Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
File:                     038C732E874611EB83B41D39C4F9AE02.roa (raw, json)
Hash identifier:          2JfNZ4QiLkf3fWIrtV5StFupWR5RzcN8rLVkxpO3w64=
Subject key identifier:   02:A8:D6:5C:9B:B3:B2:DD:FB:31:AF:51:90:91:7B:04:3E:25:5A:88
Certificate issuer:       /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Certificate serial:       07CE
Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:40:21 +0000
ROA not before:           Thu 10 Apr 2025 22:02:56 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135351
IP address blocks:        103.214.208.0/22 maxlen: 24
                          144.48.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
                          rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
        Validity
            Not Before: Apr 10 22:02:56 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fb75-16b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:5f:83:33:0c:a5:0c:44:a2:c5:00:50:1c:
                    fb:1b:aa:b3:ec:cf:8a:a9:94:e7:f5:e8:0b:ad:0a:
                    8b:c3:a7:c2:84:54:f4:65:f1:5a:1a:36:b7:82:d0:
                    58:24:a0:89:2a:92:d3:06:4f:99:2b:f6:af:96:c4:
                    20:28:1f:4e:cd:9a:68:66:2a:f4:a5:13:cb:ba:66:
                    a4:c6:0b:bb:21:b1:1c:4c:84:65:1d:45:f2:02:56:
                    cc:e5:18:84:2c:b0:82:78:5a:dc:49:f2:fa:9c:e4:
                    45:97:b7:7c:71:bf:29:c0:7c:00:14:1a:4c:27:71:
                    b2:5d:42:b4:83:ef:ec:ba:95:07:7d:2d:e0:21:1d:
                    ec:8e:31:5b:06:31:63:bf:d2:c6:1d:a4:34:fd:94:
                    02:88:ba:07:d7:10:8b:af:d4:d9:f9:4b:2d:10:97:
                    9c:e4:16:08:0a:4b:29:2f:18:20:a3:5c:92:3c:16:
                    af:6c:c7:66:f4:58:96:28:fb:4c:4a:d8:11:84:7f:
                    62:9b:6b:bc:35:40:db:e9:cb:03:60:6f:9d:e2:a2:
                    b1:49:0f:8e:e5:e9:64:f2:4f:9a:37:b8:13:11:4b:
                    d0:e5:4c:99:43:88:39:27:5e:98:4b:e5:20:60:55:
                    ac:57:da:0d:2d:b4:20:bf:0d:67:29:88:87:eb:43:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A8:D6:5C:9B:B3:B2:DD:FB:31:AF:51:90:91:7B:04:3E:25:5A:88
            X509v3 Authority Key Identifier:
                keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.208.0/22
                  144.48.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:07:b9:5e:cb:52:f2:f9:5d:d8:00:66:10:eb:05:3f:38:
         1b:a4:2c:bb:e8:66:e9:ee:ca:b8:69:0d:6e:40:f6:32:43:58:
         03:f9:ac:d2:2c:15:25:d4:38:cb:93:fb:dc:67:9f:a4:8f:d2:
         20:4a:64:5d:0f:a1:17:54:02:4a:6f:6d:d4:62:1b:1a:f2:b0:
         0c:74:ea:ab:d0:97:49:94:77:c1:a7:ed:96:a2:e2:05:ee:45:
         d3:9f:5a:ee:d7:b3:ea:74:ec:a5:e7:a2:6c:0a:9c:1b:2b:1c:
         0e:f3:10:e5:69:60:83:8d:aa:f2:10:69:eb:fa:57:79:ff:41:
         35:f4:87:e2:3d:4b:d9:46:37:3b:26:66:25:f4:cb:59:fc:ae:
         ae:f2:5a:70:eb:ef:9a:f9:55:22:31:ed:b4:d2:54:25:01:3b:
         0f:c6:4f:33:0a:4b:ff:35:5a:dd:75:fd:69:13:71:64:b9:f1:
         ac:08:cb:e0:73:bf:3d:f9:04:ef:13:5f:5c:be:dc:e4:a7:ff:
         1e:d0:59:6b:a4:1d:78:c0:ca:08:d0:47:a3:63:2f:e5:8d:15:
         7c:c5:b3:5a:8a:14:a8:90:0b:eb:c8:52:0d:ad:5a:ea:82:06:
         a5:35:55:41:dc:b8:aa:9e:15:19:8e:d4:6a:02:2b:8f:cd:19:
         5c:e8:60:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:49 2026 by rpki-client