Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/6309B36EEC3911EFB3A92E86C4F9AE02.roa
File:                     6309B36EEC3911EFB3A92E86C4F9AE02.roa (raw, json)
Hash identifier:          uDALbi3bHpJkhVaUzcr/Tw4YI8CkGrOux57g2vncok0=
Subject key identifier:   95:B2:FE:D2:4E:35:7C:17:8C:18:20:C4:E8:29:D8:91:C3:58:8F:0C
Certificate issuer:       /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial:       0D01
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/6309B36EEC3911EFB3A92E86C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 11:28:59 +0000
ROA not before:           Thu 30 Oct 2025 18:37:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141458
IP address blocks:        103.130.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
                          rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3329 (0xd01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
        Validity
            Not Before: Oct 30 18:37:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5747b-4c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:c0:45:5b:36:d6:79:31:92:08:1e:19:78:
                    bb:8b:71:50:da:88:89:f2:e4:60:27:4c:1c:58:b9:
                    e1:c7:64:d8:6c:3a:cd:6a:09:87:5d:43:e5:57:43:
                    3b:43:46:bf:6b:16:91:fa:9b:2f:f0:3d:d0:94:ed:
                    79:28:02:7e:77:9a:3c:fe:90:22:6d:7f:52:b2:ff:
                    50:ce:c4:d3:9d:48:f2:17:65:24:e0:a7:91:4f:bf:
                    25:8f:68:09:76:34:f0:1f:52:8f:57:b0:58:cd:46:
                    6d:d6:05:ed:dd:06:ca:59:46:a8:7b:aa:68:9e:d6:
                    99:cc:bc:33:9a:83:94:6e:b3:19:d0:9b:fa:8a:9e:
                    09:fe:cf:6a:b3:1a:0b:8a:92:09:75:a8:40:d7:ca:
                    e9:67:61:8b:90:c3:31:84:94:5a:5a:4a:3a:2b:1b:
                    d9:dc:5d:eb:f9:ca:50:76:c9:7a:d4:88:86:5f:ce:
                    03:2d:0f:2a:f7:29:e8:96:f5:50:16:e4:a0:46:3c:
                    75:a2:b7:ed:fb:fa:31:d2:5a:63:d7:6f:f0:16:b4:
                    f7:f1:3a:02:ab:b6:da:97:0e:84:94:81:07:f2:ae:
                    04:86:6c:0c:0a:35:e5:8a:46:bb:0d:75:8d:6d:38:
                    78:e7:54:6f:7f:3d:bc:75:ae:5c:d7:bb:ad:c9:ee:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B2:FE:D2:4E:35:7C:17:8C:18:20:C4:E8:29:D8:91:C3:58:8F:0C
            X509v3 Authority Key Identifier:
                keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/6309B36EEC3911EFB3A92E86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:84:3f:c0:73:4a:8c:14:a5:14:1b:a4:8e:fe:54:72:93:
         ab:cf:1f:6b:fb:14:49:fc:16:dc:1f:bc:7a:cd:15:03:28:7f:
         45:7c:50:02:38:c1:4a:73:ad:ac:9f:18:41:4c:a2:50:1d:be:
         70:5b:2e:5d:da:11:6d:7f:6a:92:65:fa:13:18:26:4b:49:5d:
         26:f4:02:71:f7:5f:ee:21:7d:1e:e6:c9:b5:e7:6e:45:58:dd:
         60:d8:8e:da:66:0f:13:dd:0a:54:cb:46:85:64:2e:4c:bd:9e:
         84:05:e5:55:4e:de:1b:35:8a:04:b8:22:f0:f3:77:2d:d6:ff:
         21:2e:51:6e:4b:25:24:55:f7:c6:ff:19:8b:91:b9:3c:85:37:
         25:50:45:0e:4d:bb:a2:27:c0:e3:3d:fb:d3:9e:0a:0d:02:c7:
         b2:2c:d0:3e:3b:02:0f:6a:a4:f1:60:fd:8f:ff:07:53:5d:26:
         cd:17:9a:3b:58:e7:8b:4e:ba:4f:6d:16:2a:54:98:39:18:35:
         47:88:76:8d:70:78:b7:06:35:48:10:f6:29:0a:7f:e5:56:8b:
         0c:81:27:29:2b:35:ee:25:a1:e4:0c:4d:ce:3b:a2:f4:f2:10:
         b0:90:6c:e3:e7:87:ba:d2:09:3e:9d:85:a3:66:ed:57:05:13:
         e6:74:3f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:10 2026 by rpki-client