Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/907B9184973911EDB1E3C460C4F9AE02.roa
File:                     907B9184973911EDB1E3C460C4F9AE02.roa (raw, json)
Hash identifier:          +/WJzifpij/OX1Rp9/kIJWL8qj5quDZq9BQi1XlB3MY=
Subject key identifier:   E8:9A:14:27:D1:79:5A:E9:DB:9C:3B:0A:38:0C:6D:12:51:73:FE:CE
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2747
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/907B9184973911EDB1E3C460C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 18:22:13 +0000
ROA not before:           Tue 30 Jun 2026 18:22:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     65500
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10055 (0x2747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Jun 30 18:22:13 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a440955-e130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:aa:ff:d0:3a:e0:3f:31:a1:55:f7:10:1b:
                    07:32:8b:62:0d:8d:d0:12:ab:07:93:db:30:4e:16:
                    9c:c6:c9:e4:1a:78:89:da:32:82:43:f9:52:2f:80:
                    5a:ed:f9:39:09:e0:3a:f6:a7:53:ee:35:b3:b0:72:
                    01:ce:a2:e2:82:c9:ab:bd:9e:10:31:ae:01:fd:86:
                    77:1d:df:41:c4:6d:88:bc:93:be:72:aa:b2:81:9d:
                    3c:c1:f5:11:a0:5e:e0:de:83:f0:db:c8:dc:d9:a5:
                    84:fb:60:a5:b1:45:9e:7f:1c:36:d5:d7:53:6e:b7:
                    87:a6:09:99:b5:b0:b9:79:8e:76:0f:0e:c6:6a:4b:
                    d5:51:c2:3d:b0:c1:c7:46:14:24:9a:2f:42:43:94:
                    2b:cb:21:86:e1:d4:54:88:49:8e:89:76:7b:9d:8d:
                    fb:f0:1e:c7:44:e5:ec:ad:e0:2a:10:5a:51:be:10:
                    90:1e:19:e4:bd:1c:87:7c:f5:e6:67:6c:97:53:0f:
                    39:57:d5:f5:45:2f:1c:6f:f3:a8:58:d8:67:c4:6b:
                    b9:4a:4f:77:b1:0f:6d:30:00:15:09:17:2a:9c:7a:
                    5c:78:d9:f7:a1:09:61:5b:23:f6:a5:0f:f7:f9:c2:
                    f3:a1:c3:ba:64:df:49:ae:97:c1:28:41:b9:c7:a6:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9A:14:27:D1:79:5A:E9:DB:9C:3B:0A:38:0C:6D:12:51:73:FE:CE
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/907B9184973911EDB1E3C460C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:da:48:67:ed:ac:28:c6:72:eb:76:94:e8:72:e6:1f:de:ae:
         21:61:e0:5d:45:f5:f6:ac:21:1b:25:3f:f1:e9:c5:2d:c6:b7:
         13:62:81:1b:29:b6:30:0a:0c:ef:d9:cd:de:db:d6:f9:33:8f:
         1c:05:f8:bc:f8:da:5f:b0:e9:8c:ce:ae:2b:aa:f2:81:5a:50:
         91:de:fe:6d:98:fd:96:11:aa:81:53:4d:ea:9b:bb:37:e9:4c:
         be:fd:ec:aa:f4:34:e1:01:c9:55:37:84:87:0f:7f:20:39:bb:
         b7:45:4d:0e:83:f6:42:24:46:15:ec:76:0d:50:a1:db:54:99:
         72:b5:bc:72:f6:e1:43:4c:d8:c6:5c:1d:69:cd:f1:8f:05:75:
         0b:cb:a0:1d:78:a8:96:4a:ef:b7:25:3b:89:e9:fe:80:b8:d5:
         43:74:b2:20:5d:a3:de:47:aa:a4:64:6d:65:b3:83:65:ab:3f:
         b7:1f:6a:3d:2e:94:ca:53:97:26:00:28:db:18:2c:86:f5:6f:
         76:1f:1d:9c:4c:1a:a2:1b:bd:14:ee:e3:61:64:21:f4:15:6c:
         c2:fa:37:00:54:db:6a:22:e0:95:8e:b5:5a:b1:08:26:f6:c9:
         31:97:d0:b6:87:79:29:12:39:3c:35:b9:a8:16:0d:a1:32:ec:
         ed:21:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:26 2026 by rpki-client