Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/D3B421A2366811F0A18FF40AC4F9AE02.roa
File:                     D3B421A2366811F0A18FF40AC4F9AE02.roa (raw, json)
Hash identifier:          omkWE5Y2i4Y9rB60Umc+HfIUljZckcLxEOKEtjkJ+XM=
Subject key identifier:   56:76:7B:53:88:01:75:11:FD:08:D8:67:C0:9B:87:06:D0:A9:B4:45
Certificate issuer:       /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Certificate serial:       078D
Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/D3B421A2366811F0A18FF40AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:40:35 +0000
ROA not before:           Wed 21 May 2025 17:29:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139012
IP address blocks:        103.138.125.0/24 maxlen: 24
                          2404:cd40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl
                          rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
        Validity
            Not Before: May 21 17:29:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fb82-6e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fb:13:eb:b5:16:42:29:64:8c:d2:f2:10:7e:
                    b5:80:95:ca:87:1c:3e:0e:03:41:2b:48:f1:a2:e5:
                    3a:5c:d2:04:6d:17:3a:36:f4:23:d6:c9:b7:e7:7a:
                    0f:e3:c7:ca:07:8b:83:4a:a3:f4:50:19:84:22:ad:
                    e0:1e:8a:e4:03:62:32:97:ec:f9:47:93:ce:fe:8b:
                    bf:fe:f2:2d:44:b3:8c:d5:59:bc:ae:33:90:74:dd:
                    50:1f:c7:d8:19:74:52:e7:88:04:c9:56:01:51:69:
                    32:8b:0b:83:f3:a4:5d:c2:28:07:e5:0a:c5:79:96:
                    0b:30:fd:23:86:ca:54:25:68:e0:b1:e9:5a:a0:51:
                    b3:47:29:bc:d6:68:1a:98:59:e4:7a:1c:01:3c:8c:
                    49:8f:e8:bd:11:9d:2f:58:7b:ea:f8:72:f6:f6:fe:
                    a6:88:28:b8:33:f6:87:10:c7:97:04:47:01:27:08:
                    46:06:07:9f:64:05:94:5c:3d:fe:c5:24:bf:32:62:
                    13:63:44:4b:6d:04:25:88:b4:c9:d8:d4:e5:0e:29:
                    b1:f1:a7:06:ae:a2:49:87:c2:08:ff:bc:b7:87:8f:
                    fb:d8:3f:0f:5f:7d:3f:52:7d:b9:c5:cd:b9:0d:ed:
                    5b:35:78:a5:6d:89:df:aa:73:b8:45:97:d2:52:68:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:76:7B:53:88:01:75:11:FD:08:D8:67:C0:9B:87:06:D0:A9:B4:45
            X509v3 Authority Key Identifier:
                keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/D3B421A2366811F0A18FF40AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.125.0/24
                IPv6:
                  2404:cd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:b0:a5:ee:22:26:6b:d4:2a:56:b4:3f:1a:ba:47:f7:75:81:
         4c:1c:ff:d5:0c:01:b1:a4:79:fd:c2:47:76:eb:f9:83:5a:2b:
         8a:5e:94:2f:5e:9b:e3:2d:5b:e8:51:58:93:35:12:e4:c1:fb:
         bb:a8:90:2c:a1:1c:7a:64:43:11:5f:ce:52:58:5d:5f:91:32:
         02:45:a0:2d:d7:c8:7b:25:19:6e:df:8c:16:8c:31:8f:40:80:
         f4:26:58:17:42:7e:1a:6d:f9:e5:2b:3b:1d:8c:41:ac:46:90:
         16:e9:e3:b9:c9:dd:aa:97:7c:2d:bc:33:48:0d:e5:52:c8:65:
         45:c7:03:81:85:47:43:1d:7f:de:72:8a:83:16:34:68:88:33:
         05:08:d2:68:65:e7:e1:0b:eb:98:c4:b5:b1:70:6d:4a:53:7c:
         19:e2:3a:f1:c1:cd:a3:05:af:b0:ad:f7:22:a7:de:ef:9f:21:
         a1:86:00:54:e5:62:a8:18:09:51:7a:c7:e6:9d:f4:de:76:ab:
         91:b7:30:0b:7d:f2:d7:d4:25:cf:66:a3:88:a6:82:01:c9:c2:
         7e:dd:23:e0:72:ae:eb:88:45:d0:ff:9d:10:65:62:f9:b9:c1:
         f8:93:1c:bc:b8:8f:ff:eb:3c:3e:2f:b6:04:d5:a9:ea:74:bb:
         ba:b7:73:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:06 2026 by rpki-client