Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F180E2B24FD011EFBC17A55DC4F9AE02.roa
File:                     F180E2B24FD011EFBC17A55DC4F9AE02.roa (raw, json)
Hash identifier:          QC5NYSSW8rTfzylS7O9VIr7rCdcEzEW4j7g4v/u1tVo=
Subject key identifier:   F1:B5:99:30:1F:34:11:D6:57:62:04:D8:36:D5:8A:03:6D:B0:62:BC
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35AB
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F180E2B24FD011EFBC17A55DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:32:53 +0000
ROA not before:           Fri 10 Oct 2025 08:05:02 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     6079
IP address blocks:        122.8.36.0/22 maxlen: 22
                          122.8.96.0/22 maxlen: 22
                          122.8.100.0/22 maxlen: 22
                          122.8.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13739 (0x35ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Oct 10 08:05:02 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a48655-ff9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:c6:f7:54:a1:32:04:50:c1:60:9d:81:58:
                    85:e6:7d:85:31:5c:dc:02:1e:2e:4e:a5:aa:ce:f8:
                    2d:9a:61:03:44:40:b5:aa:06:7b:98:ae:31:4e:87:
                    f9:e2:15:4c:56:ab:66:14:c2:10:9e:d4:3b:ab:cb:
                    8e:07:62:a6:3a:4b:2e:6c:08:b7:b7:a5:6c:39:3d:
                    b8:fe:90:db:dc:97:e5:b5:36:55:5e:cc:14:2c:4a:
                    23:6f:4a:1c:23:5d:b1:6a:52:df:2e:8b:0c:6e:e9:
                    1e:ea:78:08:78:c2:5b:bc:b9:fb:ca:18:13:60:6e:
                    24:9a:43:c5:dc:ad:b4:e7:c3:bc:0f:ff:8a:1a:8b:
                    fe:e8:bf:7e:d6:4a:9d:fb:18:23:00:a4:2e:af:ea:
                    0b:07:61:1f:e2:70:3c:e7:46:87:36:7a:cd:9e:fb:
                    9a:47:9a:64:23:bc:97:3a:bc:8d:73:10:97:48:c8:
                    ab:a3:6c:50:ae:2e:bd:fd:d0:20:94:9e:e9:46:fd:
                    82:52:2d:c5:26:8f:14:96:08:00:02:2a:c7:59:20:
                    ff:ea:79:f9:0c:ae:bf:b0:51:ef:33:45:4e:92:c7:
                    e1:68:a9:93:1b:7c:72:2d:68:a3:0e:02:4d:e9:56:
                    29:cf:5c:5e:6a:19:76:60:54:38:38:85:51:a5:ea:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:99:30:1F:34:11:D6:57:62:04:D8:36:D5:8A:03:6D:B0:62:BC
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F180E2B24FD011EFBC17A55DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.36.0/22
                  122.8.96.0/21
                  122.8.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:72:42:83:bf:ee:88:a1:33:c5:ed:10:ff:5d:34:c4:42:0d:
         64:16:25:6c:2b:c9:49:91:ec:6e:b6:73:15:7a:b4:91:9c:13:
         ec:92:72:56:58:be:f1:0c:34:e3:83:49:ff:4b:83:71:a1:1f:
         44:e3:5c:2e:bc:f3:42:69:dd:8c:3f:ec:de:d2:0c:1d:b9:d5:
         3b:61:33:24:d8:34:4e:2c:4f:93:47:d2:c2:34:25:9b:86:19:
         ed:2b:01:0c:04:76:3b:72:68:40:b2:2f:80:1c:47:f3:0c:1a:
         6f:91:1d:9b:51:db:fe:ad:36:1b:19:8a:46:39:22:fd:13:e8:
         05:7f:9d:34:26:3a:0f:26:18:70:2d:3f:35:bc:8c:53:1a:89:
         14:5e:f1:25:53:45:13:5b:5f:58:b6:72:e8:56:76:82:e8:a0:
         c2:68:c6:1a:70:9c:45:7c:4e:7a:cc:fb:f5:0c:d6:0a:21:80:
         c4:8d:e7:99:f2:1e:43:3b:20:8c:40:d6:54:39:03:df:4c:92:
         98:10:88:6f:00:11:85:a3:4d:20:bb:a2:c3:f3:47:41:e2:07:
         c5:18:d4:23:11:d6:06:f3:89:a4:0f:b2:35:49:e3:4d:cd:71:
         c0:ef:a0:45:69:12:90:4b:2e:7f:ee:ea:b7:96:a8:32:b3:32:
         38:f8:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 23:21:00 2026 by rpki-client