Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4337A376EC3211F080B8AAB9416F56BC.roa
File:                     4337A376EC3211F080B8AAB9416F56BC.roa (raw, json)
Hash identifier:          0XIZnoNrC2grMc/00+Jp/CKQRxxNj6Nk+mSX6aVc2KE=
Subject key identifier:   12:D1:23:2F:48:64:60:D6:48:31:C6:E6:03:3D:75:1E:00:A7:F2:39
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       02B3
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4337A376EC3211F080B8AAB9416F56BC.roa
Signing time:             Wed 01 Apr 2026 02:34:14 +0000
ROA not before:           Wed 01 Apr 2026 02:34:14 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     214143
IP address blocks:        103.86.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Apr  1 02:34:14 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cc8426-4f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:a7:da:f9:cc:be:65:f5:b4:6a:b3:17:a1:
                    17:2d:50:6b:e2:67:bf:27:f5:8f:d9:4f:b6:fa:8c:
                    29:0b:be:4b:86:e8:85:ab:56:82:fc:39:d5:98:11:
                    b9:92:53:c3:f3:e6:83:c4:2b:fd:cf:e0:a2:7f:b1:
                    76:1d:5d:7d:00:a3:39:c9:49:ea:28:80:08:b3:16:
                    6c:3e:43:ca:4d:11:79:8e:ea:76:ea:1b:e4:9e:6e:
                    ea:1e:02:e9:bc:97:40:f2:08:86:03:c5:e1:81:48:
                    cb:7d:20:c7:63:79:9a:99:b3:3d:2b:74:05:2e:fc:
                    3a:fa:1e:a3:ff:08:fa:a7:74:99:08:23:3a:28:b4:
                    74:b0:7d:31:18:f5:c3:b8:d8:6b:65:07:48:13:15:
                    4f:3c:3f:f0:f7:3b:0d:66:ec:46:8e:d4:b6:4e:74:
                    09:44:fc:fc:9e:91:f9:71:e6:5d:ab:d6:be:0f:8b:
                    97:9e:4d:8e:39:c8:fe:5c:57:ac:d1:69:0b:6c:5e:
                    b5:f3:1b:03:86:ef:06:b9:1f:69:02:de:05:98:3d:
                    ea:31:7d:fd:53:d4:de:c6:b2:d7:fc:5b:7f:68:b0:
                    a3:8d:4d:be:7e:7d:42:e8:94:37:cf:45:5b:73:bc:
                    11:fd:7b:e7:d4:3b:1e:44:a4:16:84:38:a8:61:4e:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:23:2F:48:64:60:D6:48:31:C6:E6:03:3D:75:1E:00:A7:F2:39
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4337A376EC3211F080B8AAB9416F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:84:4a:8f:96:06:c9:c4:be:a1:3b:fe:91:86:ea:56:df:b1:
         2a:06:ab:e3:4e:81:bf:3b:a5:f7:4e:d9:c2:63:35:81:c7:60:
         e7:fc:4b:ac:bb:7b:f7:2f:67:bc:fe:0d:20:84:8e:20:db:41:
         cd:39:74:a6:72:4f:34:4b:b5:24:9a:aa:bd:4b:82:c3:ab:96:
         91:80:e9:1c:71:2e:65:cc:d1:67:dd:59:dc:4a:5a:12:e1:78:
         70:35:7a:b5:28:04:d5:78:09:f2:08:4d:7a:a3:57:8a:3d:1c:
         4f:b1:b6:71:80:f1:72:b0:fe:05:d5:80:40:ef:b4:26:18:bc:
         48:a5:3c:be:94:5c:4a:d6:ee:90:4c:08:e3:c6:ab:98:c5:f9:
         b9:cd:d1:46:0d:21:ce:31:ff:40:20:04:4c:74:a6:75:7a:e7:
         ec:eb:07:43:0a:2d:ee:75:0f:d2:b2:08:c3:07:2e:c2:43:a7:
         ab:5e:40:74:5c:d3:84:09:46:43:ea:59:58:98:1d:8d:fb:6a:
         ad:f8:7d:15:10:54:21:33:62:7a:6c:fb:18:82:07:25:b2:1b:
         07:a4:e3:79:ac:db:be:c1:02:b4:ae:79:1b:6f:ff:4a:15:71:
         ff:e7:46:60:11:49:c8:ed:15:59:d8:3b:31:55:92:1b:17:19:
         ef:3c:37:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:03 2026 by rpki-client