Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/4E4AF4A2C2B111EBABFFA212C4F9AE02.roa
File:                     4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (raw, json)
Hash identifier:          IYSmLvKDDFybIzJE/k0J2LFQgVw7pM2NwhpUrLtH0AM=
Subject key identifier:   AA:51:CA:63:A3:2B:92:3F:0C:FD:55:BB:1F:C7:20:81:CA:8E:17:F1
Certificate issuer:       /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Certificate serial:       089E
Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/4E4AF4A2C2B111EBABFFA212C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:55:38 +0000
ROA not before:           Fri 02 May 2025 21:32:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140610
IP address blocks:        103.247.199.0/24 maxlen: 24
                          203.89.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
                          rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
        Validity
            Not Before: May  2 21:32:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4293a-4003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:ab:3b:36:10:71:29:41:4d:9f:3a:4d:b9:
                    f0:84:3f:9d:a6:00:56:b7:47:13:b3:a3:e2:55:df:
                    e7:c9:c2:14:81:24:e8:fc:8e:01:a7:f1:17:88:81:
                    e7:84:9f:6f:f9:66:f0:0c:bc:0e:5b:49:c7:b5:23:
                    8e:b6:23:13:ac:36:03:ca:02:94:5d:7e:b3:cf:32:
                    d4:22:67:a9:68:bd:5e:4e:82:ca:96:83:5d:c5:26:
                    65:90:91:ad:95:0b:3f:91:f3:4e:4a:6a:65:53:6f:
                    c5:6c:d5:60:2c:23:29:21:cc:5b:6f:31:13:af:2e:
                    9d:05:33:84:f1:6e:6d:c7:b9:2b:40:af:67:14:3f:
                    35:6d:ba:9e:c8:ff:c3:66:4e:11:b9:44:5c:4f:03:
                    7d:b2:2d:e7:f1:d1:7f:89:a3:8a:85:6f:58:e8:ef:
                    df:fa:10:f4:1b:10:4b:e9:fa:fd:63:f0:6c:88:d4:
                    1b:02:3a:6b:a8:e2:6d:15:c1:be:6c:65:ec:06:d6:
                    17:e1:78:9e:c6:88:ba:fb:c7:10:97:84:4f:c7:41:
                    9f:83:27:1d:2e:84:cf:ad:aa:ec:a7:63:37:1b:2a:
                    fe:0d:5f:06:8f:f3:6f:89:68:46:e0:3a:af:11:c0:
                    e3:c6:e6:c6:21:4d:78:34:27:72:0b:5a:7c:83:75:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:51:CA:63:A3:2B:92:3F:0C:FD:55:BB:1F:C7:20:81:CA:8E:17:F1
            X509v3 Authority Key Identifier:
                keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/4E4AF4A2C2B111EBABFFA212C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.199.0/24
                  203.89.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:a2:49:2e:d9:d0:5d:50:8e:fe:b5:16:4e:8e:99:29:e7:
         cf:8f:e9:81:4d:3e:9c:f6:00:ad:0d:24:e2:a3:8f:ea:34:3e:
         6c:57:07:ba:15:73:a4:ac:9d:cd:36:3b:01:33:0e:2b:81:2b:
         b1:d2:1a:09:ad:dd:eb:ac:0a:d0:49:87:e6:01:26:15:26:96:
         f2:1b:f9:09:f9:ab:dd:71:72:49:1f:10:92:c7:17:a7:f8:c6:
         8b:d0:e6:38:e2:22:11:42:83:a3:ec:f5:58:27:d7:de:d1:59:
         9f:6a:f9:f6:9c:97:d1:6c:1c:68:cc:94:17:0c:6d:e3:b8:2e:
         7b:95:88:ab:f0:10:67:c7:7c:6c:92:6f:d3:54:44:12:ad:63:
         8a:c1:a3:71:d2:90:c2:55:28:6e:53:b7:e4:69:e2:b6:68:7f:
         14:ba:93:3b:b9:1b:67:99:54:ad:13:09:ec:a9:90:92:a4:5d:
         97:03:4b:ac:bb:76:e7:a9:68:a8:3c:ef:f2:9d:85:97:41:57:
         de:d8:7c:9a:9c:4f:48:9c:e2:85:76:a6:9c:f0:97:c3:9e:43:
         a0:09:42:10:b1:09:f9:39:57:04:33:98:93:54:f7:da:23:7b:
         b9:d0:1d:8a:52:28:4d:c6:b1:a5:ea:30:f5:34:91:de:da:e9:
         15:0c:47:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:09:45 2026 by rpki-client