Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/348BAEE41C2D11EEB362491FC4F9AE02.roa
File:                     348BAEE41C2D11EEB362491FC4F9AE02.roa (raw, json)
Hash identifier:          +rjncpi6r8gzrI2dwiyOCyHrVcg7Wh5JTPPsoLstCjo=
Subject key identifier:   4D:BB:0A:4A:46:B7:CD:4B:EB:5B:FA:1E:A8:34:73:88:D9:85:00:CF
Certificate issuer:       /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial:       0248
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/348BAEE41C2D11EEB362491FC4F9AE02.roa
Signing time:             Thu 23 Jul 2026 04:29:31 +0000
ROA not before:           Thu 23 Jul 2026 04:29:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151472
IP address blocks:        103.230.40.0/23 maxlen: 24
                          2401:1060::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
                          rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
        Validity
            Not Before: Jul 23 04:29:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6198ab-85c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:63:9c:b5:1c:55:90:22:9b:1b:a3:95:cf:
                    3c:05:50:80:08:92:2c:63:85:c7:97:b4:25:d6:29:
                    3b:ed:48:31:fb:12:42:bb:c4:78:58:a3:ee:3c:ed:
                    e7:72:31:c9:3b:8f:84:92:0a:ff:0f:2f:b5:13:43:
                    98:28:84:76:81:79:34:80:40:c7:71:d3:e6:1b:a8:
                    03:21:6b:b4:5c:a4:a5:0f:eb:1f:94:33:e1:5e:07:
                    3c:77:eb:fa:6d:00:7b:b9:80:3c:c5:fd:c2:04:4c:
                    01:df:d3:ea:f4:94:60:5b:e5:55:15:85:07:74:6b:
                    f9:ee:51:cc:b9:ab:3b:df:a3:c2:ba:68:53:41:37:
                    d0:94:90:82:81:c1:cb:d5:e0:93:ef:d1:ca:31:a0:
                    cf:01:8b:ff:79:19:32:ad:4a:68:b4:59:17:5e:d0:
                    20:a6:ab:fb:f0:02:f2:5a:66:69:23:a9:64:8e:1d:
                    b2:6a:4c:e8:2c:54:41:ef:35:7b:dd:7f:30:4d:6c:
                    6b:0a:31:18:78:23:6c:fd:58:e3:92:cc:66:0c:5f:
                    bf:76:21:16:cb:f3:eb:03:1b:f7:f6:cc:2e:2b:af:
                    a6:98:2e:f2:02:7b:f5:13:0a:90:d3:f8:e8:06:bb:
                    fc:33:76:f6:15:f1:58:29:66:ff:3e:0a:a5:36:71:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BB:0A:4A:46:B7:CD:4B:EB:5B:FA:1E:A8:34:73:88:D9:85:00:CF
            X509v3 Authority Key Identifier:
                keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/348BAEE41C2D11EEB362491FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.40.0/23
                IPv6:
                  2401:1060::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:55:b9:0d:84:de:1e:92:49:7b:94:c3:52:f5:bf:46:66:12:
         a3:84:8f:63:96:e5:3f:2e:b5:cb:ab:70:df:78:14:f4:d2:a9:
         30:82:6f:84:82:1b:b9:ea:01:54:5c:64:69:93:d5:79:66:6e:
         97:37:fd:54:ba:a7:7f:a0:21:0a:6a:b4:9e:ca:79:4c:a2:63:
         a1:a2:94:74:26:cd:44:ac:02:53:80:20:f5:f3:93:52:fe:dd:
         b0:a5:38:5f:0f:3e:ae:25:1e:16:85:22:e5:f2:6c:11:87:5a:
         6f:59:d5:37:a7:28:42:09:bc:b7:8c:90:07:b2:b9:0f:f4:05:
         be:8b:76:9e:aa:f7:aa:3f:fd:0e:e0:0e:dd:09:71:75:b4:a6:
         d1:67:c5:15:c3:bf:57:2c:94:91:f0:f2:79:78:3c:8a:2c:59:
         b7:08:b9:07:07:5c:00:9c:96:a3:18:2e:f0:b4:6e:cc:51:1e:
         d7:84:e1:92:23:f4:ac:da:0a:92:65:19:0c:a2:a2:e6:79:ee:
         64:9e:56:ab:ec:72:52:dd:d8:8a:ed:ac:9a:cb:54:a8:7a:6d:
         7d:db:af:89:bc:39:20:2d:8f:f8:76:1a:37:20:15:a8:13:98:
         40:6d:bd:87:7c:da:41:e8:b0:1b:9a:1a:e9:81:d3:f4:f0:53:
         ce:6c:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:50 2026 by rpki-client