Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/80B30FA48F5611EA9C04912BC4F9AE02.roa
File:                     80B30FA48F5611EA9C04912BC4F9AE02.roa (raw, json)
Hash identifier:          NU7Dlcl2kMVtOyOhbAdAamXp5yieV6zSpEgLyTHMN/M=
Subject key identifier:   15:B8:A0:2A:1B:43:DC:C8:41:F9:75:8F:FA:56:67:13:93:E6:78:3F
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       3660
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/80B30FA48F5611EA9C04912BC4F9AE02.roa
Signing time:             Sun 16 Aug 2026 15:16:44 +0000
ROA not before:           Sun 16 Aug 2026 15:16:44 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55356
IP address blocks:        103.112.152.0/22 maxlen: 22
                          103.112.152.0/24 maxlen: 24
                          103.112.153.0/24 maxlen: 24
                          103.112.154.0/24 maxlen: 24
                          103.112.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13920 (0x3660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Aug 16 15:16:44 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a81d45c-f7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:60:6c:39:72:cb:54:6e:a4:0f:d8:69:3a:
                    11:4a:98:7a:a0:67:3f:ac:0b:5c:23:04:8f:eb:55:
                    44:94:4c:68:7b:8a:21:6f:f6:f5:bc:fd:8a:a3:ca:
                    ed:c1:c4:96:2b:6a:f9:17:e0:9a:44:1b:cd:c6:3e:
                    e2:cc:69:b1:19:4d:8e:b3:f2:b4:76:b2:c9:77:1c:
                    a9:94:8a:c1:b5:95:21:77:60:56:6c:67:c6:43:13:
                    92:9a:17:bd:d3:82:71:8e:ac:f4:16:fc:19:33:cb:
                    b3:c6:93:9b:0d:fe:5e:3d:66:30:63:c9:06:4c:fe:
                    d2:db:18:6a:7b:06:e3:06:9f:a4:85:04:5f:d0:6d:
                    2a:1f:7d:9b:13:7c:44:8e:2d:ec:4c:d9:ec:bb:69:
                    b0:f7:7b:75:7c:74:a5:29:ea:de:2c:23:68:8b:8c:
                    34:1f:6c:79:82:67:95:28:54:90:d8:a3:ae:94:48:
                    88:de:8e:b8:b1:bb:00:6f:94:a6:24:04:59:5c:15:
                    78:86:79:fa:45:a8:6d:d0:de:fc:a2:f6:1d:e0:6e:
                    eb:4d:ca:b4:d5:2f:0f:0b:df:d7:e1:32:a4:51:b8:
                    17:fd:fa:35:1b:95:72:3b:8b:a0:70:1f:19:8f:c3:
                    bd:e5:a4:28:2a:b8:53:82:14:fd:ac:e8:19:0d:bb:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B8:A0:2A:1B:43:DC:C8:41:F9:75:8F:FA:56:67:13:93:E6:78:3F
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/80B30FA48F5611EA9C04912BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:f7:dc:61:d2:83:8e:9d:5d:cf:df:e6:b6:be:97:8b:96:
         ea:2e:b7:45:6e:17:7a:71:0c:c1:71:23:59:72:e1:aa:94:f9:
         f6:38:f7:eb:70:00:21:a9:98:57:00:ae:56:1b:b7:5e:21:fe:
         02:22:12:a6:33:74:2a:45:52:65:d1:b7:ac:c0:5e:e1:08:f1:
         9a:83:e6:0c:3a:f9:bd:d3:8d:a9:10:c7:96:37:d9:ef:de:91:
         71:dc:6b:61:c9:79:6c:48:44:39:9e:ff:bc:57:81:90:67:41:
         85:28:2a:d3:bb:cd:dd:7f:e9:cf:c4:0c:5a:58:f6:ce:19:07:
         44:8f:e2:48:3f:8c:2d:64:d4:81:bd:04:09:a7:96:e2:14:21:
         f5:a7:1c:e2:f3:bc:03:27:1e:ca:f2:9d:8f:1d:0c:62:fb:0b:
         6e:fe:62:b5:2a:fd:93:bf:1d:3c:11:b2:56:c2:55:ad:fe:42:
         e6:1b:1a:96:23:5e:1e:29:f2:d3:a5:73:1f:a9:f5:f5:f1:94:
         b9:dd:d5:3e:f4:06:97:9b:07:63:7c:2f:c0:6d:86:8e:ff:25:
         19:43:c2:4e:46:78:50:8b:65:87:8e:25:75:93:70:92:d1:49:
         03:9c:7e:4e:3d:66:11:85:a7:9c:9e:7a:42:97:8e:e9:99:bf:
         85:bc:2a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:41:50 2026 by rpki-client