Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/762C16422E9811F1A14B442FB4833773.roa
File:                     762C16422E9811F1A14B442FB4833773.roa (raw, json)
Hash identifier:          6dVRqPwjNiBJWT/1IpcKvHD9YdgtV5RR7uiRlRvanfU=
Subject key identifier:   81:48:3C:C3:E7:F8:04:11:73:7D:AE:7D:6E:E5:68:1F:9E:33:4E:23
Certificate issuer:       /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
Certificate serial:       0DBD
Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/762C16422E9811F1A14B442FB4833773.roa
Signing time:             Thu 02 Apr 2026 13:32:58 +0000
ROA not before:           Thu 02 Apr 2026 13:32:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        103.85.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl
                          rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3517 (0xdbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
        Validity
            Not Before: Apr  2 13:32:58 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69ce700a-7155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:04:5e:4c:c4:e5:8c:c6:29:69:0b:26:1f:
                    7a:de:98:c7:20:06:81:09:2a:08:ba:aa:c3:37:c9:
                    e9:dc:0c:28:38:b9:2e:92:9c:92:6a:13:67:d8:79:
                    27:1d:d9:e8:f5:84:2b:e8:fc:73:ce:a6:c1:20:ca:
                    1b:66:ed:36:64:cc:38:3d:e4:96:57:45:63:88:65:
                    8e:63:f7:2d:cf:33:bf:d8:11:2d:68:3e:fc:43:dc:
                    9a:16:75:32:06:93:ce:db:8e:5d:c6:b5:67:d3:e4:
                    12:7d:9a:6f:74:65:b7:f7:bf:7c:4c:b1:01:41:9f:
                    37:23:08:e0:56:3e:fa:db:a1:54:dc:3c:3e:f1:e5:
                    f6:bf:97:58:a0:d0:34:b9:4d:c3:51:f1:b8:c8:5a:
                    0d:83:3c:14:4e:ee:8f:46:e5:c7:4a:08:c0:26:56:
                    ea:a8:4b:c5:a1:df:88:6f:8b:a4:8e:96:f4:1e:9c:
                    cd:cc:d1:cc:c1:56:ce:e2:79:2d:1a:5e:31:22:61:
                    ea:90:7f:a2:aa:db:32:2e:0f:0d:b8:6f:fd:cd:29:
                    5d:99:2b:b9:e9:4d:a6:4a:86:9b:2a:a5:72:ea:bf:
                    cf:ef:d9:aa:04:7f:17:f8:1a:5a:de:76:ff:fc:10:
                    76:f4:0f:bd:f3:38:92:63:29:e1:43:65:5e:79:1e:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:48:3C:C3:E7:F8:04:11:73:7D:AE:7D:6E:E5:68:1F:9E:33:4E:23
            X509v3 Authority Key Identifier:
                keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/762C16422E9811F1A14B442FB4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:09:f7:db:b6:96:8b:d5:bb:08:66:57:6b:38:8e:dd:bf:5e:
         47:dc:50:0e:3b:02:2f:e9:93:6e:b2:9e:b9:59:4c:d0:e9:82:
         b2:27:e2:25:cd:e9:87:07:87:3b:b4:4b:0c:e3:a0:66:ed:8e:
         44:13:69:ad:9c:18:fa:4d:93:a1:30:3d:c2:96:d9:65:4a:fa:
         95:70:69:79:94:13:09:1c:96:18:07:54:ec:e1:fe:20:6b:fc:
         af:49:7a:4e:a3:e8:80:24:d6:8c:95:46:16:cb:3e:f3:90:98:
         f5:5f:f7:6e:fb:50:03:44:69:97:71:9a:8c:2b:7e:15:b0:a5:
         20:41:9b:15:a0:fa:dc:6f:38:46:f5:93:a5:cc:b5:5e:74:f4:
         6c:37:af:08:23:a7:03:74:5c:f9:04:de:6a:92:47:f1:24:91:
         b7:59:6f:2e:67:1e:11:cd:f3:87:e3:0c:d0:d5:d8:3e:39:25:
         98:80:4d:fd:fd:49:1b:02:ef:f3:bc:7d:19:43:9f:7a:dd:cb:
         8e:c5:fb:d3:7b:7d:a5:a4:79:96:5f:e3:a5:e3:e1:13:13:fc:
         48:a4:b9:72:8b:6f:da:dc:f1:a2:05:c2:8d:d5:ad:4c:1b:16:
         96:5b:84:0a:d3:47:66:49:40:c2:a0:fd:e5:5f:a3:fd:48:b2:
         26:0b:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:58 2026 by rpki-client