Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/730BD0EC384011EAADE7134BC4F9AE02.roa
File:                     730BD0EC384011EAADE7134BC4F9AE02.roa (raw, json)
Hash identifier:          okr4XbUoy+ROTsU4q56uGhTJoC1U3gm/b9HFaS4EkeQ=
Subject key identifier:   DF:C7:1B:1D:7B:F5:E5:15:C6:10:A4:4F:ED:DC:DC:99:73:53:ED:1A
Certificate issuer:       /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
Certificate serial:       0BD5
Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/730BD0EC384011EAADE7134BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:43:40 +0000
ROA not before:           Sat 26 Apr 2025 19:28:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137510
IP address blocks:        103.111.72.0/22 maxlen: 22
                          103.111.72.0/23 maxlen: 23
                          103.111.72.0/24 maxlen: 24
                          103.111.73.0/24 maxlen: 24
                          103.111.74.0/24 maxlen: 24
                          103.111.75.0/24 maxlen: 24
                          2402:97c0::/32 maxlen: 32
                          2402:97c0:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl
                          rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3029 (0xbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
        Validity
            Not Before: Apr 26 19:28:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4266c-a6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:4a:9b:7d:f3:0f:c1:52:2c:e7:08:76:dd:
                    3b:8d:0d:0a:9a:f6:e7:e7:d0:6a:b7:3f:6f:37:dc:
                    60:70:c0:27:c8:b3:88:5b:0e:31:6d:4b:f4:c9:97:
                    d0:cd:a0:60:2f:14:55:ea:bf:2b:fe:f2:8d:1e:90:
                    6c:2c:a5:d6:14:62:71:3f:ad:26:f9:99:a6:f8:7d:
                    ba:38:46:d8:c3:a5:16:eb:9a:60:f0:8c:3f:8a:76:
                    13:60:6c:d6:cf:9e:cd:1a:55:ac:23:6a:eb:4b:45:
                    90:3f:d1:cc:a7:ee:6a:1e:77:a9:3b:55:e9:70:b6:
                    10:2b:1b:c9:e8:e6:1d:dc:42:40:d2:c9:95:67:6c:
                    73:3b:3a:96:13:75:25:3b:61:62:e7:47:82:3f:d9:
                    49:cd:e2:61:a8:b4:b6:a5:55:41:2e:75:f3:41:cd:
                    4e:71:2b:b1:d0:9c:2a:13:fd:92:1a:07:cd:eb:3f:
                    70:cb:5f:d2:4b:88:89:c4:d7:b6:f0:b3:2d:99:0c:
                    91:05:e6:71:54:05:82:27:58:72:e3:4b:2e:a0:32:
                    09:12:3f:0f:a0:46:5e:62:da:ac:4b:60:69:f3:e9:
                    58:9b:af:f4:7b:dc:df:f3:b0:de:ee:1e:c9:af:74:
                    8d:e2:f2:14:30:bc:36:91:8c:a8:8f:58:97:47:cb:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C7:1B:1D:7B:F5:E5:15:C6:10:A4:4F:ED:DC:DC:99:73:53:ED:1A
            X509v3 Authority Key Identifier:
                keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/730BD0EC384011EAADE7134BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.72.0/22
                IPv6:
                  2402:97c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:06:27:6e:fe:a4:b7:ef:45:2b:2a:19:66:2b:0e:c3:f3:d0:
         5d:0d:83:50:5a:b4:e4:7a:57:8f:ba:52:a4:4e:b8:2e:b2:89:
         88:af:bc:1e:33:b4:f3:df:87:7f:fc:eb:7c:6f:3c:16:f6:a5:
         2c:da:21:18:eb:5e:41:c1:18:c6:9c:55:7d:63:07:3d:ae:26:
         d2:83:c2:00:27:a6:cf:76:b8:a9:83:e9:d6:f0:da:b6:e8:fd:
         ed:44:b2:e2:0e:35:5b:e6:b5:bc:39:38:f3:e9:e4:f0:55:66:
         b6:42:86:cd:73:75:91:c0:a5:2e:55:88:77:82:03:55:b1:a8:
         83:8a:6b:57:e9:8e:d9:f9:ee:99:c8:c4:c5:7d:09:53:7a:32:
         cc:d7:a4:75:28:b4:a0:1d:4a:ab:40:24:ad:f3:4c:b8:ba:e6:
         7b:5b:11:37:14:51:b6:6f:9e:02:46:c1:47:fa:f4:cf:9a:b6:
         e3:49:35:f7:3a:4c:e2:a8:56:92:ff:c0:9d:0e:d8:8a:10:88:
         3f:cf:1b:76:4f:10:b2:d9:6c:83:4a:73:75:ba:0e:c7:aa:c2:
         9d:d5:27:2b:2a:b8:12:b0:ee:9c:9a:8b:da:5f:53:b5:ff:99:
         15:b0:4e:5a:9a:5e:75:7a:c3:30:69:14:40:e9:63:3e:86:0f:
         4b:c4:11:e9
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3
RTcxOUY4OTAwHhcNMjUwNDI2MTkyODU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjY2Yy1hNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogVKm33zD8FSLOcIdt07jQ0Kmvbn59Bqtz9vN9xgcMAnyLOIWw4xbUv0yZfQ
zaBgLxRV6r8r/vKNHpBsLKXWFGJxP60m+Zmm+H26OEbYw6UW65pg8Iw/inYTYGzW
z57NGlWsI2rrS0WQP9HMp+5qHnepO1XpcLYQKxvJ6OYd3EJA0smVZ2xzOzqWE3Ul
O2Fi50eCP9lJzeJhqLS2pVVBLnXzQc1OcSux0JwqE/2SGgfN6z9wy1/SS4iJxNe2
8LMtmQyRBeZxVAWCJ1hy40suoDIJEj8PoEZeYtqsS2Bp8+lYm6/0e9zf87De7h7J
r3SN4vIUMLw2kYyoj1iXR8twMwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFN/HGx17
9eUVxhCkT+3c3JlzU+0aMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4
M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUZBOTkvMDYwMjNDNzYzODNGMTFFQUFFRTg5NDQ1QzRGOUFFMDIvNzMwQkQwRUMz
ODQwMTFFQUFERTcxMzRCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ29IMA0EAgACMAcDBQAkApfAMA0GCSqGSIb3DQEBCwUAA4IBAQCY
Bidu/qS370UrKhlmKw7D89BdDYNQWrTkelePulKkTrgusomIr7weM7Tz34d//Ot8
bzwW9qUs2iEY615BwRjGnFV9Ywc9ribSg8IAJ6bPdripg+nW8Nq26P3tRLLiDjVb
5rW8OTjz6eTwVWa2QobNc3WRwKUuVYh3ggNVsaiDimtX6Y7Z+e6ZyMTFfQlTejLM
16R1KLSgHUqrQCSt80y4uuZ7WxE3FFG2b54CRsFH+vTPmrbjSTX3OkziqFaS/8Cd
DtiKEIg/zxt2TxCy2WyDSnN1ug7HqsKd1ScrKrgSsO6cmovaX1O1/5kVsE5aml51
esMwaRRA6WM+hg9LxBHp
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:32 2026 by rpki-client