Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/44059B50B10F11E5A010921EC4F9AE02.roa
File:                     44059B50B10F11E5A010921EC4F9AE02.roa (raw, json)
Hash identifier:          uzYIIDH31TvwzWkSil5gSYUWeo40ZQiZC+P2iShFe5U=
Subject key identifier:   2A:38:94:04:E8:1C:1E:9F:8C:22:AA:10:12:0E:4F:3C:A1:9E:97:D2
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       247B
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/44059B50B10F11E5A010921EC4F9AE02.roa
Signing time:             Sun 16 Aug 2026 16:28:12 +0000
ROA not before:           Sun 16 Aug 2026 16:28:12 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     132379
IP address blocks:        103.15.168.0/24 maxlen: 24
                          103.15.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9339 (0x247b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Aug 16 16:28:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a81e51b-d11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:d2:58:9a:aa:f7:03:9a:de:23:94:74:19:
                    43:a9:3d:07:d7:da:f8:18:ac:49:dc:de:0c:2a:67:
                    30:c4:c6:b1:b2:3f:bf:eb:9a:72:d8:9f:b5:94:67:
                    bf:d6:19:98:5c:e7:00:0e:8b:77:f7:f4:83:d6:82:
                    6e:65:25:70:65:85:2f:9f:5e:32:5d:a6:db:9e:e4:
                    64:54:b7:a2:c3:01:d0:71:c2:48:14:86:e8:ac:e9:
                    1d:f4:dd:5a:4b:ae:dd:11:51:17:df:40:f4:e7:60:
                    b9:12:c6:c9:9b:b6:ef:fa:3b:ac:da:21:10:49:aa:
                    61:fd:45:79:2b:bc:89:54:36:52:67:65:cc:f0:1e:
                    5a:f0:78:db:53:10:55:ce:5c:a8:ba:8b:fd:af:a0:
                    58:93:f0:48:53:2c:15:33:f6:d5:04:3f:f5:ad:3e:
                    61:a9:75:62:21:a0:0c:83:cd:20:42:23:87:55:9f:
                    8d:82:cd:ba:63:fb:0a:05:ca:f6:be:c6:a4:0f:91:
                    6e:92:70:c7:45:05:af:12:90:d5:f1:3c:6e:00:85:
                    9f:11:72:67:9b:27:de:91:d0:79:3d:fa:42:01:e2:
                    f6:85:b6:bb:d3:c9:c8:d0:29:22:4b:d2:3e:d4:4d:
                    58:0b:5b:6a:43:28:b7:67:ad:2f:c6:48:ec:bf:43:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:38:94:04:E8:1C:1E:9F:8C:22:AA:10:12:0E:4F:3C:A1:9E:97:D2
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/44059B50B10F11E5A010921EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:27:37:35:b7:ea:da:39:4f:2d:01:d8:73:77:35:88:0e:cf:
         2c:9a:50:8c:42:9f:14:7c:99:88:12:eb:50:dc:28:dc:6e:67:
         6a:48:82:ab:ce:f8:46:51:14:2f:d3:40:68:b9:e8:f3:eb:62:
         16:df:c4:d4:29:fa:e7:ab:20:d6:4b:0a:e9:53:6c:51:eb:e7:
         04:ee:e2:51:c0:8a:4b:2b:4c:fb:0a:c4:b7:69:16:77:26:db:
         6a:0f:86:0c:8d:58:bd:24:e7:cc:cc:9e:3b:f2:ca:e3:c2:18:
         b6:38:59:b9:7a:2f:01:4d:0b:47:11:45:07:4a:78:50:e3:34:
         89:e7:94:f6:6d:96:96:ad:e7:76:20:98:25:4c:20:17:2d:a1:
         9b:8a:7f:25:e6:a2:00:7d:83:32:6e:e6:98:f5:3a:12:97:c6:
         24:b9:1f:8f:f2:a2:8c:37:ea:00:02:26:9e:31:19:21:20:08:
         2b:c3:d3:92:68:71:95:0f:21:12:c1:48:c7:a2:a8:d6:67:0d:
         f4:ab:79:dd:e8:23:98:cf:0c:0f:db:23:4e:bd:3e:24:fb:81:
         ef:2e:b1:33:68:22:af:74:86:2e:91:b4:6c:ef:b9:5c:07:41:
         f9:69:f0:8f:40:69:8e:93:14:e5:c9:79:41:e9:f5:d4:e4:89:
         bf:50:7c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:43:03 2026 by rpki-client