Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/0F072D383AAE11EAB5D8270EC4F9AE02.roa
File:                     0F072D383AAE11EAB5D8270EC4F9AE02.roa (raw, json)
Hash identifier:          EolASXb1KltLVGZYGCtQ/6/WNNv9j4lXlevPtfmwzdg=
Subject key identifier:   9C:D8:28:22:9E:DA:43:34:AF:0E:5D:B9:AE:83:00:4E:E4:3F:37:53
Certificate issuer:       /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial:       0C38
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/0F072D383AAE11EAB5D8270EC4F9AE02.roa
Signing time:             Tue 28 Jul 2026 19:39:16 +0000
ROA not before:           Tue 28 Jul 2026 19:39:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     135527
IP address blocks:        103.222.20.0/22 maxlen: 24
                          2405:bf40::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
                          rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3128 (0xc38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
        Validity
            Not Before: Jul 28 19:39:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a690564-7963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:56:16:ae:49:e4:89:10:a2:af:90:d2:e1:3e:
                    2f:e1:f7:de:3d:e1:32:28:ef:f5:f8:e8:88:c5:db:
                    4f:d6:f5:f6:a3:1b:21:44:db:e4:46:74:b8:e5:37:
                    cd:5c:44:68:33:e6:d6:6a:e6:69:aa:0f:aa:36:ae:
                    59:15:a5:f1:d0:04:21:68:9c:f1:66:7a:d5:4f:88:
                    5e:d4:5f:28:21:ba:be:90:5a:47:d4:55:20:f0:52:
                    f2:6c:a8:51:c3:c1:56:43:16:af:3a:f3:78:1b:4d:
                    7e:d5:26:e4:84:48:b8:5c:f1:c0:ed:0c:b2:df:2b:
                    7b:e8:f7:04:d6:06:a2:8c:c5:06:6f:55:28:1c:6e:
                    e9:3b:6f:ae:64:37:af:f3:41:9c:78:c7:93:3b:ce:
                    78:be:f4:7c:b8:42:bd:5d:e1:55:62:5f:5e:e2:b9:
                    a4:2d:a1:48:54:9e:2e:d1:74:bd:6f:e4:2c:1d:a7:
                    a3:14:18:db:fa:28:87:db:93:74:ee:36:44:14:81:
                    7d:3f:28:a7:fe:d3:2c:e8:3a:61:19:59:e5:26:05:
                    48:10:80:eb:8a:74:ae:ed:d0:8a:7d:b9:d2:26:ce:
                    59:7b:8c:f1:62:8b:e4:43:ee:11:a6:ea:23:9c:9e:
                    74:43:89:fe:08:ce:bf:3c:c5:b0:cd:b1:ae:ba:5b:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D8:28:22:9E:DA:43:34:AF:0E:5D:B9:AE:83:00:4E:E4:3F:37:53
            X509v3 Authority Key Identifier:
                keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/0F072D383AAE11EAB5D8270EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.20.0/22
                IPv6:
                  2405:bf40::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:b5:03:aa:3a:c3:71:4b:8f:e2:cf:bf:de:b4:e9:3c:84:
         30:63:3d:a7:be:fa:e4:0f:0e:54:a8:8a:95:c2:f0:d5:31:e9:
         a9:25:08:33:89:9b:24:75:d3:df:11:21:99:5b:f0:c8:2a:6f:
         09:5c:df:a9:b2:cf:23:7d:c5:65:2f:8d:2f:4a:1d:69:4a:14:
         dd:2a:2d:02:77:d5:56:14:83:2a:c7:a2:96:b7:42:0a:1c:d1:
         88:69:8f:4b:80:1f:b0:22:a4:6c:b5:e1:2f:6d:15:c5:94:0e:
         dc:9a:97:d0:d6:5a:16:66:96:e9:72:06:21:fa:37:8e:5e:3a:
         99:c3:25:34:46:ec:e5:a8:39:3f:66:64:ce:1a:e0:2b:2a:61:
         6c:66:18:52:62:a0:c1:5d:09:32:c8:ed:cf:08:ff:84:76:b3:
         2b:f7:a0:79:b8:a6:b4:5a:7c:fb:45:3c:62:9d:f7:c8:db:79:
         65:49:9b:0c:89:31:fe:02:42:b4:9f:b3:a3:a5:39:ea:93:e8:
         5a:a4:46:5c:75:03:15:2e:73:f6:fe:f5:f0:f1:14:75:65:be:
         4f:09:d5:9e:41:40:4c:9b:4f:50:ae:8b:82:25:82:74:06:86:
         9f:a1:ab:1f:48:74:0e:10:03:75:76:a9:e3:82:51:bd:67:68:
         74:0c:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:02 2026 by rpki-client