Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/3615B9806CB911EE91852F72C4F9AE02.roa
File:                     3615B9806CB911EE91852F72C4F9AE02.roa (raw, json)
Hash identifier:          Ir7vEVzoqCyPrW8G+JRpe7WGHHRd+MtkPRVlXY4GdBU=
Subject key identifier:   C7:B9:7F:30:1A:28:8C:F3:73:D2:50:06:DB:AA:F5:0B:9C:0C:A4:77
Certificate issuer:       /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial:       04D7
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/3615B9806CB911EE91852F72C4F9AE02.roa
Signing time:             Mon 26 Jan 2026 23:19:43 +0000
ROA not before:           Mon 26 Jan 2026 23:19:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139648
IP address blocks:        103.178.34.0/23 maxlen: 23
                          103.178.34.0/24 maxlen: 24
                          103.178.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
                          rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
        Validity
            Not Before: Jan 26 23:19:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6977f68f-658f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:65:c7:63:12:14:39:21:36:78:e2:c7:6c:
                    30:42:e7:ac:68:24:2a:9a:f2:77:9f:cf:bd:66:6d:
                    98:85:88:df:22:2c:77:f3:b2:fe:c8:04:a0:c1:c7:
                    1d:aa:c0:c6:0d:86:7f:fa:01:e0:58:a7:94:29:a5:
                    63:14:87:5a:ba:1a:44:5c:be:ff:f3:b6:95:25:e4:
                    10:a1:c8:77:a6:bf:02:65:18:8b:80:7c:63:f3:1b:
                    88:7f:97:c9:9b:b5:15:21:fe:2e:eb:5d:80:3b:11:
                    6c:83:53:6f:32:f9:3a:7e:f2:c4:ea:dc:d7:12:d7:
                    eb:ac:1e:2b:ae:4b:49:71:04:91:64:b6:ad:5b:c6:
                    6f:47:69:1c:f0:79:3d:e1:ec:fd:67:c1:e4:95:4d:
                    ae:b5:0e:f2:49:84:76:29:ec:ff:ee:24:10:8a:a8:
                    d0:9b:26:3d:4c:65:73:12:35:d1:ed:fa:dd:af:72:
                    db:a7:68:44:d8:0c:89:d6:dd:ef:d1:c3:c7:41:26:
                    e2:fa:33:cb:e2:e6:b9:06:3c:62:c7:3e:6a:50:7f:
                    ee:25:7b:43:1b:9d:ff:14:8c:f9:ba:fd:9b:f7:39:
                    42:b7:ce:c5:cf:f1:b3:ca:22:0b:c1:e1:16:44:90:
                    db:29:b8:7d:c1:fb:90:af:2f:51:47:b0:f3:9f:cc:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B9:7F:30:1A:28:8C:F3:73:D2:50:06:DB:AA:F5:0B:9C:0C:A4:77
            X509v3 Authority Key Identifier:
                keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/3615B9806CB911EE91852F72C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:09:68:5e:69:44:99:58:27:76:2e:1b:4f:4e:75:41:e2:6e:
         49:93:c8:f3:9b:a6:29:b3:64:5b:6c:9b:00:76:42:49:91:9f:
         66:92:89:1b:5d:7b:46:6f:91:94:69:0c:86:f1:d3:79:18:4b:
         48:0b:c4:96:2f:93:09:49:3c:a6:22:87:d2:25:a7:93:e0:e9:
         4b:a2:0e:c7:70:53:8f:54:6c:b5:ac:af:b4:f0:c2:42:b3:38:
         92:e6:a6:fd:58:3a:e2:79:66:f6:14:3e:57:88:75:52:5e:06:
         e0:05:97:4e:44:bc:d5:c5:5c:d8:32:1c:e4:38:47:33:a0:b2:
         49:3c:a1:8b:78:44:fd:fa:cc:08:73:92:16:0c:00:f5:79:e4:
         61:55:0c:51:b9:0c:93:e9:9d:24:a8:96:22:c3:24:59:c3:9a:
         46:68:c0:8a:a3:39:ca:0a:c1:6d:13:92:ef:1d:be:ed:18:ea:
         91:9e:da:7a:99:74:03:e2:01:f0:49:f2:89:e7:3a:e8:38:58:
         e1:20:40:b7:93:6e:ad:53:a6:49:8f:9e:98:f0:f3:f7:c6:82:
         69:6b:4b:8e:26:2e:a4:70:c3:25:99:34:8a:48:01:c8:6f:16:
         3b:6f:e1:1f:c5:a1:07:25:e6:12:cc:a1:0b:0a:cd:3b:fa:c3:
         ba:61:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:36 2026 by rpki-client