Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DF4500C268FA11EFB2CB6E60C4F9AE02.roa
File:                     DF4500C268FA11EFB2CB6E60C4F9AE02.roa (raw, json)
Hash identifier:          cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=
Subject key identifier:   3B:BA:5E:94:83:7D:71:6B:A5:78:6A:73:00:C0:C1:DA:52:6A:5D:B6
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       0443
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DF4500C268FA11EFB2CB6E60C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:49:51 +0000
ROA not before:           Tue 02 Dec 2025 23:59:07 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152461
IP address blocks:        103.40.181.0/24 maxlen: 24
                          116.193.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Dec  2 23:59:07 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48a4f-501b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b2:d3:2d:fe:2b:3c:99:fb:5b:46:af:87:d5:
                    61:cc:14:99:40:44:db:5a:c3:c3:a4:7c:7c:99:8d:
                    82:45:c9:9c:25:aa:b6:97:b4:0c:3c:92:23:10:dd:
                    77:bb:c2:b4:73:bf:6c:85:17:14:1a:53:d0:d3:c9:
                    9c:f9:4b:07:42:6a:bb:3d:dc:f4:6d:56:c3:20:f3:
                    aa:4c:ad:e3:64:df:5f:83:fb:ab:ab:b3:c4:96:5d:
                    4f:fe:80:b7:72:0e:f2:59:18:3f:5e:2c:4f:f8:45:
                    50:78:66:ee:8b:62:b6:0c:6e:e6:3c:11:50:31:ee:
                    cd:f4:82:84:d4:8d:b4:6b:51:21:3b:f5:18:3d:93:
                    3e:63:e0:2c:7b:7d:7f:ae:6d:15:69:8c:8a:61:4d:
                    9e:6e:9f:33:15:6a:b0:36:10:9d:9c:c7:54:9f:db:
                    83:94:a4:36:a8:03:eb:4e:08:8c:c8:6f:4f:c9:fa:
                    6e:3e:0e:bc:60:a3:4a:fd:66:62:66:a5:5e:ff:3a:
                    e8:a6:7e:37:1c:ed:db:bb:b2:54:f6:ac:0b:50:44:
                    f5:17:5d:d4:71:82:73:a2:54:03:5c:13:e0:3e:97:
                    ce:ac:b5:a0:f5:22:82:ce:84:40:d0:ab:22:f7:e4:
                    71:89:92:c0:e2:c4:72:ea:2d:94:27:ed:21:3c:44:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BA:5E:94:83:7D:71:6B:A5:78:6A:73:00:C0:C1:DA:52:6A:5D:B6
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DF4500C268FA11EFB2CB6E60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.181.0/24
                  116.193.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:bc:c8:30:75:c6:4b:6d:e6:7b:72:65:b8:02:2d:da:af:3d:
         64:bb:55:b0:10:25:c3:6a:fd:7b:47:01:d7:6c:97:a8:4c:2c:
         3a:72:40:3b:33:dd:ae:62:62:11:fc:fb:e2:98:78:63:be:d2:
         1a:1a:ae:d7:14:57:c1:ad:a9:1b:0a:cf:cb:75:bd:2b:18:f4:
         27:34:e7:8c:2a:e6:f5:f6:db:fb:78:84:a3:49:af:cc:13:45:
         09:c6:0a:74:b6:d5:96:fa:d3:99:57:16:df:6e:34:09:42:f0:
         02:bf:36:4f:f3:dc:ab:4a:89:30:b9:3b:59:6f:58:f3:79:d9:
         17:7c:a5:9e:9f:ca:bf:b1:89:ce:ca:52:c4:b9:45:54:23:57:
         d4:42:98:d1:0e:fe:69:02:3e:5f:a6:a2:4b:64:9a:29:45:4a:
         07:9c:16:75:87:d9:22:ee:c8:a5:91:ce:a9:4c:96:95:0f:9b:
         8c:28:91:34:d2:2a:ae:69:00:15:76:33:44:b7:d9:42:66:bb:
         3e:dc:06:5a:5b:da:55:92:31:84:f5:66:6c:c1:ee:52:cf:8f:
         69:e4:65:b7:67:40:1b:0d:90:87:af:a1:ed:ec:f2:c0:3d:b4:
         10:4a:fd:a9:f6:79:b4:2b:12:19:fc:b6:a4:4e:fa:97:9d:a0:
         f3:d6:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:38 2026 by rpki-client