Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/B3677C08D2AA11F0850BC856C4F9AE02.roa
File:                     B3677C08D2AA11F0850BC856C4F9AE02.roa (raw, json)
Hash identifier:          0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=
Subject key identifier:   42:3A:6B:1A:C0:50:84:C4:E2:A3:C6:0A:2B:FE:31:7A:94:2C:1D:DF
Certificate issuer:       /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial:       01E0
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/B3677C08D2AA11F0850BC856C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:19:08 +0000
ROA not before:           Sat 06 Dec 2025 13:51:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151786
IP address blocks:        103.72.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
                          rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
        Validity
            Not Before: Dec  6 13:51:45 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a458ec-df75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:e3:c9:7a:ed:34:3c:30:46:01:1b:b3:7f:
                    ba:54:b0:b4:9a:79:b3:d2:34:c1:6f:4d:41:42:19:
                    5e:80:c1:b7:52:09:90:b9:b3:52:e7:2b:6e:74:a3:
                    81:75:5c:f1:c7:5f:05:9d:51:ff:1c:e6:97:73:c9:
                    07:f1:8a:4b:ec:55:37:60:c8:a5:c3:54:74:f5:0c:
                    1b:d9:76:f5:7d:cf:8f:aa:c7:53:ae:5c:d4:44:73:
                    fd:c5:fc:70:fe:15:c1:d5:68:01:ca:6d:2e:5b:70:
                    f9:b9:e9:94:e3:c8:e3:47:a0:3c:6c:6e:d9:65:8d:
                    b8:88:04:d9:bc:c4:48:91:d5:96:72:00:d2:bb:f8:
                    cc:ef:f2:a3:86:47:d5:36:7c:d5:bd:44:5f:c3:13:
                    b2:c1:8d:7f:13:a6:ad:96:75:de:0b:a4:86:fa:3b:
                    63:6b:d2:b0:f0:5b:f2:ca:8d:69:c7:3f:7e:59:40:
                    4b:7a:0f:43:f4:9f:95:40:04:69:9a:02:3e:71:c3:
                    b2:0b:4d:5b:ae:7c:d8:76:c2:6e:e9:4c:0a:3b:b3:
                    c8:90:39:97:b2:01:95:fe:12:96:53:9c:29:0a:42:
                    7c:cf:75:a9:33:7a:43:7e:de:82:ae:8d:1c:0b:63:
                    d3:da:47:69:51:54:83:e8:d6:b1:14:83:43:49:30:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3A:6B:1A:C0:50:84:C4:E2:A3:C6:0A:2B:FE:31:7A:94:2C:1D:DF
            X509v3 Authority Key Identifier:
                keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/B3677C08D2AA11F0850BC856C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:af:40:12:89:c1:e2:30:e8:ba:68:5c:89:3e:73:b2:d3:1d:
         a5:c6:5a:2b:7b:29:2d:22:e9:be:0d:34:2c:6c:30:e2:fb:7b:
         df:8a:30:92:ce:23:ff:07:93:7f:29:9d:0b:66:7e:a3:b1:c1:
         fc:12:a7:96:c0:87:37:5f:44:74:c1:29:5a:37:ca:ca:f1:ec:
         0d:16:8a:46:b5:ff:49:28:44:2e:9f:7e:2f:93:cb:cd:6d:50:
         01:8e:77:f4:7f:64:5f:a1:d5:ca:96:4f:0e:ff:3c:af:31:d1:
         64:08:35:32:25:25:59:c7:79:64:65:83:b5:4b:51:20:51:ce:
         c9:4c:d8:26:79:53:84:6c:7c:87:73:65:1e:c0:bd:41:5f:d8:
         aa:ff:26:d8:1b:87:6a:16:0d:c7:31:74:83:fc:2d:07:17:00:
         da:da:0c:0d:0f:52:61:82:6b:c3:92:81:d7:44:34:51:77:10:
         8b:bf:22:c6:48:5c:54:d9:cf:ee:d1:41:5f:d0:f6:e4:2b:e1:
         f1:c2:aa:42:e4:19:66:b0:36:0c:30:82:60:2c:ff:cd:ce:99:
         03:a9:99:9a:0c:b6:f7:95:e0:2c:2f:dc:e4:c4:83:ec:ce:0a:
         1a:17:58:dc:fc:10:87:90:0b:fa:6d:ce:a5:08:ab:bc:aa:04:
         1f:c3:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:59 2026 by rpki-client