Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
File:                     7A532A308E1D11EE9CC5535CC4F9AE02.roa (raw, json)
Hash identifier:          jGzTfB/d16mmgD7vo2/7hI4MWsapV53T1mDEoyw9vZ0=
Subject key identifier:   71:A3:A7:F4:82:04:E2:1F:3C:7B:11:98:91:FF:14:B8:07:23:28:45
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       0654
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
Signing time:             Mon 26 Oct 2026 22:43:22 +0000
ROA not before:           Mon 26 Oct 2026 22:43:22 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     24499
IP address blocks:        103.123.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
                          rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Oct 26 22:43:22 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6adfd78a-cc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:44:45:90:b4:eb:e2:75:a2:29:48:91:60:
                    e3:dd:ea:fd:d1:b6:d0:76:39:c2:8e:69:92:0d:83:
                    e3:49:c1:16:56:e3:12:dd:eb:c1:7e:dd:18:67:d2:
                    e6:c6:2f:44:76:cd:78:ba:45:6a:5d:5c:64:b5:b3:
                    9c:26:56:f0:fa:19:8d:bc:32:2b:c0:a7:79:a0:43:
                    d9:9a:75:07:72:a6:d5:5b:da:b0:29:a3:23:8b:89:
                    11:99:1f:27:68:f4:96:30:fe:ae:5b:04:70:04:61:
                    32:4d:4e:c6:7a:c0:72:35:ae:ef:a7:66:88:02:e9:
                    f1:01:12:79:39:28:4c:7d:cd:62:03:0a:aa:b5:c0:
                    60:01:9e:67:92:67:96:6f:02:72:f2:00:08:0e:3f:
                    b3:a7:ba:c0:de:b6:45:e9:b0:81:7d:20:f5:95:88:
                    2d:d2:9c:35:a1:77:c0:e2:f0:9a:7c:39:f4:29:3b:
                    1c:df:89:55:1b:a0:64:68:48:33:9a:5f:18:08:51:
                    82:a7:bd:dd:24:bd:b8:df:77:14:1b:c1:18:0c:d1:
                    2a:4a:cc:90:76:79:9a:3d:f2:d6:59:74:0e:2c:9d:
                    8b:f7:e4:3d:a9:7d:51:c8:86:a5:12:a8:eb:a7:f7:
                    7d:ef:44:8c:ee:cd:67:a6:de:51:18:1a:4e:07:bb:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A3:A7:F4:82:04:E2:1F:3C:7B:11:98:91:FF:14:B8:07:23:28:45
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:8e:a3:dc:a4:d6:74:ea:82:0d:c0:d8:1c:2d:21:82:6a:
         ce:15:ea:d0:aa:16:0e:46:9b:a5:76:3b:c0:5f:9a:d2:52:ae:
         e7:83:cc:3e:8d:e3:a0:0c:e5:b9:81:6f:33:5f:51:6a:bd:1a:
         f6:57:02:a0:0b:84:67:22:43:d7:0d:13:a0:a8:49:e1:9c:12:
         c8:4f:49:1e:d3:10:a5:1b:f9:fb:c2:7c:2f:8d:4b:b4:93:2c:
         02:1a:f7:20:01:4d:d1:7b:17:e0:9b:30:84:82:fe:a0:89:6f:
         1a:cf:1d:d0:76:85:db:e4:95:0a:0a:81:ea:6b:90:97:fb:b6:
         48:1c:da:81:67:7e:5e:e5:92:fb:73:23:56:0c:b9:b9:bd:a4:
         02:be:e2:00:92:7b:e1:f5:60:c9:db:63:6d:ed:a1:91:2e:47:
         a4:c8:30:ba:3e:d4:ab:5e:f4:9b:0d:04:1f:c2:0b:f3:f1:af:
         17:71:01:e3:bc:95:41:54:76:97:08:cc:61:f2:de:de:c2:33:
         4b:7c:f5:ec:5d:d4:e7:4f:4e:1c:12:9e:7b:e9:8e:cf:87:18:
         84:43:75:37:3a:e9:17:a4:a9:b6:df:64:79:e9:23:5d:24:b8:
         11:08:f4:10:32:38:b3:75:91:24:ca:05:1c:c4:98:fd:32:30:
         d0:a6:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:35:18 2026 by rpki-client