8b:eb:09:0c:89:25:
         6e:ed:32:e9:d8:9a:98:23:9d:01:ad:6a:b2:f9:9d:53:c9:66:
         7b:d4:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:17 2026 by rpki-client