Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/F7AB4FF8058F11F1B7BFF5793E3D8C67.roa
File:                     F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (raw, json)
Hash identifier:          FFO72rwWU9BzKR75I8zk3drp+LjLt3Z/rvU6gC8z1bA=
Subject key identifier:   FA:70:D0:3E:71:F4:4C:F3:9E:6F:AB:DD:60:E1:E1:2C:8C:D4:12:A5
Certificate issuer:       /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial:       0624
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/F7AB4FF8058F11F1B7BFF5793E3D8C67.roa
Signing time:             Sun 01 Mar 2026 16:49:38 +0000
ROA not before:           Mon 09 Feb 2026 08:18:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137550
IP address blocks:        103.112.236.0/24 maxlen: 24
                          103.112.238.0/24 maxlen: 24
                          2406:d1c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
                          rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
        Validity
            Not Before: Feb  9 08:18:52 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a46e22-9313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:5b:97:b6:0e:2d:ee:43:42:90:56:bb:af:
                    3e:98:3b:4f:51:34:f7:73:09:e0:97:d6:4d:a6:05:
                    ac:e8:2d:5e:0f:d1:97:23:d9:22:50:0b:ab:e9:78:
                    c5:e1:d0:9e:17:4d:8a:c7:e0:43:40:9e:e5:33:98:
                    a8:20:b8:31:8a:60:f1:6c:3c:0a:bf:ae:71:14:a8:
                    d6:25:31:bd:31:73:b2:d8:b2:a9:b0:82:14:f7:5c:
                    4f:24:8b:b1:e2:85:1c:cc:54:d3:0c:83:a2:0b:2f:
                    b2:ea:fa:2c:a6:48:96:61:53:fc:82:b8:11:56:f9:
                    d3:87:82:98:ad:68:df:69:46:7d:01:36:95:04:ae:
                    36:f2:09:65:3d:c6:d6:8c:b9:69:e6:63:10:61:37:
                    86:1b:80:de:67:97:96:18:52:6e:d1:08:7b:dd:2d:
                    23:26:6f:4d:df:dd:dc:b8:7f:4c:49:85:49:b5:6f:
                    aa:4a:40:9f:dc:da:45:f1:ad:ff:67:63:fc:dc:6b:
                    75:49:8b:d3:ec:45:b1:26:33:7f:42:33:55:47:20:
                    55:a9:69:06:92:08:51:fc:fe:90:f3:00:85:d1:f1:
                    0a:e8:7a:1d:74:c6:cb:07:09:14:ac:c1:f3:5b:05:
                    7a:cc:1d:1a:b9:d8:78:21:42:29:7d:25:0d:ae:e6:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:70:D0:3E:71:F4:4C:F3:9E:6F:AB:DD:60:E1:E1:2C:8C:D4:12:A5
            X509v3 Authority Key Identifier:
                keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/F7AB4FF8058F11F1B7BFF5793E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.236.0/24
                  103.112.238.0/24
                IPv6:
                  2406:d1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:db:f7:92:7e:c8:f1:c7:db:1c:00:66:dc:95:62:92:00:ae:
         1f:b0:72:82:08:76:b5:0e:ce:58:8b:c6:00:10:fd:9b:2a:08:
         b4:ce:dd:b8:24:5a:a1:66:6e:57:7b:f3:9a:50:df:80:fd:4b:
         fe:70:9a:05:90:15:8f:c7:91:44:1b:09:e6:53:41:f4:ba:d4:
         7e:40:ef:3c:55:da:ab:01:77:40:b7:a7:6e:e6:a8:2c:2c:33:
         fe:c6:f3:f1:4d:3a:c9:1e:a8:95:59:b4:6b:97:90:5b:df:fb:
         32:2b:dc:94:2c:88:78:db:64:17:93:70:70:05:77:2c:24:9f:
         03:40:f1:32:24:cc:9b:3f:30:1a:bf:54:c1:4e:82:73:e2:b8:
         f6:a8:e2:73:fd:9e:d0:f5:bb:db:44:55:75:a9:0a:ad:16:c8:
         4f:96:30:6b:04:ba:28:ba:44:a5:f7:79:f1:42:0c:7f:ec:a1:
         e3:97:86:dc:48:f8:7a:15:e6:76:14:ac:d2:fc:53:f3:8e:1f:
         ce:26:e8:4e:14:cc:8d:89:b0:ff:6d:8c:5c:2c:e1:6e:59:2c:
         34:8a:13:9f:00:42:65:07:dd:1e:87:a5:37:87:45:23:fe:95:
         8e:f8:bf:67:57:6c:fa:65:2b:82:54:d7:3f:db:45:a9:fc:3f:
         cb:ac:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:53:37 2026 by rpki-client