Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F3DC093A443C11F1BCF5870FC6833773.roa
File:                     F3DC093A443C11F1BCF5870FC6833773.roa (raw, json)
Hash identifier:          Egd3rHh9bcMJNotFUkSlDTpKpbKcmi8PgyWb7R+UetM=
Subject key identifier:   39:E0:A0:19:DF:AA:B0:CC:CF:5B:88:55:0A:7F:C8:BB:F7:96:88:B1
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35DF
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F3DC093A443C11F1BCF5870FC6833773.roa
Signing time:             Thu 30 Apr 2026 02:33:21 +0000
ROA not before:           Thu 30 Apr 2026 02:33:21 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     399461
IP address blocks:        122.8.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13791 (0x35df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Apr 30 02:33:21 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69f2bf70-4481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f3:34:b9:d4:a3:bd:e0:fe:9e:dc:e9:3d:f2:
                    a0:7c:73:58:96:22:2b:af:fb:39:e7:a5:26:c2:c7:
                    fa:27:69:f5:b4:be:d3:9f:eb:1a:4e:41:d6:74:69:
                    8c:43:df:6c:97:c9:5f:46:d5:9d:8e:03:5f:5e:5c:
                    c8:86:6e:81:f2:92:aa:d1:72:67:ea:fa:e2:58:37:
                    ca:8e:d6:5e:40:58:ad:dd:fe:5f:2d:e6:8c:34:52:
                    ad:d3:56:36:7c:ed:04:6b:e6:de:a2:70:95:84:0b:
                    a0:25:7e:09:1d:e7:46:30:84:50:65:7a:d4:b1:35:
                    a8:b5:3f:a0:11:ca:45:91:82:4a:d6:5e:89:63:25:
                    77:01:8a:65:c9:88:07:54:5d:4a:c3:53:b2:4f:9a:
                    aa:58:b3:41:1b:b2:5e:ad:e9:df:84:61:62:7d:98:
                    80:7a:17:0c:9b:a0:25:e7:4a:0b:8b:e5:27:2d:b5:
                    fc:a9:b7:01:55:8a:cb:f0:82:be:16:6a:2c:b9:ae:
                    32:60:ea:9a:9d:05:00:f6:8e:fb:fe:c2:54:6b:e2:
                    64:4d:0d:48:35:18:27:66:8c:44:27:64:83:a7:54:
                    04:46:0c:76:99:bc:19:ce:9e:a7:06:58:e2:75:c7:
                    23:93:f6:c7:f4:25:d1:9f:fd:aa:02:12:54:e1:8d:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E0:A0:19:DF:AA:B0:CC:CF:5B:88:55:0A:7F:C8:BB:F7:96:88:B1
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F3DC093A443C11F1BCF5870FC6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:32:4f:3a:6b:7c:b9:74:11:69:cb:fe:5e:2c:26:28:e8:f1:
         ab:65:13:d4:2f:e3:dc:71:11:ae:06:20:30:37:e5:4d:85:e9:
         af:a0:22:15:fc:f6:4f:74:b0:3e:83:0a:e3:f1:82:09:d4:74:
         cf:f0:34:ee:9b:57:f0:0f:26:2f:dd:4c:ab:1b:b1:6f:7d:d5:
         0a:0b:48:15:c4:91:de:51:97:ac:6e:56:e6:91:55:2b:94:29:
         25:11:b2:08:68:f6:07:1d:fb:54:75:61:3e:33:c4:27:44:66:
         ea:1b:2c:16:5a:7e:a3:eb:6c:30:6e:cb:4a:fe:cb:61:1a:ab:
         cf:05:b6:57:66:f7:90:22:88:52:67:11:29:6a:3a:4e:e7:69:
         59:6e:f5:3a:5e:30:1b:60:42:51:f8:91:3a:68:9d:53:c2:5e:
         aa:66:78:12:16:d7:8e:00:52:ac:78:d2:8f:2a:09:74:4c:9f:
         33:81:be:d7:d1:a4:0f:3b:db:3b:09:27:b3:92:9d:ac:ba:67:
         d2:ae:1a:14:fd:a7:4e:3b:88:74:1f:cb:e9:d2:b8:56:86:62:
         74:59:63:de:72:9b:21:fe:d9:26:0a:fd:b4:63:fe:ef:88:9a:
         e3:44:80:29:18:1a:74:56:19:5e:65:fb:98:2c:e1:b5:bc:26:
         17:fd:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:40 2026 by rpki-client