Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/362EF79CFB2911EF8C103876C4F9AE02.roa
File:                     362EF79CFB2911EF8C103876C4F9AE02.roa (raw, json)
Hash identifier:          8z/uFEi8kY2kZUp/2Uo+wdZpbnZaPl9Z3nq0shxq+HU=
Subject key identifier:   AB:AB:6C:A3:80:99:F3:5F:67:99:71:53:31:70:C7:C9:B9:DE:20:DE
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       F0
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/362EF79CFB2911EF8C103876C4F9AE02.roa
Signing time:             Sat 21 Mar 2026 06:43:16 +0000
ROA not before:           Sat 21 Mar 2026 06:43:16 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        103.103.64.0/23 maxlen: 24
                          163.61.208.0/23 maxlen: 24
                          2001:df5:20c0::/48 maxlen: 48
                          2402:1da0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Mar 21 06:43:16 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69be3e03-801d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:57:9d:5b:cc:cb:6d:c9:54:ac:02:a2:ea:
                    8b:fd:63:31:c8:63:0b:1a:2c:aa:ee:7b:89:2e:55:
                    11:c0:44:f1:8c:01:74:3e:04:0f:cd:40:c8:f4:05:
                    46:61:9d:e9:9d:8f:ee:dc:6b:e3:9c:ee:05:7d:6a:
                    a5:c3:e2:42:8e:f2:1a:28:89:7f:c8:d8:4d:69:83:
                    b9:de:c4:2c:1c:e0:c8:f5:2a:e9:0b:02:1d:6e:22:
                    cb:f5:d0:9d:10:7f:63:06:46:a7:8a:76:ca:08:13:
                    9a:ff:f5:93:f8:32:92:2b:89:2e:53:14:4c:76:ff:
                    dc:29:4e:b0:ec:90:b5:b1:13:d3:b8:68:58:e7:c9:
                    e9:d2:36:08:6d:1a:c9:5d:ae:5e:92:de:ed:80:25:
                    03:99:66:07:91:17:bb:28:95:7b:3a:68:9f:21:bb:
                    59:7d:12:a8:00:04:2d:1b:a9:08:d5:76:21:3b:c5:
                    6d:4f:1e:83:67:55:87:40:72:53:eb:85:49:79:ae:
                    ef:6a:82:ac:c8:fb:6b:30:53:a7:65:8e:f1:7b:10:
                    ef:3a:95:d4:9a:60:03:db:24:3b:a6:a9:02:e5:6b:
                    33:47:0e:07:93:68:17:b6:5e:c3:43:dd:41:7e:5f:
                    1e:03:d0:c6:e7:52:e1:e1:33:34:ce:02:dc:75:75:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:6C:A3:80:99:F3:5F:67:99:71:53:31:70:C7:C9:B9:DE:20:DE
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/362EF79CFB2911EF8C103876C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.64.0/23
                  163.61.208.0/23
                IPv6:
                  2001:df5:20c0::/48
                  2402:1da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:0b:bc:eb:f4:63:51:c8:3d:f3:20:8f:03:36:1f:5c:b3:
         7a:33:d4:00:a8:55:d9:da:77:ac:bf:b6:a5:81:1a:9d:6e:ed:
         59:88:f3:bc:be:ff:5e:67:4e:97:ca:91:44:f4:be:2e:70:3f:
         1a:be:7e:53:c1:b4:5d:5b:1b:ad:dd:a1:16:04:86:9e:36:9b:
         15:5b:9b:70:d6:37:40:1e:13:0d:86:a8:f8:02:c7:88:df:fd:
         5c:00:87:c8:0e:ff:f9:2e:e5:02:5f:0a:5f:8c:ac:25:36:79:
         31:95:03:a9:8a:8f:8f:3f:7f:b6:e8:e8:40:14:5f:ea:8d:eb:
         6a:dc:21:cf:af:65:de:7c:b1:92:08:5b:7b:01:35:d6:98:55:
         1f:ea:0a:d5:a3:7f:f0:1b:04:40:37:fc:ba:e7:e3:a7:cc:36:
         ce:18:75:e0:db:9a:a1:2e:40:a7:8d:9c:74:f8:58:4e:0c:2e:
         2a:66:91:6e:ae:e8:23:e8:01:2f:55:00:39:08:a2:4e:ac:5d:
         d8:55:58:9e:e6:5c:af:77:4e:b0:1f:b4:db:30:c1:38:4e:51:
         42:8a:54:8a:70:d5:5b:44:6b:8f:93:79:f1:c8:1a:9e:f2:bd:
         b1:cc:5d:04:75:52:91:48:cc:6a:f4:2f:06:f3:f8:27:1a:91:
         8f:7a:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:02:27 2026 by rpki-client