Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/7F35DF3CB74E11F0B044DA80C4F9AE02.roa
File:                     7F35DF3CB74E11F0B044DA80C4F9AE02.roa (raw, json)
Hash identifier:          cXPjCHPaKFx65HIG8toHkGNypseR6/vfwRdThb3BfVw=
Subject key identifier:   B3:24:A4:B0:5D:E6:F5:62:1F:75:43:06:12:2F:C8:DC:A6:6A:A4:80
Certificate issuer:       /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial:       11A7
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/7F35DF3CB74E11F0B044DA80C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:20:44 +0000
ROA not before:           Tue 24 Feb 2026 17:15:25 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135055
IP address blocks:        103.18.180.0/24 maxlen: 24
                          103.107.38.0/24 maxlen: 24
                          103.107.40.0/24 maxlen: 24
                          2406:eac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
                          rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4519 (0x11a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
        Validity
            Not Before: Feb 24 17:15:25 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4756c-1d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:e4:a4:5a:a0:0f:7b:0f:16:4a:2b:bd:8a:
                    f2:7e:cd:10:1c:77:58:bb:03:53:de:c1:45:c0:89:
                    47:18:38:84:8c:47:29:2e:e4:09:a8:a4:a6:bf:38:
                    cf:0b:a3:92:a4:f0:d4:9a:67:d6:22:83:79:b1:77:
                    46:66:07:85:b6:6b:ea:c4:66:1d:ce:d4:29:4f:1b:
                    72:8a:d8:7e:9d:85:75:62:46:c7:0c:fd:77:61:8e:
                    b9:bb:11:cf:23:b2:f9:26:75:6e:3d:c8:1c:c4:19:
                    9c:62:cb:be:71:06:df:60:b7:d2:10:eb:99:b3:51:
                    0d:df:26:17:9c:c0:32:8d:3c:64:b3:ea:23:a5:85:
                    a3:10:eb:88:c7:7e:0f:fe:2d:00:34:8b:26:eb:e9:
                    ad:1a:a4:19:74:65:20:07:39:cd:73:cd:94:e5:40:
                    04:72:03:8c:d5:8b:ca:f4:48:cb:f8:c4:e2:13:31:
                    34:38:c7:11:7b:a8:18:e8:fd:e3:0d:4a:c5:19:54:
                    aa:7f:03:23:7b:30:cc:fc:0e:58:59:b4:d6:4f:57:
                    f0:57:0e:31:a3:3d:21:ae:ca:7f:7b:f6:cb:bb:e4:
                    7e:94:97:e9:26:1a:5b:8e:44:ae:5a:90:1b:e9:3d:
                    fe:be:c3:80:26:78:e2:c3:aa:a5:03:07:82:ed:fa:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:A4:B0:5D:E6:F5:62:1F:75:43:06:12:2F:C8:DC:A6:6A:A4:80
            X509v3 Authority Key Identifier:
                keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/7F35DF3CB74E11F0B044DA80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.180.0/24
                  103.107.38.0/24
                  103.107.40.0/24
                IPv6:
                  2406:eac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:46:67:37:5f:be:fb:bc:2b:07:c1:56:7b:3b:ab:28:e9:3b:
         35:d9:08:af:c5:57:9e:7e:73:8a:91:02:3e:f8:2c:fd:14:ed:
         07:c9:c1:68:08:2a:e5:49:9a:6c:1a:42:57:0e:7f:6e:43:59:
         29:94:3b:1b:07:e1:7b:0a:15:47:ff:2f:b0:52:00:03:13:06:
         8e:87:55:38:31:6b:bb:6a:98:b6:ed:9a:4a:d6:06:14:13:a7:
         a1:5a:b2:f1:eb:1a:d9:4d:a3:12:68:85:75:2f:d0:80:3f:3d:
         02:8f:0f:77:fc:fd:d3:77:e9:27:e1:52:7a:e3:2d:79:5e:6b:
         c7:54:1b:93:ed:80:15:9a:db:2f:68:ba:ce:9d:4e:6d:79:a1:
         3d:43:92:4d:81:7c:76:6f:8f:63:7d:04:03:33:12:ce:45:10:
         94:d1:1f:30:f3:6d:df:7c:a1:79:69:6e:81:c4:96:4d:6e:7d:
         f0:35:12:c3:73:bf:b5:57:a0:e5:40:0a:41:97:9c:fa:6a:de:
         4e:83:44:bd:20:71:5b:41:67:c5:3a:1c:33:0e:93:3a:3d:cd:
         ca:eb:a2:d2:57:28:09:6a:55:31:56:a9:c0:52:f6:0c:f2:7c:
         6c:d3:0e:3c:0a:35:fb:3c:bf:76:03:ab:0c:48:0b:4b:65:48:
         d6:da:5f:a3
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICEacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC
QzBDRjYzNDcwHhcNMjYwMjI0MTcxNTI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzU2Yy0xZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1NzkpFqgD3sPFkorvYryfs0QHHdYuwNT3sFFwIlHGDiEjEcpLuQJqKSmvzjP
C6OSpPDUmmfWIoN5sXdGZgeFtmvqxGYdztQpTxtyith+nYV1YkbHDP13YY65uxHP
I7L5JnVuPcgcxBmcYsu+cQbfYLfSEOuZs1EN3yYXnMAyjTxks+ojpYWjEOuIx34P
/i0ANIsm6+mtGqQZdGUgBznNc82U5UAEcgOM1YvK9EjL+MTiEzE0OMcRe6gY6P3j
DUrFGVSqfwMjezDM/A5YWbTWT1fwVw4xoz0hrsp/e/bLu+R+lJfpJhpbjkSuWpAb
6T3+vsOAJnjiw6qlAweC7fpoawIDAQABo4ICezCCAncwHQYDVR0OBBYEFLMkpLBd
5vViH3VDBhIvyNymaqSAMB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3
QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUM1NjMvMTFCNjMzNjQxN0MxMTFFOTgxMDgwRjZDQzRGOUFFMDIvN0YzNURGM0NC
NzRFMTFGMEIwNDREQTgwQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQAZxK0AwQAZ2smAwQAZ2soMA0EAgACMAcDBQAkBurAMA0GCSqGSIb3
DQEBCwUAA4IBAQBTRmc3X777vCsHwVZ7O6so6Ts12QivxVeefnOKkQI++Cz9FO0H
ycFoCCrlSZpsGkJXDn9uQ1kplDsbB+F7ChVH/y+wUgADEwaOh1U4MWu7api27ZpK
1gYUE6ehWrLx6xrZTaMSaIV1L9CAPz0Cjw93/P3Td+kn4VJ64y15XmvHVBuT7YAV
mtsvaLrOnU5teaE9Q5JNgXx2b49jfQQDMxLORRCU0R8w823ffKF5aW6BxJZNbn3w
NRLDc7+1V6DlQApBl5z6at5Og0S9IHFbQWfFOhwzDpM6Pc3K66LSVygJalUxVqnA
UvYM8nxs0w48CjX7PL92A6sMSAtLZUjW2l+j
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:33:18 2026 by rpki-client