Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/243B94A23E7A11EBBFFAC96BC4F9AE02.roa
File:                     243B94A23E7A11EBBFFAC96BC4F9AE02.roa (raw, json)
Hash identifier:          L/xVHObBHsaIQPSdy9klB+1WP6FIbwAGl9r7G8wB2mw=
Subject key identifier:   EF:31:8D:7E:67:2B:DA:F7:53:9B:38:B2:3C:B8:56:3B:34:3A:14:7D
Certificate issuer:       /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial:       081A
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/243B94A23E7A11EBBFFAC96BC4F9AE02.roa
Signing time:             Sat 18 Jul 2026 22:22:54 +0000
ROA not before:           Sat 18 Jul 2026 22:22:54 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.140.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
                          rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A138, serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
        Validity
            Not Before: Jul 18 22:22:54 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5bfcbd-fedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:10:b9:b6:c7:05:4b:bc:2b:7f:26:56:74:
                    aa:a4:fb:10:5a:43:72:2d:c7:29:5c:58:7e:1e:5d:
                    6e:2e:76:1f:42:7f:49:da:72:5c:69:a9:df:9b:7a:
                    0f:40:f0:b3:bd:a9:ba:22:1e:00:cd:93:f7:34:96:
                    a7:e2:34:33:94:19:3c:27:f9:8d:fc:6a:60:ed:7a:
                    9d:ed:b4:37:a2:26:f0:60:18:69:a6:74:5c:50:86:
                    be:d0:5c:41:ae:06:b7:9f:14:a0:2c:5f:46:0f:cd:
                    39:da:f2:8b:5e:d1:b8:e9:62:70:79:a6:0b:cc:51:
                    0f:ab:ed:cd:82:5a:e1:0c:c7:26:37:6d:55:eb:ca:
                    48:4c:57:b8:f4:d9:e5:11:6c:93:4f:60:f5:d7:d9:
                    94:ec:79:44:1a:e4:9f:61:ba:9d:a7:ab:b4:c2:d6:
                    2e:8c:cf:da:e0:ec:b3:19:98:88:d7:8e:a8:6f:e8:
                    b2:cd:4c:2e:21:f4:78:f7:5f:b3:83:7d:f6:f7:98:
                    d9:11:66:9e:7f:4d:df:13:55:bc:66:26:51:ae:f3:
                    9c:b1:d9:27:5b:e9:6a:71:bb:3a:93:3c:f7:6d:d7:
                    2d:7d:8e:ef:2e:8c:de:a6:46:77:a0:71:91:a9:63:
                    db:92:af:f2:b1:64:08:c3:c8:56:b5:63:12:06:53:
                    3d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:31:8D:7E:67:2B:DA:F7:53:9B:38:B2:3C:B8:56:3B:34:3A:14:7D
            X509v3 Authority Key Identifier:
                keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/243B94A23E7A11EBBFFAC96BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:34:f7:7b:a5:be:5a:9b:02:6c:f3:cf:93:e5:d9:3d:fd:9f:
         a8:36:6a:4a:a4:7e:97:d3:25:c6:5e:2d:8a:91:79:d7:4f:4a:
         30:d1:26:13:c8:3c:64:c4:8f:85:56:32:8b:ce:c7:47:4d:f7:
         a3:b5:e0:5b:fa:7b:f8:5f:fc:75:6c:1a:84:3e:71:22:f6:6d:
         0b:7c:9c:5d:25:09:9a:df:2b:e2:43:4c:e7:0f:46:4c:8f:1e:
         fa:74:9e:f7:62:88:f3:90:53:95:be:93:c0:bd:33:9c:c9:3c:
         60:98:5f:03:04:d2:28:3d:5d:68:26:05:09:59:14:4b:c1:56:
         e8:d2:8e:50:2e:74:bc:a0:31:3d:45:20:d7:67:fe:22:d5:b8:
         5b:3f:f6:c6:56:58:a5:7e:52:04:69:58:40:bb:5a:4b:fb:e1:
         98:36:f5:cf:ac:3c:a0:ad:66:52:bd:01:0c:93:08:2c:a2:d1:
         b6:cf:f2:8b:11:b9:95:20:3f:ac:17:07:a6:a2:91:6e:91:4b:
         e1:8f:2f:0f:37:95:aa:7a:fa:05:21:f6:de:3a:42:01:0d:7c:
         b4:d3:c9:54:f9:de:5e:58:54:5c:0e:de:db:a6:7a:be:0f:b2:
         21:8c:fa:a4:a7:58:16:9b:d8:67:8d:9c:2e:bb:c1:2a:39:75:
         88:ca:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:38 2026 by rpki-client