Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/79266D5C32AB11EE8EEB9940C4F9AE02.roa
File:                     79266D5C32AB11EE8EEB9940C4F9AE02.roa (raw, json)
Hash identifier:          Jy8XOiA0kN27oXJXLhTzYwQbS1Mw45QfiLEVZ4JMgEM=
Subject key identifier:   0F:E0:B0:18:31:23:7C:6B:F4:2E:53:BA:70:4A:F4:17:A4:EA:B2:F6
Certificate issuer:       /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327
Certificate serial:       01EA
Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/79266D5C32AB11EE8EEB9940C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:18:04 +0000
ROA not before:           Thu 21 Aug 2025 04:09:48 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136744
IP address blocks:        103.247.30.0/23 maxlen: 23
                          103.247.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl
                          rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327
        Validity
            Not Before: Aug 21 04:09:48 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4125c-8877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:2f:55:63:64:7f:91:b8:8e:42:89:cc:2b:
                    08:48:9d:74:bc:69:af:68:31:49:46:ab:e5:b8:fa:
                    07:f2:c9:8f:02:7c:af:5e:2c:b2:dd:2e:63:d3:23:
                    26:00:96:8c:77:dc:a8:d1:0b:db:9d:d0:c9:4a:20:
                    67:9d:e6:6d:7f:09:79:0d:4a:a5:d9:24:b8:d6:de:
                    b2:dd:aa:63:ad:07:6c:0d:80:cd:0d:25:ef:58:68:
                    ca:79:fb:3d:3e:24:0f:9f:76:91:90:95:2b:81:66:
                    9b:a4:8b:07:09:ef:c4:bd:00:ad:c3:8b:60:c6:08:
                    d4:2e:ba:f8:cf:a5:6a:bf:8f:84:61:62:60:7c:93:
                    7c:ec:c6:43:b9:63:71:93:10:c9:6d:6b:e1:67:ff:
                    7a:0c:c1:bd:2a:b2:d9:2b:35:f7:b2:4c:3b:6e:b4:
                    ae:1c:c4:0b:8f:23:39:89:8b:62:e8:8f:ef:cb:94:
                    ad:18:21:cd:bc:fc:26:88:e1:db:82:f4:cb:fa:ac:
                    d4:b7:bb:cb:d2:ac:e1:ac:42:23:09:45:63:47:7a:
                    65:9a:18:ec:39:da:64:bf:9e:d9:f9:c0:03:8f:37:
                    24:d5:c3:84:36:1d:7c:73:fd:82:23:6e:e4:e5:f9:
                    0d:c6:5a:f2:59:74:55:f7:6d:69:1f:a3:6c:c5:dd:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E0:B0:18:31:23:7C:6B:F4:2E:53:BA:70:4A:F4:17:A4:EA:B2:F6
            X509v3 Authority Key Identifier:
                keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/79266D5C32AB11EE8EEB9940C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:5d:36:a7:37:04:3b:fa:01:82:ab:da:ca:e0:5e:e4:41:
         0b:93:11:91:38:d6:78:ed:9c:d8:7e:12:29:5a:79:fb:5b:57:
         c4:25:73:9c:b2:2a:ea:75:84:ca:e6:ec:08:f9:59:bb:3b:62:
         27:88:db:7e:84:09:a3:56:6d:40:3b:73:ac:24:f3:cf:c1:94:
         25:ec:79:45:b3:b9:dc:5d:03:71:03:f0:af:d1:bc:05:40:60:
         74:fe:81:c1:b9:4d:9b:1f:78:b0:b1:18:ce:77:41:1a:e7:8e:
         31:e8:4e:e8:61:1c:4c:30:24:bf:09:c3:51:86:71:7d:d5:a0:
         6a:62:a0:d5:bb:da:74:2b:18:26:0c:68:eb:8e:c9:eb:cb:32:
         ab:2c:78:55:ae:87:e5:ae:e1:3e:67:0f:4d:69:a6:ed:51:0b:
         2e:b1:38:99:0b:74:03:4b:6b:06:80:04:71:e9:79:78:5a:24:
         c4:e1:b2:62:9b:25:64:8d:18:9f:25:10:36:55:f1:27:1a:f8:
         0b:cc:12:f5:03:ac:df:76:c7:55:3c:36:cf:46:96:fb:1f:cd:
         e2:ff:30:df:59:6d:a2:40:79:d5:27:0a:13:02:b2:75:84:73:
         76:2c:9c:ba:8e:11:e7:97:84:3b:78:a4:96:bb:ad:a5:6e:03:
         a9:a1:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:05 2026 by rpki-client