Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/65C8C388EAFB11ED9F4DC557C4F9AE02.roa
File:                     65C8C388EAFB11ED9F4DC557C4F9AE02.roa (raw, json)
Hash identifier:          wRYNEthuBGtR46T7J0rofVnIpvrM/V01eqIrwpJUWdM=
Subject key identifier:   72:D8:C9:A1:B3:F8:7C:D0:13:3E:DA:F5:9F:76:3E:25:07:AE:53:97
Certificate issuer:       /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial:       15C2
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/65C8C388EAFB11ED9F4DC557C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:15:25 +0000
ROA not before:           Thu 24 Apr 2025 17:15:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150388
IP address blocks:        103.100.140.0/24 maxlen: 24
                          2402:b740:15:388::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
                          rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5570 (0x15c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
        Validity
            Not Before: Apr 24 17:15:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42ddd-6601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:74:21:c4:f6:43:60:a9:a5:18:b1:3a:04:
                    26:73:32:ab:69:96:e1:3f:69:73:ac:fb:1c:4c:42:
                    2a:a4:90:a1:76:3f:c6:44:4b:7b:3e:0c:d8:7a:7a:
                    dc:60:ce:09:cd:14:3a:6c:a0:75:43:87:56:21:50:
                    94:1b:a4:47:d3:f1:6a:b1:5c:98:93:5d:a6:9b:dd:
                    0c:70:4c:d9:33:f5:da:9b:aa:0d:03:9e:df:4f:f4:
                    66:44:1c:ad:19:f0:2a:8e:a7:83:f5:32:4f:ef:f9:
                    df:b4:20:e2:cd:a7:35:21:e8:9f:4a:d2:f0:6e:76:
                    29:dd:cc:e7:2c:67:1a:a6:02:30:bb:b6:68:a6:12:
                    c8:49:7c:20:f2:62:58:02:88:3f:a8:30:a7:93:4f:
                    87:2d:1d:c6:0d:33:f8:94:c8:a1:ab:7c:d2:b0:e5:
                    62:ed:89:5b:a3:0a:84:a4:92:85:2a:0d:3b:e5:1c:
                    5a:fc:d9:4f:e0:a3:ff:90:77:cb:8d:70:a5:d4:9d:
                    b8:2b:52:fa:d4:cc:93:0a:9b:f0:c3:4e:ec:34:8e:
                    36:50:08:41:42:cb:d4:7f:25:bd:72:a1:5d:4c:27:
                    d2:32:a2:13:c6:99:15:e3:2e:7b:e3:ff:59:6b:42:
                    98:b1:80:41:bb:72:71:17:37:32:07:c2:63:8a:db:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D8:C9:A1:B3:F8:7C:D0:13:3E:DA:F5:9F:76:3E:25:07:AE:53:97
            X509v3 Authority Key Identifier:
                keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/65C8C388EAFB11ED9F4DC557C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.140.0/24
                IPv6:
                  2402:b740:15:388::/64

    Signature Algorithm: sha256WithRSAEncryption
         b3:29:9f:d8:ae:3c:7c:fb:80:0a:c5:0a:50:18:83:fe:95:da:
         06:24:09:ee:cc:a0:6b:8b:f1:26:1c:89:d8:49:a1:5b:e2:dd:
         bf:e7:5c:04:52:55:30:67:99:a8:f7:d4:10:ad:e1:a3:ba:dc:
         ca:7e:b2:83:98:35:db:b5:7b:8c:b6:41:2a:c1:e0:b8:18:95:
         1a:67:ee:5a:46:f2:e6:a5:da:0c:f3:e0:fa:f2:9f:50:68:5a:
         f5:62:e7:77:6a:59:93:71:19:6e:9f:05:09:a0:cc:80:83:2b:
         d1:cc:e4:d7:fc:2d:ca:ec:b9:99:b7:90:c9:54:2e:1b:0b:08:
         0c:8d:4b:8f:dc:3c:e7:12:d3:35:31:b2:ca:32:f1:49:3f:d7:
         bd:84:66:dc:ed:fb:43:12:0d:b8:03:95:00:d3:17:86:0c:34:
         8e:46:52:84:95:52:6d:f8:8e:e9:3c:2a:e9:68:ad:51:23:05:
         62:36:de:54:7b:8e:a9:3b:11:d8:7b:e5:dd:51:b8:a4:76:20:
         8b:6b:74:7e:88:35:1a:96:fb:16:f8:07:98:10:42:27:7c:dd:
         67:75:58:96:44:94:ee:d2:6c:ac:aa:22:fd:08:77:93:40:e4:
         0f:f0:ac:da:e4:35:fe:a3:ae:7e:0a:17:4d:18:af:5a:8c:c8:
         46:fc:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:29 2026 by rpki-client