Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/C5C152D2F28211F0B78FCAB4696F56BC.roa
File:                     C5C152D2F28211F0B78FCAB4696F56BC.roa (raw, json)
Hash identifier:          BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=
Subject key identifier:   79:41:03:44:31:D0:CD:D4:DC:E7:86:41:75:DC:11:F6:AA:B9:A3:98
Certificate issuer:       /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial:       0DF3
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/C5C152D2F28211F0B78FCAB4696F56BC.roa
Signing time:             Thu 04 Jun 2026 18:22:13 +0000
ROA not before:           Thu 04 Jun 2026 18:22:13 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135314
IP address blocks:        103.214.16.0/22 maxlen: 24
                          144.48.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
                          rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3571 (0xdf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
        Validity
            Not Before: Jun  4 18:22:13 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21c255-19d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:1c:25:fe:00:63:49:f1:ea:0f:f2:47:5b:
                    80:12:dd:24:b3:e0:39:bc:07:6d:1e:35:a7:41:e5:
                    2c:92:92:b4:90:a7:23:c0:78:c0:04:c5:b8:18:34:
                    01:06:cf:6d:50:58:42:39:fd:69:a4:a7:84:67:e5:
                    1e:fa:47:10:70:85:42:1b:62:48:bb:ac:a3:c5:cb:
                    66:e2:d5:a6:1e:4b:15:e6:2a:c6:28:39:89:40:ab:
                    ce:6f:ec:1c:10:f0:7e:96:d5:43:3f:91:48:95:6a:
                    7f:95:0d:58:6f:4a:4a:b1:70:7b:8f:cb:03:b3:4a:
                    d9:9e:47:e4:ec:2e:30:dd:f2:fb:e4:b6:37:3a:b2:
                    d8:26:2c:9b:05:85:28:a6:30:80:09:db:ad:b3:15:
                    8c:21:5f:9f:b7:a3:22:95:7d:9d:d6:c2:6d:54:80:
                    12:db:2a:0c:e6:a2:09:52:cf:38:4b:69:7b:28:cb:
                    8e:fc:5d:6e:40:57:02:c9:db:7f:6f:6d:f7:f1:ea:
                    e7:c2:fc:20:33:a3:e4:42:9e:60:2c:94:f1:4f:88:
                    4a:e5:e8:f0:c8:fb:f6:96:d8:1b:6b:94:77:fa:19:
                    4f:53:0a:a4:2a:94:a3:9f:33:6d:57:2a:99:3b:c7:
                    9f:5d:c2:b2:08:57:71:4b:35:b9:78:5b:eb:02:f4:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:03:44:31:D0:CD:D4:DC:E7:86:41:75:DC:11:F6:AA:B9:A3:98
            X509v3 Authority Key Identifier:
                keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/C5C152D2F28211F0B78FCAB4696F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.16.0/22
                  144.48.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:19:11:a8:c9:e1:2a:00:b1:ab:2d:d4:cf:ae:bb:30:a0:57:
         9e:2d:d8:f4:91:0b:cd:2f:01:45:51:16:43:26:33:e7:92:37:
         a3:76:bb:c3:e6:c4:c0:4e:37:c0:11:6a:d4:15:66:51:cb:a4:
         06:d6:6b:65:74:68:a1:13:50:7a:ab:3a:38:78:a9:5f:5d:cd:
         97:85:a2:8d:cb:e3:73:6d:64:4b:1b:6d:77:21:09:ca:9d:70:
         ff:d6:38:9c:ab:35:a3:9e:a0:76:ad:42:e0:58:45:86:52:e7:
         9b:0a:10:28:6a:25:e1:3c:a4:fc:2e:c5:cc:71:a9:46:00:7d:
         41:fc:3f:1b:f1:9e:10:bb:3e:2e:60:62:0f:36:f6:4b:3a:2f:
         6b:a6:aa:da:e8:b7:04:19:e3:59:24:87:5c:f0:b8:08:42:b6:
         68:16:cf:52:07:ce:3d:76:73:88:4a:2a:59:72:98:04:ff:9e:
         28:1f:15:2f:58:78:af:09:d0:6e:0a:dd:df:42:1f:0a:b4:9f:
         bd:84:f1:e3:62:f2:27:3e:0f:ee:11:d6:ab:29:0f:b4:ce:6f:
         23:ef:f2:00:52:52:db:a7:9b:0f:c4:5b:59:c4:b9:89:91:0d:
         73:8b:c8:8e:77:93:ec:17:90:81:32:ed:86:a6:fc:af:64:37:
         de:d5:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:44:15 2026 by rpki-client