Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC94C436F62711E9AC18E63BC4F9AE02.roa
File:                     BC94C436F62711E9AC18E63BC4F9AE02.roa (raw, json)
Hash identifier:          kmwG0SfeWdiV4Xu5QoUdYfe+EQnDiuhdgFgvkYNigm8=
Subject key identifier:   A0:AD:2B:13:EA:2F:38:1E:5C:A0:CF:CB:10:06:ED:C3:80:65:A6:0F
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       38C5
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC94C436F62711E9AC18E63BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:23:19 +0000
ROA not before:           Mon 18 Aug 2025 14:50:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     6619
IP address blocks:        203.126.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 14:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14533 (0x38c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Aug 18 14:50:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48417-22ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:36:e4:a9:53:b9:ca:2e:01:b2:8e:4b:96:
                    e5:e0:3d:41:c5:32:c9:36:c5:1c:fb:85:85:02:b3:
                    2a:85:70:49:ac:6c:b3:25:bf:b4:7a:c1:ce:cd:70:
                    98:02:d9:64:10:36:31:bd:20:21:d6:83:69:13:de:
                    2f:13:cf:1e:a3:df:43:dc:61:3a:ec:88:02:6c:f1:
                    a0:5d:55:25:2d:63:b1:88:7c:08:5b:73:29:3b:10:
                    1c:8c:a4:a0:2a:9e:e2:53:4a:fe:2e:59:1f:a6:b2:
                    aa:04:50:cb:93:00:fa:10:d6:83:b9:ec:03:bb:78:
                    fe:47:dc:9f:76:25:8c:9a:80:9e:25:00:23:d7:5e:
                    de:10:b4:a8:2d:09:b0:ff:06:47:1a:72:2d:65:66:
                    61:6c:bd:b6:b1:b3:5e:b9:e6:2c:d2:25:91:79:ea:
                    09:89:42:95:76:e0:a2:39:90:db:64:da:36:77:82:
                    5d:41:69:7e:19:2a:c7:b0:68:83:18:e6:b5:59:6b:
                    a5:fa:4b:f6:67:61:4b:70:ae:1a:26:42:c3:e0:9e:
                    3c:68:2d:6d:77:21:df:31:7b:41:60:de:72:a4:ce:
                    9a:22:f8:f0:4e:80:c7:16:fe:82:27:52:71:d3:78:
                    f9:8f:cf:7f:ee:04:a1:83:d2:2d:65:5a:e6:52:d9:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AD:2B:13:EA:2F:38:1E:5C:A0:CF:CB:10:06:ED:C3:80:65:A6:0F
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC94C436F62711E9AC18E63BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.126.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:a3:8c:e7:8b:e9:6c:de:21:a5:b1:17:e3:c5:b0:50:09:
         bb:5e:e4:82:df:d0:de:af:f2:2f:f7:da:99:f2:e9:30:00:b3:
         7b:a0:52:1a:33:4a:98:b8:2b:32:df:d0:4e:34:c6:63:af:f8:
         63:c1:ee:91:2c:34:c9:94:87:64:33:63:c5:14:fd:77:75:8d:
         c3:72:fc:e5:3a:8b:7d:6b:23:0f:9c:a8:20:5f:b1:12:25:e2:
         07:d8:9c:b1:40:28:64:2c:44:78:5e:7e:1d:dd:8b:8b:bf:9c:
         b4:b0:93:49:11:52:20:99:40:8d:16:19:77:b9:14:41:a7:ad:
         98:61:84:11:fc:98:9c:f5:31:ec:01:c5:b4:94:23:a5:45:87:
         da:c0:f2:ec:06:58:fc:40:b7:48:8b:b8:a3:d4:3f:a1:d7:94:
         64:4b:28:10:fd:d2:89:a6:92:b9:de:a6:32:7b:1d:5b:d4:e0:
         1c:0b:a9:7e:36:da:70:04:d0:92:7b:bc:3b:9c:83:2d:e5:dc:
         4c:e4:22:fb:a0:89:12:41:59:af:a4:52:4d:cb:bd:e6:a4:b4:
         e5:6f:65:ca:f7:fa:f3:94:bb:78:ef:ae:81:2d:d5:cc:a6:d6:
         03:48:b4:f6:e0:70:cd:20:cc:1c:2d:65:ab:25:2e:e3:b8:cf:
         04:66:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:36:44 2026 by rpki-client