Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/357D722C67D911EEA787145FC4F9AE02.roa
File:                     357D722C67D911EEA787145FC4F9AE02.roa (raw, json)
Hash identifier:          ggJ5ieK6u9Bx4lh1H2SAIUHjGvpUwoHUksb1s6thrAE=
Subject key identifier:   7C:1A:C0:02:57:CD:CA:F0:A3:B6:B0:AF:4D:0B:BB:D5:C6:6F:74:4C
Certificate issuer:       /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial:       0D4F
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/357D722C67D911EEA787145FC4F9AE02.roa
Signing time:             Wed 15 Jul 2026 03:18:28 +0000
ROA not before:           Wed 15 Jul 2026 03:18:28 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137263
IP address blocks:        103.135.240.0/22 maxlen: 22
                          103.135.240.0/23 maxlen: 23
                          103.135.241.0/24 maxlen: 24
                          103.135.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
                          rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3407 (0xd4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
        Validity
            Not Before: Jul 15 03:18:28 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a56fc04-afaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:6c:2f:a3:b9:06:b2:a6:8e:3f:4d:1d:1e:
                    98:fd:df:fe:10:6e:4e:97:4b:fb:d7:37:45:8a:1d:
                    8a:10:f2:86:d2:45:c1:43:11:8f:7a:52:fd:02:92:
                    5a:70:b1:d6:f9:d2:7d:8b:68:ae:17:26:3a:26:7b:
                    e7:ab:d0:c0:4f:97:e7:23:6d:3a:2b:d6:0b:09:6e:
                    8a:28:49:c1:a9:6e:77:75:45:3f:2f:6d:0a:23:9c:
                    3f:b4:a1:c9:11:c5:2a:70:0e:d2:9d:4f:82:b0:45:
                    e8:96:61:f8:be:b5:0c:d4:ef:d4:75:ed:75:6a:4a:
                    f9:c9:3c:f7:a2:9a:6f:5e:8e:95:a1:13:c9:79:99:
                    b9:cf:44:1e:2c:76:41:54:fc:68:59:ba:96:c7:8b:
                    25:0c:98:04:b8:33:98:31:e3:25:aa:6a:4d:4d:a3:
                    4e:b3:c3:d6:24:9f:eb:c2:9b:cb:1a:85:b9:e7:01:
                    6f:35:4a:15:91:48:4c:32:2c:90:b7:9e:4b:97:b8:
                    03:98:c3:a9:63:5a:a1:a6:41:b1:a8:1b:bf:04:89:
                    dc:21:19:30:00:76:6b:d2:52:15:85:1b:75:76:cc:
                    ff:03:25:31:d1:66:19:be:20:3b:0a:0d:93:e7:34:
                    a4:62:fd:d6:ee:5f:eb:83:f3:6b:00:91:94:7c:0e:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1A:C0:02:57:CD:CA:F0:A3:B6:B0:AF:4D:0B:BB:D5:C6:6F:74:4C
            X509v3 Authority Key Identifier:
                keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/357D722C67D911EEA787145FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:d0:69:5f:6b:4e:cd:a1:99:a8:11:07:65:df:95:fd:d9:
         a7:6f:28:e1:20:ac:7b:f1:18:02:4b:41:96:ba:f0:7d:1f:41:
         e3:cd:32:d9:b1:d1:26:5c:21:ce:16:a4:15:74:34:bc:fa:21:
         4f:31:0b:30:fc:f2:1a:d5:e2:e2:6e:9d:90:82:8f:dd:35:5a:
         0f:f5:5f:29:1f:42:c9:ae:18:e1:df:98:56:d6:13:8a:1c:6a:
         55:d6:ad:c0:57:30:31:81:e3:d5:37:90:f8:47:55:98:2c:92:
         60:fb:b9:3f:c7:a7:08:fb:45:d6:97:a4:50:f5:8c:ec:17:39:
         19:4b:3c:1b:cc:ce:5d:db:8d:01:2d:ba:3b:7f:78:3a:8a:e0:
         2e:10:57:a9:62:fe:33:61:82:67:ef:f4:7e:7e:c5:71:a3:53:
         59:ae:63:a8:76:40:9b:19:79:6e:aa:ec:d3:3e:7f:9d:eb:26:
         e2:0a:c9:d2:e8:d4:dc:74:01:73:cc:30:84:2b:4e:d9:83:7f:
         36:4e:e5:ed:b0:f8:fe:f7:91:68:3c:c0:e2:ab:9c:30:7e:f3:
         34:74:04:78:a6:23:1f:06:ab:a5:70:6c:fa:86:46:4f:1b:3f:
         06:c4:91:e7:fa:38:25:f9:56:9d:6f:56:8d:1e:09:59:aa:4a:
         bb:c0:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:13 2026 by rpki-client