Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa
File:                     8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (raw, json)
Hash identifier:          3B96UlkLTKNYWeeC54aVnV7PH9CyaSoRvKgcab08m08=
Subject key identifier:   3B:A3:1A:D4:AF:C1:AB:75:83:8F:91:0C:1A:E4:F3:29:50:0A:09:6B
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       023B
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:07:28 +0000
ROA not before:           Sun 29 Jun 2025 02:51:10 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        103.92.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Jun 29 02:51:10 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a45630-d8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:01:5c:73:fd:ce:bd:06:88:af:7f:58:d1:a8:
                    e2:93:2d:24:da:04:63:f8:6c:bd:10:3c:52:59:b8:
                    29:88:15:78:33:36:a9:85:16:a3:f6:cc:fc:52:85:
                    48:67:ce:c0:6b:7c:77:c3:d8:ca:52:c8:83:28:1a:
                    1c:61:49:18:3c:21:5d:1a:e7:96:76:b1:ed:ea:47:
                    9d:7a:05:5a:b8:d9:06:55:f2:0d:9d:aa:3c:12:6d:
                    a8:cc:2b:1b:69:3d:b8:ee:ca:dc:e8:f1:8a:74:19:
                    46:91:1e:82:e3:86:f4:22:c4:e2:42:96:81:d9:5b:
                    ff:cf:fb:77:29:3a:97:07:be:78:37:b4:14:78:25:
                    04:9e:45:cb:77:7b:30:12:00:b8:b7:be:b8:3d:f1:
                    3c:a1:5f:4d:ea:f1:da:9b:d7:b3:f8:07:bb:98:6c:
                    85:73:f2:7b:40:31:18:a2:7a:1c:3d:80:22:28:72:
                    d8:e2:ce:bd:d1:8c:1c:9c:af:85:72:77:52:8b:c5:
                    44:47:ac:77:89:10:c4:fb:13:b7:34:91:4c:92:c3:
                    4a:de:fe:78:4b:c9:ec:d5:1b:4d:e1:c1:e3:e0:1a:
                    a8:78:25:2d:32:c0:29:69:38:ec:4f:8e:46:45:f3:
                    66:70:96:2b:51:75:da:63:aa:5c:a6:34:34:5c:80:
                    61:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A3:1A:D4:AF:C1:AB:75:83:8F:91:0C:1A:E4:F3:29:50:0A:09:6B
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:be:7a:63:15:ba:9e:84:24:c3:a1:6b:b0:c6:af:f8:c8:05:
         05:0e:68:a8:d5:e3:48:47:92:37:53:22:9c:a1:2d:45:46:fc:
         8d:a5:4a:d3:b5:15:99:b8:d4:b8:12:8f:7e:28:1c:5e:9d:7c:
         da:fb:a5:72:02:b8:cb:8d:52:d8:6b:11:30:99:6a:e3:33:2f:
         26:3d:ad:c0:02:20:60:e6:ae:ed:07:cd:00:4e:9f:00:81:b1:
         12:64:8a:78:26:e3:59:e9:72:05:81:f8:b6:75:61:d6:b8:7f:
         c3:30:a5:b5:58:d6:2c:22:28:a8:c9:a0:2b:ff:18:69:a9:42:
         55:31:48:b9:c1:ee:ae:8a:50:d8:b6:2e:e7:d8:f9:02:7c:dd:
         04:e3:b8:40:b2:69:67:2e:5d:b1:64:7a:51:b6:e4:28:01:19:
         29:77:7d:29:d4:1a:8f:8a:37:0f:d0:d9:3a:2d:e9:5c:a6:b6:
         a0:c7:4d:18:85:dc:23:2f:fe:14:1e:ce:18:b1:ac:07:9a:87:
         c9:76:bc:03:aa:3a:fa:7a:53:42:1f:bd:3f:a8:0b:f8:99:d2:
         4f:86:41:fa:fa:eb:be:12:9d:fb:1f:e4:06:89:d8:83:04:65:
         7c:3c:52:6c:3a:43:60:be:99:9d:fd:df:2a:18:a2:6c:7a:45:
         bf:80:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:00 2026 by rpki-client