Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F3DC093A443C11F1BCF5870FC6833773.roa
File:                     F3DC093A443C11F1BCF5870FC6833773.roa (raw, json)
Hash identifier:          h5E7Du/MVmA6ojqvp1nMzMXhpL98SF8yQgVFkBLRbwM=
Subject key identifier:   69:F8:DD:62:1C:9D:A2:D0:F4:84:08:A6:07:30:B9:A4:FF:9A:F7:53
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35EB
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F3DC093A443C11F1BCF5870FC6833773.roa
Signing time:             Wed 20 May 2026 07:40:00 +0000
ROA not before:           Wed 20 May 2026 07:40:00 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     399461
IP address blocks:        122.8.0.0/24 maxlen: 24
                          122.8.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 May 2026 15:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13803 (0x35eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: May 20 07:40:00 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a0d6550-c501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:7c:54:28:06:68:d5:e3:4c:34:8d:a8:6c:
                    dd:b0:3e:41:35:9c:75:2f:9a:e2:6e:d4:e2:5f:e9:
                    77:69:65:11:bb:b6:b9:90:62:04:13:04:3c:f4:d4:
                    e0:92:7e:a9:ea:f9:19:60:eb:28:2c:7d:19:32:cb:
                    f8:51:d0:2d:bd:c0:d6:c5:43:f1:3b:3f:2f:89:8a:
                    cf:b7:67:b7:cf:0a:1f:89:4b:52:56:53:6c:73:a8:
                    d2:7f:3d:d1:64:92:13:db:ca:06:7d:b2:57:39:37:
                    06:57:14:54:45:d1:6e:01:18:4a:2c:55:50:1a:d1:
                    6c:71:0b:f7:c4:cd:83:1a:39:44:53:ed:fc:94:48:
                    91:f4:39:ba:d2:98:9c:39:64:80:26:9e:b8:f7:2a:
                    ee:e8:3d:47:f8:d6:40:a2:00:6e:42:82:14:34:0a:
                    73:0b:1b:f9:05:da:4f:a1:58:51:ff:1a:d2:b2:69:
                    02:38:ea:2d:38:1e:15:92:45:45:80:27:26:83:c5:
                    76:b8:8e:d2:3d:46:e0:41:c5:7e:4c:56:42:fb:9d:
                    19:d9:03:c7:7a:19:e1:9b:59:45:9a:96:32:f9:b5:
                    5a:21:b0:34:13:b6:c6:99:68:79:56:20:94:cd:07:
                    65:e7:b6:1d:4d:f5:5c:99:f0:a3:f6:22:de:fa:b7:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F8:DD:62:1C:9D:A2:D0:F4:84:08:A6:07:30:B9:A4:FF:9A:F7:53
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F3DC093A443C11F1BCF5870FC6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.0.0/24
                  122.8.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:90:e3:e8:6c:5a:3d:2b:2d:eb:90:95:98:90:ae:1c:6d:
         5b:28:e3:02:15:d8:07:2b:0d:6a:5a:c6:d4:44:53:b0:f4:2a:
         bc:7c:9a:6b:64:e9:55:2b:cf:8a:2f:81:2c:fb:4e:af:b8:4f:
         81:0a:fc:05:db:82:3c:02:3c:ee:41:73:f4:31:37:98:63:39:
         3e:99:57:47:64:ce:78:a4:c5:e5:e3:9c:48:b8:97:5c:26:3d:
         46:01:fa:00:06:13:26:8f:d7:39:20:b8:70:c8:d0:6e:cb:53:
         5a:d0:41:4c:34:5c:21:86:1a:0e:fe:6f:c1:00:fd:cf:29:5e:
         79:8d:49:4f:67:88:2a:c1:7d:8f:67:51:c5:a1:1c:e1:fc:bb:
         e2:21:92:50:1e:be:ac:15:45:4c:e0:03:35:4f:0b:98:c5:d1:
         f9:77:58:52:b7:47:5d:ee:f1:e4:65:4a:18:76:0a:7c:d6:05:
         0e:2e:a4:8b:8c:00:8a:35:6d:6d:63:50:b8:06:73:a0:d5:88:
         f3:e7:9c:40:f1:3d:15:40:48:c6:50:58:af:b9:2d:a9:36:8e:
         e9:d9:4b:2c:73:8a:92:fe:4d:70:3c:40:3b:e9:f5:3c:85:ea:
         9f:f6:c2:81:10:8b:f8:7e:79:45:25:42:ec:36:fc:61:2a:e5:
         ba:d9:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 03:58:42 2026 by rpki-client