Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/8FE6CF86A1FB11EE9773325BC4F9AE02.roa
File:                     8FE6CF86A1FB11EE9773325BC4F9AE02.roa (raw, json)
Hash identifier:          EKPU0/AVx4ogOD/y6RGHP5DA9TFTJpQujmauSCRh10c=
Subject key identifier:   02:2D:7C:5C:40:65:AE:0B:2D:4F:71:90:75:ED:74:B5:A4:EC:7C:92
Certificate issuer:       /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44
Certificate serial:       019E
Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/8FE6CF86A1FB11EE9773325BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:29:40 +0000
ROA not before:           Mon 27 Oct 2025 06:18:12 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136965
IP address blocks:        103.100.184.0/22 maxlen: 22
                          2401:c040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl
                          rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44
        Validity
            Not Before: Oct 27 06:18:12 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a41514-5a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:7c:56:ff:df:f1:61:05:04:da:ff:f6:6a:
                    37:44:fc:86:73:8f:a4:12:21:26:44:d1:cb:34:7c:
                    ff:53:8c:8c:33:3c:14:40:52:53:cc:97:32:48:50:
                    74:a0:49:d0:8e:0f:b6:65:4e:33:42:9c:c7:73:36:
                    c9:5e:f9:87:5a:01:cb:e3:41:9a:1a:fc:d4:7c:9c:
                    db:98:56:81:c6:23:28:97:af:07:31:d4:91:6c:b8:
                    fd:ff:6f:cc:fa:ae:4b:9c:da:6a:e4:b7:7a:e1:e2:
                    ee:9e:ee:5d:e8:28:83:ca:f3:6d:54:08:9f:c2:2d:
                    45:91:f1:6a:b6:30:06:e3:06:32:a4:16:6b:5f:12:
                    c3:d5:e7:af:d0:6a:5d:f8:b8:f4:e6:65:f9:4b:f2:
                    e0:03:e7:e4:4e:62:41:4a:b7:3f:b4:ba:2c:f3:26:
                    41:5b:b9:f9:19:27:f4:36:08:0b:fb:6f:01:7e:c7:
                    9f:93:f0:60:e0:5a:c6:c8:0d:2b:ff:5a:69:74:ed:
                    5f:ca:1e:00:39:ca:b1:50:f5:a6:99:2b:5a:b2:a3:
                    bf:f4:10:15:d1:d5:a6:5c:9e:c1:0c:0f:45:ca:fb:
                    0c:86:fd:f9:bd:5a:dd:03:cd:d7:e4:e4:c1:04:f0:
                    f7:5f:11:67:6f:e4:cb:6f:ee:fa:f8:90:e0:81:4c:
                    51:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2D:7C:5C:40:65:AE:0B:2D:4F:71:90:75:ED:74:B5:A4:EC:7C:92
            X509v3 Authority Key Identifier:
                keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/8FE6CF86A1FB11EE9773325BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.184.0/22
                IPv6:
                  2401:c040::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:95:a2:bf:7f:19:99:15:57:08:59:f7:d5:37:f9:5c:db:c8:
         7a:95:fe:31:ee:2b:73:02:35:fe:ed:b3:ff:9d:2a:08:2c:09:
         7c:c3:9d:fc:c8:cc:ab:33:60:ff:00:b6:89:e3:6c:bc:2e:c0:
         11:3d:fc:6b:b2:49:2f:5c:9f:18:16:d5:54:d1:ff:b1:59:f8:
         db:84:84:ae:0e:af:d2:70:1d:a2:07:41:9c:2a:7d:b3:6e:7e:
         cd:a6:6d:1d:c4:3f:78:ba:54:12:69:8d:8d:b4:0b:2e:a6:58:
         d2:15:a7:63:39:50:34:38:d2:41:6d:fc:73:24:08:34:7e:8d:
         51:90:d0:94:68:ee:fc:ad:7d:a2:33:68:20:a1:85:8b:25:79:
         10:dd:54:7d:0b:3c:c7:3a:eb:cd:33:73:38:a3:34:72:c8:1e:
         0b:09:d1:9d:ae:33:4b:4c:d9:12:21:a5:5e:4c:27:e7:cd:57:
         26:1d:0d:39:44:bf:b3:56:8a:e0:f3:1f:3e:a8:80:0d:03:2f:
         fc:92:8b:7d:08:41:5e:86:19:94:fd:83:0e:3d:00:2d:ad:9f:
         7a:88:8e:64:4e:8c:aa:6c:58:3c:0c:8f:ea:1e:b2:4b:3a:95:
         a7:39:47:9d:be:2a:df:0c:8a:82:63:08:b1:56:76:4d:94:94:
         62:4c:e0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:11 2026 by rpki-client