Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3DF6459A772511EEA2E37420C4F9AE02.roa
File:                     3DF6459A772511EEA2E37420C4F9AE02.roa (raw, json)
Hash identifier:          bdS7OvbOuaz6iTgPtqEV9vUYbciEKGiVTIJ8MXVQT+k=
Subject key identifier:   78:31:36:7F:A0:D7:A6:35:21:D4:38:CF:E7:23:A1:D4:2E:76:27:CC
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       01EA
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3DF6459A772511EEA2E37420C4F9AE02.roa
Signing time:             Mon 27 Apr 2026 04:16:19 +0000
ROA not before:           Mon 27 Apr 2026 04:16:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151049
IP address blocks:        103.121.64.0/23 maxlen: 23
                          103.121.64.0/24 maxlen: 24
                          103.121.65.0/24 maxlen: 24
                          2400:efa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Apr 27 04:16:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69eee313-86b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:93:60:c5:b4:1a:a0:ef:f7:3a:d0:9c:75:
                    51:a8:ff:a7:1b:01:a4:c5:e6:d3:e3:47:5c:f2:ec:
                    76:4d:72:f0:c1:07:13:e6:b1:a4:3e:0e:e9:d2:86:
                    f9:dd:7c:02:80:39:e8:9f:27:19:91:e5:e6:f4:f4:
                    09:a0:07:56:45:16:68:04:ee:11:a1:2f:fa:b3:f7:
                    37:78:c4:e0:d0:46:ca:e1:35:0d:cd:b9:83:91:98:
                    2a:cc:27:21:d5:89:d1:39:65:c0:d5:a4:85:b2:00:
                    70:68:93:7c:32:8b:58:d6:b7:a2:d7:a2:32:22:da:
                    51:9a:08:97:f0:3b:8f:68:c2:28:d7:96:ae:f5:42:
                    37:85:06:bd:c5:4f:45:a7:7e:d4:a6:83:2d:44:21:
                    67:8a:1c:e9:1a:f7:11:a3:98:64:c2:ad:6c:b3:7d:
                    24:91:9c:80:09:52:24:ef:4a:9e:a2:bd:bb:2e:a2:
                    7d:53:58:41:2f:7a:45:5a:91:89:1b:74:f4:66:e2:
                    73:17:cd:6c:dc:4e:59:ee:fd:40:70:6f:ef:cc:90:
                    8c:a7:98:94:db:3d:27:34:4e:0e:1a:9a:59:73:41:
                    cc:92:bf:4e:b2:43:78:cc:1d:38:c4:c2:65:3d:89:
                    8e:b4:38:d6:b2:d6:c3:0c:fa:f9:ca:4e:e4:81:71:
                    1d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:31:36:7F:A0:D7:A6:35:21:D4:38:CF:E7:23:A1:D4:2E:76:27:CC
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3DF6459A772511EEA2E37420C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.64.0/23
                IPv6:
                  2400:efa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:a6:02:c5:f4:a8:37:a4:6b:e4:48:d2:2f:8c:19:12:18:2c:
         4b:78:56:63:3c:ce:62:55:03:68:b1:fd:b1:3d:46:0d:75:04:
         a6:ef:20:3d:ef:cf:c5:36:e8:d3:ee:6c:d2:6e:cd:d4:59:3b:
         90:7f:42:26:0c:28:e1:02:51:82:90:65:81:25:4f:c2:ab:24:
         6f:38:0a:e3:a2:15:4d:3c:6a:26:d7:3a:1d:5c:1a:95:96:43:
         86:bc:3b:3c:f5:93:c6:c2:73:ab:3d:e9:3d:57:31:7c:3c:17:
         81:70:6c:26:da:58:13:b6:fb:b7:ea:f1:b4:e5:46:77:4b:79:
         17:3b:78:32:1f:1d:b6:74:ed:4f:48:ad:2f:38:93:21:93:60:
         83:90:13:42:e4:2b:4c:96:2e:73:1e:9a:37:f8:f3:1b:5b:5d:
         92:f0:be:ae:83:dc:b6:b7:bd:5e:7b:09:a9:7b:fd:df:17:52:
         80:ba:28:fd:84:f6:fe:30:ab:a9:50:50:6b:20:46:14:44:10:
         2d:fa:bf:ec:50:f3:d0:d5:22:f9:70:ed:ea:88:10:d9:c1:7b:
         0b:0c:b4:cc:96:44:21:a6:80:8e:19:80:dc:77:b6:05:9e:fc:
         e1:f9:16:a8:ad:91:47:00:ea:d6:0b:b2:9f:53:65:71:bd:b0:
         57:96:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:44 2026 by rpki-client