Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/12C3947A66F611EE82864875C4F9AE02.roa
File:                     12C3947A66F611EE82864875C4F9AE02.roa (raw, json)
Hash identifier:          Wz6nogB+wbKBt8GTzhszxFQph1Av594K7rD96UDLujQ=
Subject key identifier:   6B:3F:D6:F9:C3:FC:A6:46:12:08:15:9E:42:06:BD:07:68:B7:75:C5
Certificate issuer:       /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial:       01CC
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/12C3947A66F611EE82864875C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:22:21 +0000
ROA not before:           Wed 03 Sep 2025 04:23:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     4768
IP address blocks:        117.120.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
                          rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
        Validity
            Not Before: Sep  3 04:23:54 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4135d-7b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:b7:7a:a1:27:ba:6a:78:04:c1:1c:cb:3c:
                    ba:16:88:fc:44:e1:fa:f7:5b:de:35:9b:26:77:a9:
                    6e:cb:e4:51:4a:d4:23:51:a8:6d:03:6b:57:90:13:
                    39:2a:a5:03:7a:6c:53:41:35:3f:47:0d:aa:cd:4a:
                    86:8d:24:27:24:a1:55:2c:68:3d:b4:4d:e7:d9:74:
                    87:cf:15:61:30:ce:1a:bb:14:da:25:15:5e:56:d3:
                    8c:f8:ca:af:46:52:ef:c9:72:d2:2a:55:c1:89:2e:
                    68:38:f6:cf:4a:f5:39:80:ca:89:39:52:a0:67:cb:
                    8d:21:ab:52:92:51:0b:8d:3b:20:a2:c0:b7:87:7d:
                    c1:b3:df:4c:15:42:f9:4b:37:e6:5f:d3:f1:1b:f0:
                    fc:bf:a2:ed:92:07:d7:e6:aa:56:1f:27:c3:e1:96:
                    e6:42:c7:91:c4:a4:81:be:f2:5e:cd:3d:07:c7:d7:
                    96:a5:c7:2f:d8:45:1f:02:90:f4:ac:58:74:d2:18:
                    90:63:16:60:03:c8:6b:37:b4:33:ad:ee:dc:66:1e:
                    b5:ae:7a:36:89:d3:44:5f:1f:c1:a6:bf:6a:ae:26:
                    8e:2d:7d:d4:51:b1:ed:5a:47:24:f3:ef:1a:71:ce:
                    0e:14:c3:62:ec:a2:14:5b:d6:a3:fb:94:26:a7:fa:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3F:D6:F9:C3:FC:A6:46:12:08:15:9E:42:06:BD:07:68:B7:75:C5
            X509v3 Authority Key Identifier:
                keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/12C3947A66F611EE82864875C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.120.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:37:0a:af:47:f9:c6:10:d5:ba:da:6e:cd:27:c2:bd:bd:43:
         6d:a7:20:0f:11:52:5d:f1:47:ba:11:62:db:e0:29:2f:6a:9c:
         32:e2:33:b3:7c:af:5f:2c:a8:be:34:9e:68:fd:84:d6:cb:24:
         6a:e2:47:5d:30:a0:6d:a4:89:f9:27:1a:70:b6:ee:bf:a2:88:
         10:b1:7c:80:8f:e4:48:c1:38:7d:7e:aa:df:96:cd:10:f1:77:
         f2:7d:60:db:dc:19:c4:42:06:59:12:d1:14:a6:ad:b0:ab:fd:
         23:2c:90:41:88:a3:42:91:8c:e1:3f:fe:9b:94:84:b4:13:c3:
         69:cd:8d:fc:37:67:39:c0:79:fe:cb:26:07:c1:82:8d:a5:10:
         80:1e:23:61:1a:34:56:36:07:14:bf:c2:f3:ba:d1:96:ad:f6:
         c1:b7:09:03:2a:e6:f0:6f:1e:cc:a2:81:8b:37:de:70:44:13:
         5b:5b:90:ab:e2:49:78:8c:d3:c7:cc:c4:36:32:d4:78:c4:31:
         e1:54:89:1f:8a:17:4e:94:af:af:d9:7a:0f:e0:ea:0d:b8:44:
         a7:9f:58:85:f4:6b:96:91:da:21:7b:ff:3f:18:14:05:44:15:
         71:8f:26:0c:8c:9b:8e:9a:00:d0:b5:21:10:3c:2b:7b:02:6f:
         ca:db:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:10 2026 by rpki-client