Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/1B299892726F11EEB1217365C4F9AE02.roa
File:                     1B299892726F11EEB1217365C4F9AE02.roa (raw, json)
Hash identifier:          HLST1p2Y6kJdvf5EsBXPMDmNGIMfeuDnuHY6Q9pEH8E=
Subject key identifier:   03:62:4B:A4:75:0E:60:F2:28:BE:9F:5A:15:4C:8F:FB:49:1E:92:1A
Certificate issuer:       /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Certificate serial:       01C0
Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/1B299892726F11EEB1217365C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:24:07 +0000
ROA not before:           Thu 23 Oct 2025 05:52:02 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132890
IP address blocks:        103.130.12.0/22 maxlen: 22
                          103.130.12.0/24 maxlen: 24
                          103.130.13.0/24 maxlen: 24
                          103.130.14.0/24 maxlen: 24
                          103.130.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl
                          rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
        Validity
            Not Before: Oct 23 05:52:02 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a413c7-a7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:30:4f:b8:17:a1:8e:20:06:26:80:05:ef:
                    98:88:ea:e1:3b:ac:96:ea:29:fe:26:92:37:27:4b:
                    05:a2:e5:fd:65:55:a2:8f:78:5c:2c:43:da:67:aa:
                    6b:ae:01:87:d1:57:35:b4:52:46:bb:f0:7a:d6:fd:
                    ea:ef:80:9f:02:84:8a:67:69:ba:8a:be:0b:26:f2:
                    23:18:d2:c8:77:6c:6e:d5:14:c5:88:0f:1c:bf:8f:
                    b1:ca:a1:7f:d4:30:90:bc:db:07:40:6a:7d:8a:3a:
                    22:fc:bf:01:6f:f0:94:88:a0:70:73:30:de:18:27:
                    96:a0:68:ed:58:d9:c6:56:00:3c:8c:e1:7f:50:c4:
                    77:08:ff:72:2b:b9:ff:c2:33:73:2f:fd:b1:90:74:
                    d2:83:9b:46:22:ec:19:ad:c4:91:67:5a:b1:88:f1:
                    68:b8:7a:24:be:82:ce:88:26:f8:5f:d8:d1:55:01:
                    e6:08:ef:57:3a:fe:3b:a2:0c:7c:45:9f:1e:a6:82:
                    39:69:fc:bd:46:e5:87:1b:71:99:41:8a:52:f9:cc:
                    63:d6:96:82:21:4f:93:e8:ac:43:0e:2a:24:e8:de:
                    f5:07:9f:31:58:d1:ad:77:62:06:d7:27:81:d1:ba:
                    6b:89:7e:95:11:43:25:9c:77:65:e5:9e:ea:8f:35:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:62:4B:A4:75:0E:60:F2:28:BE:9F:5A:15:4C:8F:FB:49:1E:92:1A
            X509v3 Authority Key Identifier:
                keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/1B299892726F11EEB1217365C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:25:06:8d:6d:7b:58:6f:c6:61:7c:bd:f5:20:64:0a:ca:c4:
         a2:8d:4b:55:f1:b3:78:5e:c0:ba:22:02:8a:fb:e6:c5:83:da:
         36:86:2d:0b:08:ae:28:c0:11:8b:7c:f3:b0:8a:ce:66:60:2d:
         3c:73:66:0b:6e:28:6b:5f:23:64:95:1d:7e:65:cb:d5:88:fd:
         24:b3:5f:40:6a:8b:ff:cd:89:5a:98:0b:e1:45:29:9c:2d:02:
         f2:aa:d2:db:28:cd:f7:d5:f7:c7:01:78:ec:74:11:10:fa:66:
         cd:0f:da:c9:b8:3a:a2:fa:dd:9d:ae:a1:91:f3:86:e4:b5:aa:
         fc:56:96:13:aa:c7:a4:7a:dd:1a:a2:af:29:3a:6a:89:95:1a:
         c7:82:23:fb:0d:81:a5:fa:a1:00:f0:59:b7:d8:91:a7:dd:90:
         88:90:cc:71:00:90:80:f0:98:5d:a2:44:fb:4a:2a:5f:0f:2a:
         a7:c5:bf:ee:8f:f5:77:68:91:5f:a5:ac:41:5e:e8:09:33:1f:
         ff:bf:b1:bd:53:3b:0f:59:8d:bb:51:7c:05:5f:03:5e:11:53:
         b6:9c:91:cf:95:21:e3:b9:e0:1c:3f:4a:6c:52:39:f4:88:09:
         e7:03:6b:78:bd:6f:fa:b1:b2:9b:cc:e7:38:2e:44:d9:32:07:
         d1:ce:67:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:01 2026 by rpki-client