Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/C136E3D4491D11F1954C6C159E833773.roa
File:                     C136E3D4491D11F1954C6C159E833773.roa (raw, json)
Hash identifier:          dBt147+my2tXexbIdXHCR7XTVGrFV/mewlu8hdTPrGU=
Subject key identifier:   30:70:14:DF:3A:9E:1E:B2:19:74:77:95:2E:6A:4B:95:32:CA:6F:05
Certificate issuer:       /CN=A911F85F/serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
Certificate serial:       02
Authority key identifier: 2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/C136E3D4491D11F1954C6C159E833773.roa
Signing time:             Wed 06 May 2026 07:32:37 +0000
ROA not before:           Wed 06 May 2026 07:32:37 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139633
IP address blocks:        103.142.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl
                          rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F85F, serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
        Validity
            Not Before: May  6 07:32:37 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69faee95-390f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:cb:47:54:e8:41:5f:fb:9d:86:ba:58:7c:
                    39:10:40:59:c4:cf:0c:a1:af:de:56:87:22:38:90:
                    0f:61:d6:2e:f6:64:45:cc:f4:c7:bc:91:fb:5a:49:
                    d5:c3:2d:07:45:76:c3:88:d4:ad:e1:cb:3f:46:72:
                    ec:4f:2d:92:5f:47:6a:7d:40:b9:40:c5:1c:f7:d2:
                    5e:22:5b:0d:e3:ac:c6:d8:1f:1a:81:3f:e8:d1:2c:
                    25:9d:8d:8f:d5:4c:c7:ba:8b:fe:7c:28:f9:13:47:
                    ff:51:9f:dc:ed:83:51:19:2d:73:a0:fd:8d:bb:f4:
                    38:11:5a:9d:c0:35:34:f0:e6:19:47:4e:b1:5a:3f:
                    0c:3e:44:5d:f1:53:8a:41:c3:fa:36:5e:4f:ec:fc:
                    43:b1:14:ba:7f:eb:8b:78:4d:df:cc:61:77:c6:da:
                    ff:76:5d:5a:f6:36:9e:2e:82:f7:81:a6:1e:e4:2a:
                    5e:0e:c8:00:b9:5c:4d:13:1e:79:5c:b6:4d:90:04:
                    3e:76:86:73:03:c6:0a:5b:7c:7f:8e:fd:31:d4:92:
                    44:b8:1a:05:22:0e:50:71:00:85:15:21:b8:7c:59:
                    09:63:51:46:ef:06:5c:5a:b8:08:96:c7:56:4b:72:
                    39:9b:32:c9:44:5c:a9:56:3a:39:05:d2:85:57:8e:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:70:14:DF:3A:9E:1E:B2:19:74:77:95:2E:6A:4B:95:32:CA:6F:05
            X509v3 Authority Key Identifier:
                keyid:2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/C136E3D4491D11F1954C6C159E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:0e:31:51:c4:a9:cc:75:18:ab:e8:92:4a:13:b8:e5:bc:
         5b:76:2c:1c:6c:d2:a0:61:dd:65:42:98:d1:dd:9c:04:25:36:
         f1:d6:20:6e:54:14:09:b9:66:5b:ec:4c:05:f6:df:c2:c9:3c:
         78:a8:c2:a3:14:b0:86:85:5c:2a:a3:42:66:ef:b4:c5:8c:f9:
         2f:cf:6d:c1:18:0a:88:8b:e0:71:5c:5b:39:ba:a3:61:ce:c4:
         b9:2f:96:be:0d:ae:de:5a:1e:2b:20:f6:c1:7d:97:be:eb:0e:
         4b:35:46:9e:c2:34:ab:16:7d:b4:a0:f3:9c:57:b5:be:4d:f5:
         de:a0:a4:5f:6a:3f:90:d2:29:0d:f1:59:5f:6d:ee:e9:a7:55:
         ac:89:15:e5:ed:e1:57:c8:7f:e6:e6:c3:ba:ec:62:93:72:36:
         2b:60:0a:0a:c0:4b:dc:db:4a:47:2c:26:d5:a8:8c:71:20:b4:
         52:7f:35:9c:02:0d:a4:a4:79:3a:b6:28:47:33:86:78:7a:89:
         17:b3:b9:7d:08:64:55:78:1a:62:9d:ba:ee:09:34:85:eb:9b:
         05:e1:05:7b:28:09:4c:e3:6d:d4:62:f8:a9:c4:af:40:48:fb:
         a9:86:64:c6:32:03:f5:be:3b:79:b1:84:79:b1:44:1e:15:66:
         fd:24:ae:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 10:40:27 2026 by rpki-client