Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/0FDE82648A4911F1987018B83411F970.roa
File:                     0FDE82648A4911F1987018B83411F970.roa (raw, json)
Hash identifier:          Ng/R04JSPCCx2cCyICpbZ6KO0JaU+5Nu0vuc+keojl8=
Subject key identifier:   31:FA:E7:D7:AB:F5:2A:E3:97:47:58:39:EE:FA:20:6D:B0:85:F2:6A
Certificate issuer:       /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Certificate serial:       027A
Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/0FDE82648A4911F1987018B83411F970.roa
Signing time:             Tue 28 Jul 2026 05:56:23 +0000
ROA not before:           Tue 28 Jul 2026 05:56:23 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     136181
IP address blocks:        103.138.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
                          rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
        Validity
            Not Before: Jul 28 05:56:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a684487-82b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:b5:f8:67:73:9f:b1:64:f5:96:20:4b:f7:
                    e7:b5:3c:09:7a:0a:1a:cc:f5:88:0a:31:c4:a6:e0:
                    18:d7:a7:fd:c4:7b:26:bb:7e:69:cc:13:78:09:78:
                    58:40:22:a3:25:f6:57:41:1c:d5:59:01:b1:db:c0:
                    a3:87:f0:b4:8d:4d:70:68:ba:d9:7d:d1:67:bf:e0:
                    e4:a9:dd:14:cb:2f:5f:ff:df:cc:7e:fe:a3:5b:6d:
                    ae:af:6e:8b:3a:16:4f:9a:c0:2d:d7:d9:9a:f8:3b:
                    92:17:04:ce:de:3e:95:ff:b1:87:9b:b9:5c:d5:be:
                    6f:16:e3:9c:e9:eb:35:85:f0:84:3c:d0:d1:9e:b9:
                    b7:7f:a1:a7:90:8f:ab:71:b2:48:b4:93:19:30:6c:
                    d5:ef:df:d7:d9:e7:b1:2d:ac:ec:bf:17:ab:19:84:
                    b4:ee:c6:67:cc:e5:16:b9:f7:69:17:a9:70:18:24:
                    72:24:62:37:fb:47:e4:dd:60:8a:3b:4a:9f:c9:9c:
                    ca:fe:47:05:06:1b:b9:5e:61:5c:2f:4b:21:e2:72:
                    b1:5f:8d:06:2e:b3:1d:54:71:68:57:f3:69:44:55:
                    e4:43:a0:34:f5:a0:ba:26:35:10:95:0f:55:f0:8d:
                    f0:65:7c:20:c3:b7:76:75:64:b7:21:f4:40:5b:9d:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:E7:D7:AB:F5:2A:E3:97:47:58:39:EE:FA:20:6D:B0:85:F2:6A
            X509v3 Authority Key Identifier:
                keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/0FDE82648A4911F1987018B83411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:d2:de:55:54:86:17:c1:7e:cf:ef:99:9a:87:b2:95:92:
         a5:9d:5b:d0:b7:3b:5d:40:17:b2:03:03:25:38:7b:0d:18:86:
         61:4e:3f:89:21:25:0d:f3:6c:f4:30:13:f3:12:8c:52:69:a9:
         16:1e:88:c5:76:b4:76:b7:47:16:70:39:c3:00:b0:7a:b7:fc:
         8c:e6:0a:a8:4c:c3:63:57:84:e5:e1:6a:59:e7:3c:cc:e4:db:
         61:a2:42:24:0c:59:6f:06:8d:98:7c:0a:2c:c7:c9:27:8b:cb:
         f1:8b:f8:4b:4c:ae:7d:d7:28:28:35:5b:3f:dc:6c:08:ba:83:
         99:04:31:19:5b:13:55:5c:11:66:c7:91:1b:9d:1e:58:4d:47:
         00:89:ad:69:c8:65:b1:6b:91:9a:26:d5:29:67:a0:6f:43:d0:
         f9:15:95:00:32:4b:0f:10:4a:f6:23:5f:a4:e9:bb:21:28:a0:
         72:4b:75:89:61:72:3a:17:82:67:21:4f:18:b5:6d:36:bf:60:
         c8:f8:41:65:bc:75:60:85:85:f2:fd:4e:8a:19:52:64:15:71:
         30:5d:20:75:4b:07:c3:55:a7:7e:e5:ba:e0:b3:4e:ac:36:5d:
         42:bd:75:94:0a:af:7a:f8:8c:4e:98:22:08:5f:17:70:95:c0:
         5c:9c:27:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:42:49 2026 by rpki-client