Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A0000D2CC91A11F08D74C673C4F9AE02.roa
File:                     A0000D2CC91A11F08D74C673C4F9AE02.roa (raw, json)
Hash identifier:          sY76HWNe2DtCJtYS74CJx7prfOKVaNPpOF+PUbbT4H0=
Subject key identifier:   99:26:3E:7F:1C:A4:DE:CD:03:4B:51:7C:EF:AD:A7:AB:CB:8E:DE:40
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       D6
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A0000D2CC91A11F08D74C673C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:11:20 +0000
ROA not before:           Mon 24 Nov 2025 09:47:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4652
IP address blocks:        122.155.252.0/24 maxlen: 24
                          122.155.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Nov 24 09:47:44 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48f58-8a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:69:28:20:b4:5f:96:7a:53:0b:22:2d:ef:c1:
                    24:d6:ac:76:66:bf:f6:00:40:21:7e:d0:3c:90:81:
                    e8:91:d3:c8:8d:c2:78:bd:c6:ce:17:42:40:29:b9:
                    54:55:ca:5a:02:d3:ea:48:39:bf:e0:32:93:87:95:
                    a1:f1:bc:7e:15:f4:a4:f3:03:30:7f:2e:d7:77:a7:
                    61:7b:bb:68:37:f5:3e:e2:bd:c1:bc:55:9d:58:5b:
                    33:48:51:54:71:6e:2a:b0:5e:fd:03:eb:bc:1a:73:
                    3b:8c:67:db:b7:15:60:a8:3d:9a:0a:40:d0:06:67:
                    3a:20:21:a5:d0:c1:cf:a5:e4:69:95:cc:5c:f3:11:
                    cd:ee:af:2a:c3:ab:e1:de:0f:6c:9f:ef:c6:f3:83:
                    04:57:61:e4:cb:64:35:29:a5:96:06:6b:e9:64:81:
                    1f:be:ff:70:3c:fd:25:8d:d9:8b:fe:0d:d3:8c:ca:
                    2f:69:39:9e:fa:f8:aa:69:e8:78:86:16:f9:88:96:
                    93:83:70:25:ce:22:e6:47:7c:aa:90:1d:9d:93:00:
                    7f:bf:c2:a8:a4:00:e3:75:e7:b7:8c:3d:9d:83:a3:
                    6a:ab:b9:a0:ec:d8:15:8d:54:8e:84:1c:8c:09:28:
                    a9:fe:c6:5c:42:c9:ee:ec:83:15:e3:c0:3e:64:0a:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:26:3E:7F:1C:A4:DE:CD:03:4B:51:7C:EF:AD:A7:AB:CB:8E:DE:40
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A0000D2CC91A11F08D74C673C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.155.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:63:fb:23:c1:d0:39:92:77:80:77:5a:65:57:44:77:fa:5c:
         87:87:92:1f:6a:3c:40:5e:48:6e:0e:f9:85:3f:1e:33:19:d6:
         86:af:61:fc:91:01:cb:74:d5:00:ff:39:ab:18:b9:21:ea:19:
         71:92:32:10:75:76:fe:4f:ec:b7:db:a5:75:5d:37:db:64:42:
         ec:b1:ef:4d:a3:eb:fa:77:7a:38:5e:54:cf:8e:d8:83:22:70:
         86:04:4b:74:d7:a3:21:09:b1:34:8c:b9:4f:6b:05:d3:4e:0b:
         45:51:84:f3:2b:e6:1c:a6:e3:03:9b:76:c4:be:a6:2e:26:fa:
         69:67:60:95:2c:4a:37:12:a3:57:3a:0e:29:a9:2c:05:a3:98:
         93:6e:e2:e4:37:06:77:80:4d:ad:f6:57:fc:08:92:99:ab:4e:
         60:7b:ae:b5:a4:41:8a:49:79:8d:1d:e0:eb:27:32:ab:05:ee:
         cc:35:b6:88:0d:54:8f:0d:5b:1b:ef:c4:86:f8:68:9e:43:a1:
         7a:73:83:d2:79:e2:50:62:1d:95:51:e1:5d:30:75:19:9d:51:
         8d:5e:09:29:1f:aa:aa:f8:21:36:27:81:02:45:3e:09:cd:f9:
         e0:48:fa:46:43:0e:16:a9:4f:a3:64:c1:2f:68:5a:b5:b0:2d:
         67:3a:c0:b1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx
MDBDODUzOTEwHhcNMjUxMTI0MDk0NzQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGY1OC04YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3GkoILRflnpTCyIt78Ek1qx2Zr/2AEAhftA8kIHokdPIjcJ4vcbOF0JAKblU
VcpaAtPqSDm/4DKTh5Wh8bx+FfSk8wMwfy7Xd6dhe7toN/U+4r3BvFWdWFszSFFU
cW4qsF79A+u8GnM7jGfbtxVgqD2aCkDQBmc6ICGl0MHPpeRplcxc8xHN7q8qw6vh
3g9sn+/G84MEV2Hky2Q1KaWWBmvpZIEfvv9wPP0ljdmL/g3TjMovaTme+viqaeh4
hhb5iJaTg3AlziLmR3yqkB2dkwB/v8KopADjdee3jD2dg6Nqq7mg7NgVjVSOhByM
CSip/sZcQsnu7IMV48A+ZArHWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJkmPn8c
pN7NA0tRfO+tp6vLjt5AMB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4
RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU5OEQvQjg4NTMxQ0FDOEVDMTFGMEEzNDRBQjQ1QzRGOUFFMDIvQTAwMDBEMkND
OTFBMTFGMDhENzRDNjczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBepv8MA0GCSqGSIb3DQEBCwUAA4IBAQCoY/sjwdA5kneAd1plV0R3
+lyHh5IfajxAXkhuDvmFPx4zGdaGr2H8kQHLdNUA/zmrGLkh6hlxkjIQdXb+T+y3
26V1XTfbZELsse9No+v6d3o4XlTPjtiDInCGBEt016MhCbE0jLlPawXTTgtFUYTz
K+YcpuMDm3bEvqYuJvppZ2CVLEo3EqNXOg4pqSwFo5iTbuLkNwZ3gE2t9lf8CJKZ
q05ge661pEGKSXmNHeDrJzKrBe7MNbaIDVSPDVsb78SG+GieQ6F6c4PSeeJQYh2V
UeFdMHUZnVGNXgkpH6qq+CE2J4ECRT4JzfngSPpGQw4WqU+jZMEvaFq1sC1nOsCx
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:44 2026 by rpki-client