Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
File:                     98657342132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          0iM/49fCWX66zeiMZs91UhGTC/SM04s/wq22TiEesQc=
Subject key identifier:   96:76:19:61:7D:8C:E8:23:DB:96:97:79:D4:D8:F2:6C:88:84:7C:54
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       0866
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
Signing time:             Thu 14 May 2026 21:26:09 +0000
ROA not before:           Thu 14 May 2026 21:26:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     141023
IP address blocks:        103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150 (0x866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: May 14 21:26:09 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a063df0-265a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:5c:cc:f7:96:7c:85:15:2a:1a:4a:e9:d8:
                    f9:06:bb:34:19:0b:17:a6:cb:45:96:ab:47:de:4a:
                    58:78:d6:16:53:98:39:84:00:ca:d2:a7:ed:58:17:
                    98:4e:63:61:cd:6d:16:af:9b:ef:10:79:53:6e:70:
                    76:43:a5:66:3c:a4:8d:cf:fa:3e:9d:94:79:2e:46:
                    ef:b9:23:93:3b:87:c3:38:9e:3a:a1:6b:ef:56:5b:
                    99:f9:eb:03:d9:5f:ee:b9:73:4f:02:5c:b9:af:6d:
                    03:b3:d5:55:a7:25:13:4b:03:7a:b3:36:d6:1a:75:
                    b7:64:01:58:50:9d:fb:86:71:42:02:fd:42:f7:aa:
                    db:e6:f4:25:b4:7d:ba:d7:49:54:57:b4:7c:72:b2:
                    54:c6:d8:b9:47:4f:bf:fa:33:8b:ec:b6:16:59:ea:
                    ff:7b:37:93:cd:6f:d1:df:2b:57:e7:fa:49:83:ed:
                    c2:36:e1:a5:20:10:7b:2e:7b:71:f6:26:b4:87:93:
                    dd:14:a5:14:d5:1a:06:e7:55:3e:b5:0c:e9:67:99:
                    4e:d7:8f:56:da:bd:5b:7e:95:2e:fc:07:8c:f7:59:
                    94:bf:b0:1b:93:26:f5:1d:b0:36:33:ad:a8:68:15:
                    21:ec:3e:74:3d:28:56:d2:ca:b8:4b:0c:a1:fa:16:
                    e5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:76:19:61:7D:8C:E8:23:DB:96:97:79:D4:D8:F2:6C:88:84:7C:54
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:53:8c:ee:81:ba:38:c9:24:bd:f7:08:97:8c:2d:9f:18:93:
         ff:e3:da:86:ac:1f:ed:58:44:24:8e:c2:45:bd:fc:94:81:15:
         e7:f9:38:c5:5a:73:e1:3e:93:b1:ec:96:ac:23:73:b7:be:1a:
         a4:17:02:4e:3e:5b:40:73:14:ba:40:5f:73:9c:66:bd:1c:e4:
         1a:87:fc:75:ff:06:98:ae:3c:14:9c:56:ca:c9:ac:25:30:77:
         85:58:8a:4c:7a:e4:2a:bf:6f:0c:19:75:6a:8d:39:dc:c9:7b:
         af:c6:22:8c:2e:7e:e5:79:03:a0:e8:67:71:2d:e9:52:8f:fe:
         bc:45:1a:cd:74:1f:6f:3a:c1:56:42:be:ec:da:ff:ee:aa:d8:
         6c:b4:6c:95:5d:dd:cf:28:42:04:e1:61:15:ef:a2:9e:92:5c:
         27:39:a1:3a:d7:7e:1b:39:bf:e6:e0:6d:f0:87:f4:bf:31:86:
         9b:e0:60:53:b3:8a:de:8e:05:7f:54:4a:8f:95:79:ca:dc:fa:
         d8:7e:ba:d6:c9:ba:b0:fb:14:3f:a8:b4:5b:ed:7c:57:41:da:
         8b:9a:d5:5b:eb:94:07:7a:48:cd:98:37:a1:24:f4:8e:b7:c7:
         97:8d:17:22:f2:bb:ec:f0:8d:3b:74:b2:fc:b2:ac:84:a1:7f:
         c0:4e:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 19:02:08 2026 by rpki-client