Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/A999E39EC36C11EFAF838D35C4F9AE02.roa
File:                     A999E39EC36C11EFAF838D35C4F9AE02.roa (raw, json)
Hash identifier:          mKbtbi7CyvQ7vNnUaQAnEhNHFglwkIH4p11lfHr8khY=
Subject key identifier:   28:F6:4D:7B:B5:C0:17:DE:22:F6:89:C9:81:E0:3D:46:BF:57:90:78
Certificate issuer:       /CN=A913854D/serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864
Certificate serial:       E7
Authority key identifier: D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/A999E39EC36C11EFAF838D35C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:55:43 +0000
ROA not before:           Fri 27 Jun 2025 07:21:11 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140661
IP address blocks:        103.151.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.crl
                          rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913854D, serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864
        Validity
            Not Before: Jun 27 07:21:11 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a596df-e744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:10:4e:09:d7:2e:34:94:1d:8c:fe:06:67:
                    b9:8a:d6:99:5e:eb:0c:24:d6:3a:bb:a2:c1:b3:56:
                    9c:27:dd:e1:fe:43:df:c1:12:49:d2:11:f1:61:37:
                    0e:d9:16:ac:00:b3:b4:c6:dc:f6:09:a8:96:dc:5c:
                    c5:a8:b8:41:a1:bb:c9:49:e6:0a:2b:45:96:f2:bc:
                    8a:47:62:9b:74:19:33:84:21:38:c6:44:a0:e3:09:
                    e6:78:9d:89:51:94:ad:55:2e:75:f0:ed:8d:6d:93:
                    c3:c9:b3:db:f3:79:ac:09:4f:8b:0f:4b:6f:a9:fd:
                    8e:bb:39:e5:a6:6f:83:3a:dc:36:5c:59:29:bb:62:
                    3a:2e:c4:80:10:68:1a:23:67:c3:19:70:58:c3:d3:
                    a0:ba:ea:9b:e4:10:57:71:7f:e0:a3:6f:1c:38:0c:
                    e1:50:97:36:14:72:ee:1d:35:e5:98:b0:c9:87:e1:
                    0d:e6:01:cb:a9:e2:8b:36:19:a9:02:2d:d3:5d:55:
                    20:ab:db:fd:e3:9d:6d:cf:cd:ae:18:e5:e3:2c:13:
                    c1:24:d1:2e:c4:2d:95:23:ad:ea:16:5c:00:bc:7d:
                    a5:b8:bb:60:ba:aa:9d:e0:f5:ec:12:ee:51:9a:17:
                    3f:1a:d2:3d:a0:5b:c4:cb:86:fe:a5:ea:43:e4:97:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F6:4D:7B:B5:C0:17:DE:22:F6:89:C9:81:E0:3D:46:BF:57:90:78
            X509v3 Authority Key Identifier:
                keyid:D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/A999E39EC36C11EFAF838D35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:c4:1f:0e:f2:50:b8:7f:01:69:4c:85:df:00:12:e7:da:8a:
         24:a2:b5:9e:91:56:3c:0f:76:3f:a7:2c:3b:0a:76:3f:b9:0f:
         2d:cf:ba:7d:f9:5b:f3:ed:96:13:47:21:e3:f8:d5:40:3e:61:
         5e:04:1b:05:62:3a:0e:42:2e:10:75:39:49:17:8a:c2:a8:d0:
         23:c8:f4:75:02:a8:28:b8:ea:fd:0e:25:14:da:03:db:c8:95:
         65:02:89:8c:31:32:53:bc:04:2a:27:b5:56:5b:5d:e1:70:74:
         d5:da:e8:cb:0e:a1:b7:52:62:30:be:83:63:63:db:22:73:52:
         45:13:1d:9e:92:78:3e:f4:71:c2:fe:d6:a5:5e:6f:4a:ae:7d:
         07:2f:f3:db:b0:eb:22:05:82:4b:68:c2:a1:53:5b:2d:0a:18:
         d3:ba:a5:62:6a:1b:7d:5b:3b:f0:37:ca:d6:8d:87:f7:c0:5f:
         c1:f9:ee:fc:ed:90:7a:9b:dd:b5:b8:ea:60:df:f5:68:3a:33:
         0f:d5:0b:60:59:a3:31:1a:d1:02:64:8c:d3:21:a8:c3:de:41:
         a8:91:07:c0:4b:ec:45:a5:31:14:8a:15:0d:6d:c1:8f:e5:0d:
         62:99:bc:9b:91:1b:aa:18:0f:82:59:df:ea:0b:48:79:2e:a8:
         1b:21:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:52 2026 by rpki-client