Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa
File:                     ABC4A34EAFB511F0815FDC37C4F9AE02.roa (raw, json)
Hash identifier:          zWqWxg0+aNCsye3+i741IRR2pFcwdPDSggDBvKOjYQ8=
Subject key identifier:   AD:1B:72:80:61:CD:CA:F0:80:CA:2A:83:FC:41:09:D0:42:F6:7D:DC
Certificate issuer:       /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial:       095E
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa
Signing time:             Mon 14 Sep 2026 20:41:34 +0000
ROA not before:           Mon 14 Sep 2026 20:41:34 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     40605
IP address blocks:        43.225.38.0/24 maxlen: 24
                          61.4.111.0/24 maxlen: 24
                          103.15.106.0/24 maxlen: 24
                          103.253.110.0/24 maxlen: 24
                          103.253.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
                          rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398 (0x95e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
        Validity
            Not Before: Sep 14 20:41:34 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa85bfe-f0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:94:8d:a5:8a:cd:5f:3d:ae:db:55:e6:6a:
                    7b:dd:23:5a:c9:98:77:76:3f:ac:84:86:8a:c5:c1:
                    6a:a4:60:c2:da:d6:a0:ec:42:55:7e:c6:dd:88:1e:
                    52:85:91:3e:9f:6e:3d:ce:4f:6a:6c:fc:3b:55:43:
                    12:6e:2d:f7:da:c8:02:c1:4f:b7:39:6c:60:3f:82:
                    36:25:4c:15:32:1a:2f:4d:d0:f6:55:9f:c8:3d:00:
                    88:92:98:8b:5c:d3:b0:44:71:57:26:4f:b4:49:14:
                    7f:98:b9:15:4f:88:6a:84:89:99:f1:b5:78:de:0e:
                    1e:df:da:5c:93:ae:13:70:fe:22:c6:90:12:49:3b:
                    26:bc:23:30:f2:4a:1d:52:97:e3:49:be:6a:18:eb:
                    41:38:03:76:f5:d3:a7:25:a4:6a:1c:7e:5a:6c:53:
                    24:bc:f2:05:28:b3:8d:54:c9:73:c8:ac:15:30:5b:
                    f2:16:f5:44:0a:70:b0:b8:59:ed:0f:0e:fd:d0:17:
                    4b:21:b3:82:bd:e3:ec:a3:6f:79:c1:ce:cb:e7:62:
                    46:ea:5f:31:a7:a4:b6:6e:8d:25:cc:d8:3e:63:21:
                    0d:06:5d:bc:aa:53:c2:b6:64:4f:88:a9:72:58:8c:
                    4f:31:54:76:b9:04:bd:a3:0e:fd:3b:54:94:6d:27:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1B:72:80:61:CD:CA:F0:80:CA:2A:83:FC:41:09:D0:42:F6:7D:DC
            X509v3 Authority Key Identifier:
                keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.38.0/24
                  61.4.111.0/24
                  103.15.106.0/24
                  103.253.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:b9:bd:04:8e:b7:74:de:fb:93:27:50:85:5c:05:6f:63:cb:
         e0:ae:bc:71:0b:74:c1:d7:2e:44:b1:27:07:ec:3d:e4:94:5c:
         cd:1d:3d:78:2d:e5:46:89:6c:7e:7a:c8:19:98:0c:86:1e:da:
         e4:39:0d:25:b5:48:cd:16:74:99:ab:17:aa:3b:98:7a:08:08:
         35:a1:f6:cb:8a:ae:0d:d4:36:33:33:83:ae:53:b3:92:18:6a:
         6b:6f:a8:b2:ba:53:b6:29:6d:ed:8e:82:79:81:71:bb:e9:ba:
         57:7a:8e:04:db:27:27:ab:49:7a:87:1a:fe:7b:6f:d5:3a:b1:
         b1:3e:55:c6:b2:38:d5:5a:16:47:13:97:ec:7e:fd:9d:97:2b:
         a6:4d:b3:0b:27:ff:fa:55:df:77:dc:f6:09:37:45:ba:96:93:
         ff:8c:04:f7:31:a6:ef:98:f2:31:c8:24:e4:59:9b:3e:ea:77:
         4e:8b:48:e7:0f:2e:df:9b:57:6d:7a:ce:64:df:e6:e1:19:8b:
         c6:af:84:5f:18:ec:ad:76:4c:bd:17:0e:a2:c7:62:d7:b4:87:
         5f:ea:c8:7b:57:a4:cc:a2:56:0b:17:4b:93:dd:69:6c:af:30:
         b0:ac:6a:b8:e8:3a:4f:2f:3b:d1:f2:cc:16:29:d6:f9:1a:11:
         76:e5:3a:92
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1
MzIzM0U1OTUwHhcNMjYwOTE0MjA0MTM0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE4NWJmZS1mMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1WUjaWKzV89rttV5mp73SNayZh3dj+shIaKxcFqpGDC2tag7EJVfsbdiB5S
hZE+n249zk9qbPw7VUMSbi332sgCwU+3OWxgP4I2JUwVMhovTdD2VZ/IPQCIkpiL
XNOwRHFXJk+0SRR/mLkVT4hqhImZ8bV43g4e39pck64TcP4ixpASSTsmvCMw8kod
UpfjSb5qGOtBOAN29dOnJaRqHH5abFMkvPIFKLONVMlzyKwVMFvyFvVECnCwuFnt
Dw790BdLIbOCvePso295wc7L52JG6l8xp6S2bo0lzNg+YyENBl28qlPCtmRPiKly
WIxPMVR2uQS9ow79O1SUbSfizQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFK0bcoBh
zcrwgMoqg/xBCdBC9n3cMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2
QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvQUJDNEEzNEVB
RkI1MTFGMDgxNUZEQzM3QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAK+EmAwQAPQRvAwQAZw9qAwQBZ/1uMA0GCSqGSIb3DQEBCwUAA4IB
AQB0ub0Ejrd03vuTJ1CFXAVvY8vgrrxxC3TB1y5EsScH7D3klFzNHT14LeVGiWx+
esgZmAyGHtrkOQ0ltUjNFnSZqxeqO5h6CAg1ofbLiq4N1DYzM4OuU7OSGGprb6iy
ulO2KW3tjoJ5gXG76bpXeo4E2ycnq0l6hxr+e2/VOrGxPlXGsjjVWhZHE5fsfv2d
lyumTbMLJ//6Vd933PYJN0W6lpP/jAT3MabvmPIxyCTkWZs+6ndOi0jnDy7fm1dt
es5k3+bhGYvGr4RfGOytdky9Fw6ix2LXtIdf6sh7V6TMolYLF0uT3WlsrzCwrGq4
6DpPLzvR8swWKdb5GhF25TqS
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:35:36 2026 by rpki-client