Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/2615C5DEC3AA11F1A8BBC8AA4E11F970.roa
File:                     2615C5DEC3AA11F1A8BBC8AA4E11F970.roa (raw, json)
Hash identifier:          tVTDW9Ru8RRU4TL3ziD4j59uQaeWcCzZkIwoq11voMM=
Subject key identifier:   1C:EC:2D:C7:83:49:AD:BF:5D:2A:CB:A0:53:22:54:AC:F3:72:80:5C
Certificate issuer:       /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial:       08BB
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/2615C5DEC3AA11F1A8BBC8AA4E11F970.roa
Signing time:             Fri 09 Oct 2026 06:44:46 +0000
ROA not before:           Fri 09 Oct 2026 06:44:46 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140630
IP address blocks:        103.204.182.0/24 maxlen: 24
                          103.204.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
                          rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 21:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235 (0x8bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
        Validity
            Not Before: Oct  9 06:44:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6ac88d5e-6fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:5c:c5:25:c7:51:72:a6:5d:1f:b1:ff:5a:
                    f2:fb:38:d9:a0:90:8a:40:e3:01:38:dd:b4:56:4e:
                    cd:48:91:23:0a:1c:cc:00:57:0a:5e:4a:96:74:d2:
                    7d:10:45:b5:35:3f:79:6f:12:8e:ea:f7:bd:53:5c:
                    d4:07:a4:b2:5c:f7:a5:ee:3f:71:24:54:21:85:84:
                    94:11:ee:84:20:40:f4:93:d3:2b:0b:d6:3b:31:16:
                    13:50:0a:ac:0b:1e:92:26:7e:fd:a9:2d:e8:8b:06:
                    a9:6a:b0:7c:cd:fe:9f:e1:71:24:4a:d0:48:9c:8c:
                    66:e0:96:2c:93:37:a3:a0:71:0a:18:53:a7:94:ad:
                    48:09:3a:3f:a2:b3:30:80:99:01:c4:f9:d1:7d:d3:
                    63:5c:2c:f2:76:9e:93:a6:d3:eb:9c:f0:07:40:7a:
                    8f:1a:16:23:01:ab:42:d7:9c:64:f5:8f:7c:a7:c2:
                    d2:8e:8d:27:6f:ae:4e:c2:23:1f:a1:8f:3e:42:83:
                    6d:4d:a2:44:ec:27:25:0f:4b:86:bb:0b:df:a2:15:
                    9a:bf:20:b0:7a:80:88:63:fa:b4:61:15:1b:46:8a:
                    cf:e2:4a:3e:4b:b0:c6:7a:15:5d:f5:a4:0e:c6:3b:
                    a2:ad:4c:27:41:80:3b:17:d8:62:13:06:33:70:08:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EC:2D:C7:83:49:AD:BF:5D:2A:CB:A0:53:22:54:AC:F3:72:80:5C
            X509v3 Authority Key Identifier:
                keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/2615C5DEC3AA11F1A8BBC8AA4E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:ac:e2:41:2b:65:bd:04:59:10:dc:a3:4f:ca:41:9d:f1:66:
         d9:04:a7:c5:6f:79:ad:93:74:44:70:2d:bb:ef:97:e7:34:fb:
         11:88:af:14:63:ad:5f:73:1d:11:12:08:12:23:1d:b4:92:aa:
         32:53:4f:77:92:e6:ff:9c:20:ec:c7:5e:7e:c6:38:bd:cd:52:
         fb:12:d8:0e:ee:73:e9:e4:37:0e:97:7f:7c:f9:c3:00:19:43:
         dc:91:33:bd:fd:66:34:16:44:86:a6:ed:d7:f8:08:e5:30:af:
         1f:a1:45:c6:d3:42:c9:a7:c0:ba:43:c1:10:72:33:ab:18:c7:
         7d:40:9c:e8:0e:74:24:e2:99:67:92:6d:64:3f:75:a5:4c:28:
         d2:85:ff:15:3b:38:7a:86:ca:4e:40:15:16:d8:71:48:f6:82:
         4c:6b:44:68:98:d2:02:c7:d9:2b:0f:ab:96:f0:58:d8:d0:dd:
         f9:d7:a2:4f:0b:35:80:68:a9:09:2f:17:a9:26:e9:f6:75:b3:
         ed:57:e9:30:4a:f8:b9:f8:c5:a5:f6:fe:5b:a2:2b:74:4f:cc:
         17:d2:e5:50:27:9c:28:2c:5a:7d:d8:e1:14:65:b1:b4:38:d9:
         a0:7c:79:24:d9:73:cb:3c:aa:3b:f5:58:ed:6e:49:ed:6a:e3:
         57:c7:7a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:26 2026 by rpki-client