Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/F315E40E545811F1A4AA7BC6AE833773.roa
File:                     F315E40E545811F1A4AA7BC6AE833773.roa (raw, json)
Hash identifier:          mQCN8GGTKlZamLj2u8NmpeyO8hy09UCVcvX6A9tbhCk=
Subject key identifier:   2F:52:06:01:C5:D9:F6:1A:86:51:A2:37:77:E5:48:0A:44:4B:89:C1
Certificate issuer:       /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial:       0D37
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/F315E40E545811F1A4AA7BC6AE833773.roa
Signing time:             Wed 20 May 2026 14:36:32 +0000
ROA not before:           Wed 20 May 2026 14:36:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     149995
IP address blocks:        103.130.115.0/24 maxlen: 24
                          2403:b840:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
                          rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3383 (0xd37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
        Validity
            Not Before: May 20 14:36:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0dc6f0-2b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:84:bf:71:a0:96:ef:11:6d:cf:2c:cf:83:
                    cc:f9:dc:8e:70:92:e9:a6:6c:8e:37:29:a4:f8:20:
                    a3:a7:2c:3c:87:52:98:e0:0c:7a:ae:41:c2:a0:55:
                    76:43:bb:5e:c4:50:0e:53:6a:60:6a:79:de:d7:7d:
                    b9:0a:3f:90:13:8a:7e:93:8a:7b:6a:2a:8c:9a:f3:
                    10:b5:d9:ba:8e:bc:09:09:2f:fc:0f:0a:16:9c:11:
                    66:a3:85:e4:5d:7d:91:d3:fd:bc:e4:ff:4c:6d:af:
                    e9:f3:bd:96:98:5d:9e:6e:74:8a:92:ca:64:34:3a:
                    ed:14:0d:a2:3a:53:03:35:aa:df:ae:2e:73:27:4c:
                    57:aa:8d:78:c4:30:f9:98:37:07:36:01:aa:d9:36:
                    60:85:2c:0a:41:76:2d:5f:b8:4e:36:15:d7:c5:29:
                    9c:89:42:40:76:67:14:d9:32:1f:ff:e8:71:bc:1e:
                    13:d4:ce:42:ba:2d:1c:60:23:d5:01:d2:33:41:a0:
                    f0:6d:51:e2:2b:b7:8d:b6:43:53:9a:10:8f:69:b7:
                    b0:70:e7:8f:55:d6:ce:89:42:95:28:59:c2:f9:42:
                    c1:f6:e1:a7:0f:12:8b:42:97:33:92:b0:1a:44:55:
                    51:b7:39:06:89:ca:84:f3:b2:40:45:d1:0a:d4:24:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:52:06:01:C5:D9:F6:1A:86:51:A2:37:77:E5:48:0A:44:4B:89:C1
            X509v3 Authority Key Identifier:
                keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/F315E40E545811F1A4AA7BC6AE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.115.0/24
                IPv6:
                  2403:b840:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:a6:d1:15:75:37:e4:63:dc:5f:13:3f:e5:01:ab:2c:92:
         81:f2:0f:0c:8e:0c:f6:1c:e0:eb:e8:da:5b:53:92:8f:45:ee:
         98:d0:ff:2c:6a:68:ce:d7:a0:bc:72:d4:8c:65:51:58:7f:5d:
         71:29:b0:24:6f:1c:b0:92:6e:a5:a5:4d:66:0c:51:9d:87:35:
         75:a7:40:c6:3e:33:24:13:60:87:08:ff:ac:42:99:7d:c4:02:
         0b:6a:df:86:cc:ef:d4:f3:ae:19:d5:fd:84:ea:54:b4:45:cb:
         7c:20:0c:c2:7a:93:30:c3:9b:88:72:44:c5:a1:d3:74:2a:0b:
         9f:8e:18:82:8e:1a:b4:e5:f2:80:ac:53:7a:2e:47:8f:a6:14:
         05:69:10:10:29:b2:25:b2:ee:3b:3f:f6:ca:68:9a:48:d9:32:
         f2:51:f7:1c:6d:36:71:77:4d:15:f3:68:5e:ff:11:97:65:ad:
         a5:f3:ef:ac:e5:93:1b:54:78:49:fb:81:6d:2a:d9:0f:f8:98:
         0e:43:7d:b0:d8:3d:b6:ff:68:0e:de:9f:89:2d:a9:f0:1b:28:
         80:23:03:99:02:c0:b4:2f:a7:cd:d1:71:d4:f4:34:01:40:73:
         ed:50:58:a4:69:af:b9:6e:fa:72:50:8a:69:78:c5:14:f4:37:
         35:49:ce:9d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz
QjJEOUY4NDAwHhcNMjYwNTIwMTQzNjMyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTBkYzZmMC0yYjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHyEv3Gglu8Rbc8sz4PM+dyOcJLppmyONymk+CCjpyw8h1KY4Ax6rkHCoFV2
Q7texFAOU2pganne1325Cj+QE4p+k4p7aiqMmvMQtdm6jrwJCS/8DwoWnBFmo4Xk
XX2R0/285P9Mba/p872WmF2ebnSKkspkNDrtFA2iOlMDNarfri5zJ0xXqo14xDD5
mDcHNgGq2TZghSwKQXYtX7hONhXXxSmciUJAdmcU2TIf/+hxvB4T1M5Cui0cYCPV
AdIzQaDwbVHiK7eNtkNTmhCPabewcOePVdbOiUKVKFnC+ULB9uGnDxKLQpczkrAa
RFVRtzkGicqE87JARdEK1CTchQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFC9SBgHF
2fYahlGiN3flSApES4nBMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC
ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyMUUvNjBDMTgxNTQwQjg5MTFFQThFNUFCNzVGQzRGOUFFMDIvRjMxNUU0MEU1
NDU4MTFGMUE0QUE3QkM2QUU4MzM3NzMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ4JzMA8EAgACMAkDBwAkA7hAAA8wDQYJKoZIhvcNAQELBQADggEB
AAvBptEVdTfkY9xfEz/lAasskoHyDwyODPYc4Ovo2ltTko9F7pjQ/yxqaM7XoLxy
1IxlUVh/XXEpsCRvHLCSbqWlTWYMUZ2HNXWnQMY+MyQTYIcI/6xCmX3EAgtq34bM
79TzrhnV/YTqVLRFy3wgDMJ6kzDDm4hyRMWh03QqC5+OGIKOGrTl8oCsU3ouR4+m
FAVpEBApsiWy7js/9spomkjZMvJR9xxtNnF3TRXzaF7/EZdlraXz76zlkxtUeEn7
gW0q2Q/4mA5DfbDYPbb/aA7en4ktqfAbKIAjA5kCwLQvp83RcdT0NAFAc+1QWKRp
r7lu+nJQiml4xRT0NzVJzp0=
-----END CERTIFICATE-----
Generated at Thu May 21 10:35:50 2026 by rpki-client