Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/F72BF19CB4C711EE84AE602CC4F9AE02.roa
File:                     F72BF19CB4C711EE84AE602CC4F9AE02.roa (raw, json)
Hash identifier:          NOqEaP7U/yGr1eMLYAeMdC9Ec160B/2VK+AAEC/VD28=
Subject key identifier:   D3:23:12:4D:49:EA:9E:C6:CD:7A:7A:C1:D3:CC:82:A7:69:F3:F2:10
Certificate issuer:       /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial:       086A
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/F72BF19CB4C711EE84AE602CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:22:28 +0000
ROA not before:           Tue 02 Sep 2025 21:41:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135157
IP address blocks:        103.193.136.0/22 maxlen: 22
                          103.193.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
                          rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 20:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
        Validity
            Not Before: Sep  2 21:41:12 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a42f84-d617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:51:5c:bc:b5:43:4f:e9:6b:eb:23:50:34:
                    ce:3a:c0:92:28:3b:61:b0:e0:e4:be:93:01:e2:bd:
                    3c:c5:88:0f:1e:f2:86:39:91:55:85:b6:98:9c:2c:
                    b8:5e:d8:71:b4:e0:27:83:ab:a1:f5:ea:3b:2e:da:
                    3a:ee:3b:fe:09:d3:36:e7:9b:88:58:7d:fd:96:0f:
                    08:81:a1:a0:15:74:df:c0:df:2c:f0:85:71:d0:a4:
                    24:5a:ef:ae:65:dd:75:2f:48:d7:bc:28:b0:bb:1f:
                    a3:3c:44:5c:f7:57:a3:51:00:17:06:6f:bf:4b:89:
                    d9:29:80:42:54:86:cd:e9:c0:48:46:a2:6e:c2:2f:
                    b2:09:31:64:0d:83:a3:d9:3e:ec:2d:85:17:16:c0:
                    14:eb:54:70:b4:8d:50:da:ae:21:c9:e1:13:7c:86:
                    68:70:0a:72:43:ee:76:2b:1f:07:9e:5a:b8:14:06:
                    95:ca:4c:52:85:df:f6:35:9d:33:15:92:81:66:6b:
                    19:cf:32:37:aa:e4:fe:75:d6:c6:19:13:b7:43:0c:
                    0e:58:f1:89:2b:a8:a0:76:cf:02:08:1d:29:0a:e0:
                    61:c3:08:c6:cf:9c:8e:e4:1a:94:84:f6:32:42:7b:
                    90:d8:22:c6:c6:76:37:00:cc:81:04:8c:3e:11:97:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:23:12:4D:49:EA:9E:C6:CD:7A:7A:C1:D3:CC:82:A7:69:F3:F2:10
            X509v3 Authority Key Identifier:
                keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/F72BF19CB4C711EE84AE602CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:71:6e:dd:d7:0e:7c:9a:5d:58:c0:ab:11:af:20:28:fd:a2:
         48:5e:80:00:78:29:6a:1a:52:8f:98:8b:82:1b:79:31:7f:7b:
         05:53:c3:d6:da:09:75:44:27:63:3d:01:a9:b9:0c:27:bf:14:
         5a:2f:16:ca:21:67:0e:c5:23:01:98:ce:0a:0d:4f:bd:12:61:
         80:97:0d:0a:e2:66:45:37:0a:54:1a:8d:dd:a7:eb:d9:cd:50:
         9c:24:52:14:fc:5f:58:3c:16:8f:4a:22:3f:09:41:74:13:99:
         cc:48:f9:98:a1:ca:0b:5c:20:ec:1c:98:c2:2d:c0:3e:f6:65:
         ae:2d:ee:94:96:c6:c1:87:0a:36:ee:3f:6d:0f:0d:5d:55:ae:
         56:79:5d:73:4f:07:e7:f1:4c:be:01:d9:34:8a:74:19:c6:ca:
         00:78:65:a1:a0:50:3f:b5:65:c9:c0:f9:10:f4:49:95:af:6f:
         ff:aa:93:04:ba:a0:de:ea:60:4a:12:b7:95:c6:b8:55:54:22:
         b5:bc:0e:7d:a3:50:74:49:1c:85:e3:b2:6f:1d:2c:36:b1:32:
         d6:65:2c:8a:c8:7d:1a:05:c4:b6:21:e5:e0:9e:f3:58:b9:ca:
         38:d9:18:e2:4c:87:a2:e4:4e:4b:17:ac:f9:4a:9b:b9:62:4a:
         0d:81:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:18:31 2026 by rpki-client