Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/7416299C4B0C11EDB8430084C4F9AE02.roa
File:                     7416299C4B0C11EDB8430084C4F9AE02.roa (raw, json)
Hash identifier:          loCBTvWpGD1C6U/+URd049N5Gd0OXiABeDkGUcb8Scg=
Subject key identifier:   F3:DA:E1:29:3C:8B:FC:4D:88:28:05:8F:1C:90:0C:1E:9C:CE:E1:3C
Certificate issuer:       /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Certificate serial:       02DB
Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/7416299C4B0C11EDB8430084C4F9AE02.roa
Signing time:             Mon 17 Aug 2026 01:50:39 +0000
ROA not before:           Mon 17 Aug 2026 01:50:39 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     38038
IP address blocks:        103.152.222.0/23 maxlen: 24
                          2406:35c0::/32 maxlen: 32
                          2406:35c0:4000::/36 maxlen: 36
                          2406:35c0:5000::/36 maxlen: 36
                          2406:35c0:6000::/35 maxlen: 36
                          2406:35c0:8000::/33 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
                          rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
        Validity
            Not Before: Aug 17 01:50:39 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8268ef-dd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:0e:b9:25:89:7d:24:93:b1:c9:dc:ca:91:
                    5a:89:5e:61:78:ea:d0:6f:45:30:42:a7:a8:c3:d0:
                    5c:af:fd:ad:1e:57:26:db:fc:e3:ea:fd:13:62:e6:
                    c6:45:28:6d:f4:7e:05:22:56:b1:cc:68:0a:dc:41:
                    3a:65:af:91:49:24:bc:a9:4f:15:e1:7a:16:ba:e6:
                    57:dd:16:f6:8f:74:3b:a3:97:4e:c5:8c:9f:31:c0:
                    55:ed:37:2b:4d:02:65:5f:57:c6:88:22:13:49:e2:
                    50:aa:3a:18:1d:0e:ac:e4:7b:ed:55:ed:98:c7:e3:
                    cc:b5:84:f0:c7:a7:9f:38:61:a1:bd:0d:d6:5a:50:
                    1c:17:94:01:b1:ea:0f:61:a4:6b:45:63:be:22:be:
                    24:53:50:e1:c1:bd:00:52:f1:bc:16:e7:6c:fd:fa:
                    70:75:bb:31:af:c1:58:6d:be:94:c8:d5:07:70:59:
                    2c:41:c2:b3:f5:c1:b9:70:ff:21:9f:bf:65:bb:6d:
                    12:c6:06:29:90:37:cc:49:37:68:14:97:db:bf:d8:
                    3d:91:49:eb:da:28:95:e0:3b:ec:06:26:e6:b1:58:
                    4f:09:2e:98:9c:66:de:58:09:83:c0:90:7d:69:11:
                    2b:94:8e:72:de:8d:6d:17:71:27:f7:1c:5e:ad:c9:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DA:E1:29:3C:8B:FC:4D:88:28:05:8F:1C:90:0C:1E:9C:CE:E1:3C
            X509v3 Authority Key Identifier:
                keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/7416299C4B0C11EDB8430084C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.222.0/23
                IPv6:
                  2406:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:74:40:30:e6:99:e0:3d:4a:aa:62:46:8e:8a:c2:00:bb:e9:
         e3:93:c7:f8:8c:36:0a:1c:79:42:3a:dc:ec:a3:28:12:3b:71:
         24:06:d4:4e:c4:bd:e2:2d:82:0e:7d:ac:ae:e6:ed:15:7a:dc:
         e8:10:9f:8f:58:c9:4a:fc:44:79:f5:a5:d8:14:8f:52:1b:84:
         9f:57:cf:8d:89:e6:ce:2c:03:85:18:f8:8c:05:d4:80:b5:39:
         de:fc:51:b1:7b:58:56:46:bc:e9:8c:4a:27:d5:ef:5e:43:51:
         53:2b:2e:34:5e:99:56:b7:ce:d2:ce:2f:8c:b3:82:83:fb:49:
         70:be:9b:20:18:d2:3f:e9:17:f7:22:de:ee:df:82:7c:81:ad:
         da:22:e7:cb:06:14:c7:b3:2c:20:f7:d6:38:9e:db:65:ed:4b:
         b0:d3:0e:4e:98:4f:6f:ac:c5:a2:ea:3f:15:a2:7a:f4:d8:4a:
         7c:97:06:82:40:a1:40:b9:85:a4:66:a2:08:21:ad:82:1b:32:
         ee:f0:2e:eb:5a:37:36:33:85:23:12:cb:6b:4d:8e:64:3f:76:
         82:dd:e8:eb:bb:11:fd:cf:08:b6:ce:cb:15:ae:6d:19:35:19:
         c2:62:70:e6:7d:7d:e1:9d:58:0b:7d:ab:82:3e:3e:c6:89:1d:
         7b:bc:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:13:21 2026 by rpki-client