Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2622AA12010511EE8C750D39C4F9AE02.roa
File:                     2622AA12010511EE8C750D39C4F9AE02.roa (raw, json)
Hash identifier:          ucaSpogKwPikaU44Ki8Ju0s3hqF08UMZnFDdWfcqj7U=
Subject key identifier:   94:DB:94:F0:D0:AF:F6:A9:FB:93:A2:FF:66:AC:CF:F7:66:6C:EE:38
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3DBF
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2622AA12010511EE8C750D39C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 15:12:16 +0000
ROA not before:           Thu 06 Aug 2026 15:12:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     3786
IP address blocks:        103.143.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15807 (0x3dbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:12:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a450-1807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:ce:b5:7e:c4:6b:de:b8:6d:85:d9:98:fd:
                    ac:79:0a:94:ab:e6:fe:ed:a3:d4:2e:4e:9a:02:70:
                    46:41:28:b4:9e:4c:a0:a9:21:4e:01:2c:03:76:54:
                    07:f4:55:53:e0:91:8c:fd:2e:bc:18:b0:04:b0:47:
                    6d:e0:48:98:2d:57:f7:6d:45:93:46:49:e4:2c:a2:
                    76:58:97:28:98:9d:51:5b:dd:7f:83:5d:02:b9:a8:
                    df:51:c2:8e:9e:b0:92:da:a5:3b:74:4d:14:3d:f0:
                    4f:f9:ba:3f:f9:0d:0d:36:a4:e9:f9:fc:f8:8a:c7:
                    07:9f:d1:5b:c7:35:f6:d3:79:48:32:d3:21:d0:eb:
                    89:bf:ee:03:8a:4e:66:7f:99:81:f7:64:9b:3c:56:
                    61:c9:94:3d:4b:0a:b3:50:bc:a3:b9:7d:81:85:44:
                    53:d6:7e:28:69:16:08:31:6e:e3:81:37:2d:9d:86:
                    87:81:d3:47:de:10:3c:a6:d1:50:53:af:fc:29:de:
                    63:f4:14:b0:13:6d:40:73:79:be:22:29:03:b0:fd:
                    6a:48:44:e3:83:03:ab:ca:9e:0a:f6:14:05:19:af:
                    5e:62:78:cb:53:f0:ad:b8:b7:94:97:d7:f7:65:76:
                    f9:c2:16:4d:51:7d:8c:b7:c1:a3:11:39:d8:54:c1:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DB:94:F0:D0:AF:F6:A9:FB:93:A2:FF:66:AC:CF:F7:66:6C:EE:38
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2622AA12010511EE8C750D39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:da:81:69:74:a3:88:24:e4:47:f4:fb:f2:1a:45:4a:d2:17:
         a0:4b:7d:f8:8b:f8:65:7b:cc:51:1a:42:87:ff:3f:ed:75:ac:
         5e:c4:c9:db:c8:0a:12:31:2f:51:da:27:74:72:5f:2e:ad:f9:
         dc:72:56:20:b7:94:f9:b8:c2:b1:0e:b4:b3:65:f8:9f:0e:e5:
         04:4d:ad:80:73:44:34:28:79:01:86:e1:88:db:34:99:99:1d:
         32:ce:6b:e7:94:a5:27:7e:b0:98:26:00:9f:84:ea:3a:38:73:
         6e:45:eb:54:0b:44:f3:69:33:df:c6:a7:7c:13:66:6c:7b:9f:
         00:fc:e0:50:dc:70:8a:ff:f8:8c:0b:6e:60:1f:2d:5f:1c:6b:
         d1:72:97:81:f3:3c:db:5e:bd:04:67:c6:7b:cd:d3:9a:0e:8e:
         1a:03:29:b3:3f:5f:34:d9:85:4c:2b:85:3e:e7:8f:79:06:65:
         57:30:67:a7:56:8a:9f:61:32:f2:e5:9b:23:36:55:06:20:37:
         f4:5c:04:a6:d3:8f:73:95:0f:f1:a4:01:e5:6b:5a:d2:dc:43:
         c2:e3:ae:96:60:9b:44:cd:41:de:e0:55:a2:08:0b:ac:17:5f:
         5b:ec:89:9f:70:69:e4:5e:c0:90:76:69:93:e1:d4:29:d5:62:
         3c:3b:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:48:55 2026 by rpki-client