Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/8030E8628FD211F0924FE573C4F9AE02.roa
File:                     8030E8628FD211F0924FE573C4F9AE02.roa (raw, json)
Hash identifier:          il/kmW0rv4WkXUzYTcnISQd0Jgpc6E05Nk8GNzFNspg=
Subject key identifier:   57:EB:9B:67:50:D6:0B:A1:4B:7C:71:46:B8:0E:B5:A3:14:70:EC:B8
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       110B
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/8030E8628FD211F0924FE573C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 18:02:30 +0000
ROA not before:           Mon 06 Jul 2026 18:02:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138981
IP address blocks:        103.138.25.0/24 maxlen: 24
                          2404:bec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4363 (0x110b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Jul  6 18:02:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bedb5-db65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:c7:24:6c:e2:88:33:6b:b2:1f:02:68:70:
                    74:0d:ae:a2:08:a6:d1:ee:23:b0:72:3f:4e:0a:66:
                    6d:c0:98:34:63:7d:a2:08:cc:9b:f0:28:78:6a:35:
                    3c:0e:78:f5:ee:49:3c:08:ea:46:23:bd:73:2f:8d:
                    a6:27:c3:7e:06:7e:5d:3e:7e:dd:b9:97:4a:78:0c:
                    02:a7:e2:42:24:88:c1:2c:e7:1b:3e:61:28:2e:7a:
                    b8:9d:bb:db:46:59:02:a9:6c:fc:e0:d5:25:f0:d4:
                    c1:ab:81:40:09:a4:d6:58:a1:53:2e:e4:05:80:2f:
                    04:69:b9:87:90:b2:fc:dc:30:35:84:40:b9:ad:84:
                    31:c5:e7:8d:2f:1a:2b:d0:d0:cf:68:2a:cf:c4:3f:
                    46:49:cc:77:14:4e:c1:74:0f:a1:aa:7f:ea:b8:0d:
                    2f:c3:4d:7f:92:55:3d:17:92:78:20:1f:e9:b9:ee:
                    e7:ff:ad:8d:74:0e:6c:33:32:14:6d:fc:7a:00:97:
                    e3:08:75:09:3f:c0:7f:47:d4:91:8d:3e:23:e6:fb:
                    7c:99:d1:0a:3c:d9:de:42:46:21:e3:0b:8e:73:09:
                    4b:3f:a4:34:c5:cc:f3:b6:b8:37:d6:fa:c8:87:dd:
                    d6:63:b4:a6:e5:0c:b3:47:f6:62:2d:a5:75:33:e5:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EB:9B:67:50:D6:0B:A1:4B:7C:71:46:B8:0E:B5:A3:14:70:EC:B8
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/8030E8628FD211F0924FE573C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.25.0/24
                IPv6:
                  2404:bec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:70:79:71:16:83:d8:cb:9f:c6:90:be:64:0c:8d:84:d3:2a:
         31:76:01:d0:a1:68:57:4e:86:78:03:4f:8a:7f:1c:b4:01:eb:
         36:a9:16:20:07:5d:ba:cb:bf:da:59:3b:a3:f6:22:a3:ad:c3:
         f2:f2:87:83:80:fe:b0:e6:1f:e2:41:ec:41:43:3a:05:5c:81:
         d0:0d:05:4d:18:37:c1:c4:b4:6a:43:77:15:72:77:f6:ac:42:
         56:d3:af:74:86:b9:b6:40:9e:f8:6b:2d:89:b0:56:cf:dd:f0:
         18:27:79:43:bd:94:f1:3c:5b:7c:a4:f6:c7:c6:d5:4b:92:58:
         32:f5:12:22:5c:3d:9f:df:c4:27:fc:9d:5b:78:69:31:08:00:
         ed:93:17:45:0a:27:1e:25:47:a2:4d:8a:68:d4:72:d1:52:a2:
         21:0a:52:ef:22:8b:b0:95:15:de:57:44:62:ba:c7:02:3d:01:
         92:53:41:56:21:8f:4d:74:da:a4:97:cd:26:d0:ef:ea:16:d3:
         33:43:2c:e9:02:82:c6:2a:6c:ee:1a:9f:91:a6:a5:ad:ec:f7:
         1f:7a:c1:bb:f3:f8:de:96:ac:68:eb:d2:4e:bf:4b:b1:65:b3:
         e7:5a:19:ae:e0:d6:f1:50:9b:87:64:15:01:24:8c:18:e2:b4:
         d8:33:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:47 2026 by rpki-client