Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/3C3F21BAD6F011EE9B38B67DC4F9AE02.roa
File:                     3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (raw, json)
Hash identifier:          Vl3ljhabWGTlG6GqBHRNZlqYXeuSFP4BoWLikf0UCmo=
Subject key identifier:   83:B3:6F:38:C4:42:1B:C4:46:46:EC:06:9C:F0:10:70:04:7B:10:46
Certificate issuer:       /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial:       0919
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/3C3F21BAD6F011EE9B38B67DC4F9AE02.roa
Signing time:             Tue 12 May 2026 20:25:50 +0000
ROA not before:           Tue 12 May 2026 20:25:49 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     150774
IP address blocks:        103.138.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
        Validity
            Not Before: May 12 20:25:49 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a038ccd-6f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:06:c8:ed:db:3b:6c:f4:3a:d7:ee:7b:cb:
                    ef:8a:fc:38:63:a5:41:32:aa:e6:75:e0:61:5b:15:
                    4f:c6:de:c4:1b:aa:66:09:01:da:45:7f:75:0e:ba:
                    3d:1d:c6:b4:3e:25:1c:f0:91:12:fe:30:0a:91:df:
                    6b:f1:4b:85:f6:16:ed:95:80:1d:a4:a2:e5:5b:81:
                    d0:d4:4e:07:0e:aa:28:28:cd:b5:dc:72:9f:09:ed:
                    a7:74:87:10:f3:30:3d:d6:00:01:9a:f0:8c:40:b7:
                    9b:74:00:0b:ed:07:ce:82:e6:f5:2c:f0:91:18:6c:
                    3c:19:93:e6:25:62:24:4f:eb:4b:af:83:42:01:25:
                    cc:08:a0:2a:16:4f:69:6e:c2:07:a1:bb:2e:1c:79:
                    1f:71:f5:ba:cd:50:de:84:05:ec:f7:2f:c9:49:a0:
                    86:2e:30:2d:b0:b4:6e:e2:1b:8b:b0:54:c3:0c:f8:
                    0f:7a:57:c9:0e:a7:00:eb:4a:fd:08:b4:62:f2:21:
                    db:d1:d9:b9:7d:a1:08:a4:bb:f3:40:a4:b7:71:f7:
                    3c:8d:7c:0a:fa:ab:b9:5e:96:2e:eb:88:3f:4b:08:
                    ee:bd:12:3e:f3:26:18:a6:bb:4d:6f:a9:33:f9:b9:
                    93:82:6b:7d:9b:1e:11:82:47:dd:d4:c4:c0:89:a4:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:6F:38:C4:42:1B:C4:46:46:EC:06:9C:F0:10:70:04:7B:10:46
            X509v3 Authority Key Identifier:
                keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/3C3F21BAD6F011EE9B38B67DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:88:81:1f:27:33:ea:b8:f4:30:74:50:4d:ea:84:02:28:f9:
         3f:d4:0c:f7:05:ed:e4:fb:ca:76:ac:5a:f8:95:c5:be:05:0d:
         61:9f:90:93:19:d5:f3:19:f4:01:01:4e:8d:ef:a2:a9:66:40:
         a6:46:a8:77:c2:a1:1d:53:11:39:e5:13:56:9a:4a:6d:eb:77:
         6b:0d:0d:dc:e2:f6:7d:e9:2b:17:60:a2:94:d2:c9:35:68:79:
         64:48:d6:22:c3:6c:98:47:78:e1:9b:9c:5d:42:2e:1a:99:c8:
         56:8a:3c:87:28:40:f6:fd:18:ee:73:15:4f:df:c6:db:11:d9:
         0d:93:0a:f8:30:00:fe:c3:e3:e3:52:ba:15:a0:41:b3:42:8b:
         e9:75:3f:0b:89:7b:fd:67:b8:e8:b7:a0:0e:88:34:d6:63:cf:
         f3:52:7f:27:01:8b:41:12:1c:f2:26:73:e4:e8:95:d2:f8:e3:
         5c:7b:bc:7c:c8:43:66:95:ef:41:e4:c0:b0:8a:a2:48:d8:40:
         20:41:df:d6:18:67:1f:70:0b:41:60:78:67:9e:38:98:9e:e7:
         d3:b3:6e:98:39:18:13:a4:e7:3c:d4:29:42:9d:be:ff:ac:8a:
         19:34:eb:a4:7c:6e:ee:fa:ee:80:3d:59:3e:e4:f9:26:08:be:
         af:df:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:00 2026 by rpki-client