Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/15B87C049DF911F085AD790CC4F9AE02.roa
File:                     15B87C049DF911F085AD790CC4F9AE02.roa (raw, json)
Hash identifier:          XomchpB2hRZ+hEaVuLCJFnVrCaHOTQW3NB9zmoA/hhw=
Subject key identifier:   E4:04:CC:FB:E7:AB:5F:DF:87:D1:03:9D:9E:E6:C1:44:DA:06:3D:6F
Certificate issuer:       /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Certificate serial:       19B1
Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/15B87C049DF911F085AD790CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:01:56 +0000
ROA not before:           Wed 03 Dec 2025 18:00:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     26337
IP address blocks:        103.28.48.0/22 maxlen: 24
                          122.201.64.0/19 maxlen: 24
                          122.201.96.0/19 maxlen: 24
                          202.146.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
                          rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 16:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6577 (0x19b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
        Validity
            Not Before: Dec  3 18:00:01 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47f14-3031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:cc:81:01:49:db:23:26:ed:86:ce:ba:bb:
                    b4:fb:e0:be:81:3f:e6:00:77:04:8f:38:ae:b2:f6:
                    ed:fe:e5:57:7e:32:09:3a:6f:15:65:3f:e3:97:28:
                    16:07:fe:7f:a7:08:65:da:1c:a2:68:95:3f:d7:4e:
                    4c:cb:21:85:0f:ad:a4:d2:3d:2e:e2:3a:a6:88:cc:
                    49:e0:a6:30:53:18:8d:29:e7:fa:1e:b5:59:d4:e0:
                    f9:d5:1e:b6:0a:e9:e2:9e:84:31:7b:46:35:29:0b:
                    07:f6:9d:b6:96:52:9b:ff:7d:3c:25:dc:9d:aa:e9:
                    66:95:1c:56:d3:40:29:de:78:ca:3e:97:17:12:27:
                    b3:12:bd:31:f8:3c:46:21:06:93:96:a4:60:ed:bd:
                    18:4a:30:f0:a0:2b:99:83:61:09:0a:37:52:90:1c:
                    1b:bb:e9:42:5b:20:35:63:a3:3c:95:66:56:e6:db:
                    b2:e4:7b:3b:18:6d:c1:e6:9c:ac:31:55:27:fa:1e:
                    df:98:ce:6a:9c:8b:32:f8:4d:b3:3e:ad:30:93:17:
                    2f:63:04:63:22:f4:fe:19:29:19:79:6a:21:73:56:
                    30:6e:03:1e:24:07:ec:08:83:54:54:51:61:9b:56:
                    6f:b8:e5:5b:15:e3:ab:70:75:2a:01:e8:5e:d8:66:
                    1b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:04:CC:FB:E7:AB:5F:DF:87:D1:03:9D:9E:E6:C1:44:DA:06:3D:6F
            X509v3 Authority Key Identifier:
                keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/15B87C049DF911F085AD790CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.48.0/22
                  122.201.64.0/18
                  202.146.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:18:dd:4b:cb:52:1c:9e:da:42:d8:46:f3:31:f2:70:7f:a6:
         1d:1c:4a:95:c4:19:d5:e1:ab:57:03:a5:ee:b9:43:2b:de:64:
         fd:d9:76:77:7d:da:3b:d8:5f:8c:b1:4c:a2:a0:ba:f0:82:86:
         10:2d:ca:ec:41:f2:ad:f0:76:9c:aa:07:14:50:4d:54:e7:d7:
         24:d2:76:08:6a:9c:58:d4:05:97:ec:03:25:a7:bb:f7:65:75:
         2e:96:c6:66:48:c5:32:3d:1f:31:4b:5b:50:b7:40:16:dd:c3:
         8e:44:7f:39:53:61:af:52:57:cf:ce:99:dd:9b:cc:8f:b3:97:
         aa:50:c4:a3:fc:04:b8:a5:52:f2:a1:64:52:98:4c:cf:de:35:
         e5:30:ac:a6:60:8b:ed:bd:53:3c:9b:84:a7:36:e9:c7:d8:49:
         de:60:48:96:e0:1b:28:22:d8:44:34:71:e3:22:0f:54:6e:35:
         b1:33:9d:de:48:34:c8:86:7f:00:0b:32:e3:fe:5d:6b:ee:02:
         c9:cb:03:50:8e:5f:65:12:b2:d7:22:51:4c:cd:bf:2e:94:a2:
         6c:20:fa:1f:9f:b1:b9:9d:9a:6b:51:c4:33:91:15:d5:5c:31:
         cb:64:a9:57:5c:03:85:fb:de:37:ff:0b:f8:7a:6b:c8:89:43:
         f2:67:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:12:52 2026 by rpki-client