Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/81FC16A6B46511EF86BEAC6BC4F9AE02.roa
File:                     81FC16A6B46511EF86BEAC6BC4F9AE02.roa (raw, json)
Hash identifier:          xq7YEvfaNzXWM/9MQqDfYNsSlsB3/7fTEB/zk7EcfRM=
Subject key identifier:   5B:54:09:FC:D7:96:3D:43:72:2D:DB:1C:01:81:B1:B2:F9:2D:0D:31
Certificate issuer:       /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
Certificate serial:       0149
Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/81FC16A6B46511EF86BEAC6BC4F9AE02.roa
Signing time:             Sat 01 Aug 2026 07:55:44 +0000
ROA not before:           Sat 01 Aug 2026 07:55:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139020
IP address blocks:        103.138.152.0/23 maxlen: 23
                          2404:d0c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl
                          rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
        Validity
            Not Before: Aug  1 07:55:43 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6da67f-c0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:81:32:93:f3:9b:b8:f3:77:4b:ff:d2:88:
                    b6:bb:27:9d:09:b3:c1:9c:08:7f:16:ff:c3:7c:4a:
                    45:b3:4a:d6:e7:fb:56:5c:09:24:0e:86:b2:bb:0f:
                    65:5c:9b:db:67:68:5a:7d:a3:14:96:d7:fb:5b:6c:
                    a5:f8:2f:72:98:46:e0:06:85:68:74:68:9a:fc:b5:
                    4c:e4:d3:80:5c:74:e8:cc:d0:57:92:7c:24:2b:4c:
                    7d:e3:2b:56:ef:1e:9d:65:0f:21:be:f9:be:5d:3e:
                    c1:c5:1d:5d:f3:5f:25:29:52:db:e9:1a:66:15:96:
                    bd:fa:05:79:3b:7a:51:f9:96:3e:06:27:5a:8e:df:
                    48:5a:a4:c0:76:ad:48:a4:42:ec:a8:5c:95:16:05:
                    0e:52:de:b5:f0:75:df:27:c4:19:46:5e:b4:81:83:
                    73:75:ec:aa:68:e0:ce:49:9d:ff:e6:6f:d3:28:ec:
                    ff:0a:84:c2:c5:d0:02:96:ed:5f:21:a0:04:5b:aa:
                    e3:de:de:18:3d:5c:66:c8:b7:fb:54:a3:db:eb:f0:
                    9a:6e:fc:bb:39:e2:60:27:73:9a:03:62:b0:b6:6f:
                    92:e4:34:d7:b1:2f:27:33:91:63:62:fc:6c:32:8b:
                    a0:f4:9f:d5:87:6a:e9:ee:88:22:4a:e5:cb:36:5c:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:54:09:FC:D7:96:3D:43:72:2D:DB:1C:01:81:B1:B2:F9:2D:0D:31
            X509v3 Authority Key Identifier:
                keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/81FC16A6B46511EF86BEAC6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.152.0/23
                IPv6:
                  2404:d0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:a5:47:6a:4d:72:c0:d7:03:a4:cc:73:1b:7b:42:75:ba:50:
         2b:c0:f8:0f:ce:c1:15:b3:e2:52:14:12:d3:20:c0:a9:be:2c:
         8a:e8:29:54:6a:3e:90:c3:db:d0:a0:9e:f6:ef:b2:62:6c:b0:
         cc:ba:42:58:4b:3e:4a:5a:6a:e2:61:51:04:95:1a:a0:e8:b0:
         e2:dc:cc:0d:d9:ec:15:06:69:30:d3:45:ab:ad:e0:1e:02:8e:
         ae:06:5e:ba:89:cd:c6:71:e8:90:04:38:18:7e:58:67:62:b9:
         f8:94:11:97:75:1e:60:11:60:27:14:43:bd:1a:93:4d:9c:0a:
         ab:0a:41:cc:3f:31:6f:f3:c0:a4:54:94:45:c2:bd:31:18:fb:
         8e:67:6e:fe:be:bf:ea:d2:a1:5a:d2:01:a9:e1:d2:5a:2a:37:
         78:8b:41:86:e4:66:38:f0:7e:9f:00:2d:3c:93:41:ac:dd:b4:
         82:20:0e:de:88:e2:22:07:7f:a8:5d:de:b8:05:82:2a:08:5e:
         5c:b3:46:47:0f:88:a3:94:b8:3a:31:d2:9e:9f:5a:b5:f9:f4:
         0c:96:22:5f:e0:75:7e:9b:17:2b:98:89:3f:04:2b:8d:ed:72:
         50:15:19:f4:6c:7a:7f:e6:00:5e:9a:ff:0c:25:1a:93:04:ef:
         57:48:d2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:52 2026 by rpki-client