Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
File:                     DCD75050315011F0BC916269C4F9AE02.roa (raw, json)
Hash identifier:          it0EUJuF/f2xwJeSJJN9QRAuHCVD+ovbX5Fq/ZrMmKg=
Subject key identifier:   EC:6E:75:3D:7D:83:4E:9E:90:65:1D:33:77:55:77:6C:10:A9:69:73
Certificate issuer:       /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial:       1A9A
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
Signing time:             Tue 14 Jul 2026 17:16:50 +0000
ROA not before:           Tue 14 Jul 2026 17:16:50 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     9422
IP address blocks:        43.255.57.0/24 maxlen: 24
                          103.70.132.0/24 maxlen: 24
                          103.70.133.0/24 maxlen: 24
                          103.70.134.0/24 maxlen: 24
                          103.70.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6810 (0x1a9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
        Validity
            Not Before: Jul 14 17:16:50 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a566f02-6c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:c9:80:c8:44:39:4f:c5:fe:cc:54:7f:7d:
                    cf:28:cb:9a:c5:bc:a6:29:89:07:6a:6b:c8:b6:9b:
                    13:f4:7f:93:fe:a0:e1:5d:ee:d1:c8:ca:95:a4:8e:
                    bc:66:09:d0:31:2b:2d:24:34:c3:a6:c3:35:11:9b:
                    f3:15:8c:57:fc:aa:f1:6f:40:1f:b3:67:db:ca:79:
                    b8:de:38:23:92:18:8e:c7:23:48:2a:05:e3:dd:98:
                    29:56:2c:43:00:0e:e2:91:e5:18:e4:b1:e4:53:b8:
                    73:6a:64:ac:6d:99:c7:25:3f:2e:9c:9f:05:d0:5a:
                    76:91:71:05:30:55:44:5d:6f:26:fe:56:9f:15:42:
                    52:c9:56:47:84:86:02:df:2b:4b:96:4b:17:ad:f9:
                    57:ab:e5:0d:64:d3:2a:bc:64:20:b7:07:39:cb:da:
                    19:50:2c:02:d6:57:e0:6c:10:41:6e:1d:29:ae:d7:
                    a9:d8:ba:0e:8a:3f:c4:ac:1d:01:c3:c7:0e:a1:8a:
                    eb:c7:3d:5a:b5:a8:14:d0:63:e5:6d:55:35:32:b1:
                    58:80:bb:c8:d4:d3:fd:54:ca:42:5f:9a:96:90:ba:
                    64:46:9b:46:37:c9:97:39:a9:3f:c1:36:04:48:bb:
                    80:49:cb:6b:72:03:89:92:9d:a5:87:c2:be:67:4b:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6E:75:3D:7D:83:4E:9E:90:65:1D:33:77:55:77:6C:10:A9:69:73
            X509v3 Authority Key Identifier:
                keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.57.0/24
                  103.70.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:a4:0b:91:94:7b:9b:f4:a4:5a:9f:8a:f1:7a:ec:10:89:da:
         7a:72:36:de:6e:99:51:04:7b:c7:1e:65:46:3d:12:50:7f:02:
         4d:d0:b7:e1:fb:5a:14:cb:9f:86:92:d5:1a:f0:df:69:53:cb:
         dd:97:eb:93:06:46:0e:39:7f:b1:e7:77:3b:8e:a1:fc:0c:0f:
         04:e2:97:5f:4c:f1:a0:cc:91:fc:2e:5e:0a:91:5d:04:44:d1:
         cb:93:29:a6:a3:41:dd:2a:37:5c:4b:85:3b:bd:42:18:0e:c7:
         b5:08:ee:24:87:f3:45:3b:ac:be:a4:b9:fd:af:1a:8c:4a:1c:
         76:6d:af:1b:14:2f:91:a3:53:28:e6:f5:23:e3:a6:95:c7:39:
         41:3b:19:2e:4d:31:67:63:7a:c2:df:1a:17:85:db:30:dc:a8:
         2f:10:5d:ce:06:5b:ee:cf:28:bb:20:5b:67:e7:2a:9c:6a:25:
         cf:bf:7e:59:04:88:ea:1a:7d:4e:b1:3f:83:cc:d0:59:b5:f5:
         58:9c:9d:e3:e1:9d:45:57:d8:15:0b:c8:9f:84:1a:d2:9b:4a:
         87:21:45:a8:d1:a6:57:f6:fd:f5:d8:68:f9:8f:93:91:f2:3f:
         45:e9:1a:04:a5:f9:40:69:22:0e:1b:59:f8:0c:c2:ae:2e:84:
         0e:46:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:57:13 2026 by rpki-client