Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
File:                     8479151EC72011EA8062547CC4F9AE02.roa (raw, json)
Hash identifier:          tN7pJtNg+nlIKmKFKGCT+f/Kr7r68GVLyD9cH61DtC4=
Subject key identifier:   7D:0D:A1:55:1F:D9:10:24:D7:BE:D4:F2:69:DF:AD:5A:55:3C:0B:4C
Certificate issuer:       /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
Certificate serial:       092C
Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
Signing time:             Mon 08 Jun 2026 20:24:22 +0000
ROA not before:           Mon 08 Jun 2026 20:24:22 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139034
IP address blocks:        103.138.186.0/24 maxlen: 24
                          103.138.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
        Validity
            Not Before: Jun  8 20:24:22 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2724f6-95c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ef:9d:bc:05:07:2b:e7:2e:ff:ee:1d:87:8d:
                    91:c9:cb:28:7f:47:f1:9f:34:c2:3b:7f:98:53:55:
                    14:cc:c1:9f:2d:3e:a6:9b:05:18:c5:d9:ed:4e:4e:
                    9a:04:bc:33:44:df:94:14:9d:10:c0:ec:8b:fd:f6:
                    fc:4f:ed:54:73:d5:92:bd:c7:b3:d8:4c:90:2d:d0:
                    62:8d:c6:48:bd:df:a6:d6:99:a6:6d:e9:28:c3:08:
                    92:2b:21:14:ed:d8:e5:9b:97:3b:18:08:e9:5e:9a:
                    5b:09:53:be:6f:eb:2c:bd:ab:b9:d8:5a:59:31:9c:
                    01:d3:cd:26:a8:c2:53:42:af:15:be:b8:8d:98:be:
                    2c:3a:e2:13:16:10:ca:bb:85:6c:a9:aa:18:9e:77:
                    73:0f:f2:58:8a:b7:a8:3f:2b:63:0c:5e:16:48:12:
                    e2:c1:ca:0a:bb:54:be:2b:25:b8:2c:96:a0:fb:31:
                    57:b0:58:c6:3a:52:92:9e:8d:d3:5c:be:bc:ff:8c:
                    b9:70:ef:48:cb:30:f6:9e:f2:9b:17:34:a8:22:8a:
                    eb:1f:89:c6:31:b2:bb:11:15:92:cf:38:1c:76:6d:
                    97:b4:e2:18:fb:61:4e:15:42:39:65:90:fe:9a:a4:
                    90:51:85:70:01:e0:9d:81:99:71:fd:12:2a:1a:b2:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0D:A1:55:1F:D9:10:24:D7:BE:D4:F2:69:DF:AD:5A:55:3C:0B:4C
            X509v3 Authority Key Identifier:
                keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:34:65:66:da:eb:54:2e:85:58:f9:c4:52:b6:19:9b:ec:
         13:4f:80:bb:20:91:c7:78:28:16:40:4d:3d:b9:3a:51:0a:4b:
         6b:83:e6:57:b6:89:a5:22:93:b8:88:8c:21:6a:73:4e:d8:d8:
         3b:c0:d0:90:23:ae:31:79:d3:65:2f:ff:76:a3:1b:5c:1f:0a:
         ee:3d:24:a7:0e:ad:47:14:6b:14:8d:c7:2b:3e:1d:72:e4:1e:
         7a:db:bb:18:02:6f:4e:6f:82:0c:52:47:17:13:d0:e0:95:ef:
         85:fe:90:26:97:57:27:e9:a4:34:e9:2b:92:88:82:9e:08:4a:
         ba:24:81:28:0d:46:29:d2:f7:14:c5:01:d9:7d:22:e7:44:25:
         0b:7d:4a:15:fe:b2:95:59:21:00:38:58:8a:89:ae:b8:61:8e:
         2a:7a:bc:ae:ad:15:2b:89:35:05:39:87:76:14:29:1b:3f:ad:
         d0:f8:ef:50:d7:56:ab:22:c8:92:e6:e0:27:36:16:65:4f:1c:
         e0:35:1c:1a:d9:9f:36:f2:d4:d2:8c:f9:53:e6:b5:a3:ae:d5:
         ba:5d:04:6d:09:03:bb:65:a9:cc:64:a6:1c:78:e2:85:d3:ea:
         79:09:4f:dd:a2:d6:21:95:74:36:9d:74:dd:23:18:97:03:47:
         ad:c9:7f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:15 2026 by rpki-client