Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/2B21EC2EE4E111E981365C17C4F9AE02.roa
File:                     2B21EC2EE4E111E981365C17C4F9AE02.roa (raw, json)
Hash identifier:          iut8EEVryRG83jh5a/5UJcx3oIfMx7vlVFCC3Vozxn0=
Subject key identifier:   43:13:BF:8B:AE:26:C0:BA:8A:C0:9E:C9:1A:E5:ED:D9:A0:0C:00:D4
Certificate issuer:       /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Certificate serial:       0EE1
Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/2B21EC2EE4E111E981365C17C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:58:27 +0000
ROA not before:           Wed 02 Jul 2025 18:26:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134356
IP address blocks:        103.140.10.0/23 maxlen: 24
                          2405:4c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl
                          rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3809 (0xee1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
        Validity
            Not Before: Jul  2 18:26:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48c53-20ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:a7:cb:0e:7e:6a:2f:ce:41:69:5f:89:e9:
                    a6:42:ef:d8:8c:26:9c:fd:a1:28:5a:49:4e:e5:75:
                    ce:18:5c:36:23:f2:d8:ed:f1:b9:e4:2d:19:11:19:
                    5d:6e:df:bb:fc:16:df:2f:50:c0:97:8b:08:aa:18:
                    c8:e0:f3:d8:66:ce:3e:84:d6:5b:8b:4d:11:11:65:
                    94:b5:77:89:a4:3d:43:f9:38:c2:d6:87:15:47:a8:
                    9b:f4:8f:91:19:62:af:00:de:41:2a:b5:5e:1c:1f:
                    07:57:e9:7a:68:6b:24:ff:ab:d8:7c:69:eb:be:3a:
                    19:37:e0:b2:8c:9c:53:7d:28:a9:33:50:66:06:04:
                    a7:8f:c1:19:76:0b:f6:fc:61:6b:9c:fe:d4:cc:a9:
                    f9:12:9b:1e:8a:68:ae:81:67:c7:6f:a5:2e:94:67:
                    96:3e:df:e1:7c:5f:d3:ef:d9:c8:b0:47:26:6c:ec:
                    75:81:29:cf:eb:82:6b:9e:86:3b:21:79:d0:bc:53:
                    ea:e6:6a:57:a8:04:5b:80:56:58:28:67:b5:ef:41:
                    eb:f2:c0:6c:d1:8c:ef:84:57:6a:f3:0a:45:34:1c:
                    3b:13:0b:87:d5:b4:dd:53:9f:f8:3d:4d:84:77:d8:
                    a1:df:19:8d:86:17:e1:f1:66:75:e7:6a:52:c5:95:
                    7b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:13:BF:8B:AE:26:C0:BA:8A:C0:9E:C9:1A:E5:ED:D9:A0:0C:00:D4
            X509v3 Authority Key Identifier:
                keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/2B21EC2EE4E111E981365C17C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.10.0/23
                IPv6:
                  2405:4c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:0a:02:1a:44:a0:94:fd:2d:18:9b:a3:fe:f1:85:6c:b0:de:
         e9:39:f1:7b:87:13:7e:a6:68:39:b9:60:97:ee:ab:11:4f:78:
         07:00:0b:f4:43:c8:ce:ea:53:a4:2e:3a:5f:82:27:be:7b:e8:
         9b:88:cb:dd:c1:e2:ad:db:1f:31:8c:b8:4e:33:15:48:eb:7d:
         39:9d:e2:e6:b1:81:fc:de:c1:65:5c:40:27:65:e1:3b:0d:32:
         f3:c0:b1:b5:4e:20:8d:0e:6f:ec:1b:02:5f:b5:aa:3b:2b:a4:
         e9:44:38:44:d6:13:76:2b:b5:2a:8d:5d:48:bd:92:99:14:59:
         e8:2b:d5:5a:83:8f:7d:5d:b8:94:1a:ff:1e:42:51:bf:3d:06:
         0f:1e:b5:d4:af:40:b5:89:8d:53:c4:b4:c1:43:83:f5:0a:db:
         c6:99:c0:24:53:a7:08:6d:26:54:a3:bb:ba:c5:2c:da:54:18:
         81:d9:a0:da:b4:94:e1:29:45:c7:51:e0:8c:31:fb:3b:3e:55:
         71:cb:10:59:51:11:8c:ab:d7:ab:f5:61:0a:1f:04:aa:ae:f7:
         a3:59:7c:0d:e8:6c:c6:eb:71:3b:1a:9c:86:86:86:0e:28:15:
         fb:b8:ec:5f:e6:f2:1b:0c:19:ff:fe:d6:f2:02:52:0e:2d:c0:
         a0:c2:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:58 2026 by rpki-client