Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
File:                     45F398E6EA6C11EE9C6A0650C4F9AE02.roa (raw, json)
Hash identifier:          2uRHbuQZyvJLJo7BIY+LG/5h7fEj3/MdPnTnEg8uVjg=
Subject key identifier:   5E:3F:85:B6:E0:44:DC:D9:DC:57:53:16:46:F8:E6:3E:2C:81:DB:09
Certificate issuer:       /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Certificate serial:       0253
Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
Signing time:             Sat 23 May 2026 02:33:15 +0000
ROA not before:           Sat 23 May 2026 02:33:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152464
IP address blocks:        103.131.198.0/24 maxlen: 24
                          103.131.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
                          rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 03:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
        Validity
            Not Before: May 23 02:33:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1111eb-561a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:7a:c2:aa:9d:e3:aa:0b:bf:60:d6:6c:d8:
                    dc:4f:df:ee:16:2a:d2:c0:26:18:ce:94:be:df:31:
                    3d:38:6a:9e:5e:32:01:94:2e:09:ab:5e:4b:2b:8d:
                    5a:17:7d:ac:7c:92:c5:56:a8:8a:a5:47:18:d9:a5:
                    69:82:98:82:68:dd:8c:53:3e:7d:fc:07:61:57:8b:
                    e6:bd:ec:eb:ee:cb:f8:73:3d:03:28:46:cf:38:17:
                    87:26:fe:e2:fb:ad:c8:e0:72:e9:c6:4a:30:bc:8a:
                    ee:a5:34:29:86:d0:67:0e:8b:de:e4:a8:f4:8f:2d:
                    2c:64:8f:83:f3:c0:df:1b:6f:65:27:ff:be:27:b1:
                    27:c0:22:ad:7e:57:22:f0:2d:ba:13:1a:61:79:42:
                    66:3d:ca:cd:a5:aa:dd:df:26:d3:09:b3:99:ab:ed:
                    8d:04:d6:89:c6:5f:43:75:0e:e2:37:79:32:96:76:
                    0a:83:9e:99:1c:50:d7:25:a7:6b:76:10:ef:f5:0d:
                    90:58:62:1d:b2:52:cb:ef:cb:e0:a7:6b:72:ee:89:
                    3e:9d:09:fc:fb:38:b8:68:cf:c0:33:33:aa:9d:f4:
                    a3:de:11:d1:f3:89:da:09:fa:4a:cb:e6:97:99:8b:
                    14:d4:63:35:cb:5b:6f:b4:50:55:09:00:21:0b:ec:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3F:85:B6:E0:44:DC:D9:DC:57:53:16:46:F8:E6:3E:2C:81:DB:09
            X509v3 Authority Key Identifier:
                keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:22:46:68:43:81:47:f6:21:15:5f:5f:9d:ef:12:76:5e:9b:
         d9:62:1d:7c:ff:51:d0:50:e1:1f:6d:af:2f:8e:ba:54:50:58:
         96:a2:f4:98:f1:10:5a:65:2b:9c:9f:ac:cc:c2:70:6e:37:4a:
         48:8a:f8:0f:d7:45:bd:16:70:0d:f4:61:28:97:3c:5f:bb:41:
         62:89:1e:7a:26:12:34:8b:44:b8:87:34:f3:d8:28:85:43:46:
         54:8c:4a:4e:ff:82:18:6d:f7:54:03:da:74:67:2c:e9:04:3d:
         e2:6f:89:3f:cb:ef:9d:3e:d3:e1:9f:5d:7b:9d:4c:15:d9:e4:
         72:83:bf:bc:a2:0f:c4:03:eb:ac:e7:b2:84:ee:7e:e7:f4:86:
         fd:01:4c:94:e2:f3:c2:c4:7c:80:6e:0a:70:b8:66:2e:0d:4c:
         5f:c3:9c:fd:f6:d4:a7:f9:e4:b6:bf:4e:14:91:1a:b6:dc:b2:
         9b:fc:e4:ab:f3:f5:f5:4b:ad:38:16:12:4d:c2:6a:a1:7b:7e:
         8c:29:db:81:3a:9f:10:c5:38:39:1d:64:ca:f5:26:88:41:6e:
         7f:6a:73:27:c3:39:cc:d2:91:dc:3e:18:e8:e5:d5:95:cd:71:
         14:ad:04:4a:b2:5e:96:97:b0:39:0c:79:91:29:5e:b0:5e:5d:
         76:9c:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:09:01 2026 by rpki-client