Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/3E0A6ED49E7B11EFBD44280AC4F9AE02.roa
File:                     3E0A6ED49E7B11EFBD44280AC4F9AE02.roa (raw, json)
Hash identifier:          I9utLoQOo+FgrMzcmZ+nktkwChduEwkgHWKAKFKVei8=
Subject key identifier:   BE:08:C6:98:BB:CF:BC:7F:8B:91:D2:8D:92:EC:D3:55:9D:DD:AB:03
Certificate issuer:       /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
Certificate serial:       2E36
Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/3E0A6ED49E7B11EFBD44280AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:27:39 +0000
ROA not before:           Thu 28 Aug 2025 16:02:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63965
IP address blocks:        118.179.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl
                          rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11830 (0x2e36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127523, serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
        Validity
            Not Before: Aug 28 16:02:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a45aeb-c006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:41:7f:31:44:65:a1:46:2f:f2:63:94:5e:
                    17:02:6b:a9:7c:25:92:92:60:73:d0:66:c2:43:c5:
                    cd:3f:ce:ad:d3:ff:48:e2:27:38:31:a1:50:6d:90:
                    cf:d0:60:20:2a:6c:95:59:b3:44:11:2c:6a:a8:9c:
                    7f:db:53:56:68:ee:43:23:0b:a3:87:0a:73:10:38:
                    2c:dd:08:1a:26:95:33:24:14:57:9f:e0:f5:d8:48:
                    f7:93:98:ac:76:11:9a:8d:e9:4d:89:64:51:5d:3a:
                    20:61:4d:0a:dd:04:08:e4:28:11:c6:52:fb:2e:16:
                    69:ce:96:e2:69:87:94:57:d2:d6:2c:a9:3b:7b:99:
                    66:52:0b:a5:ee:3b:db:a6:ee:38:18:4f:60:5d:23:
                    4b:b4:00:e1:94:7b:40:74:97:ce:48:e7:5d:f6:b8:
                    a8:80:64:ec:75:4d:b1:54:ba:17:58:83:a2:e4:61:
                    7b:1f:fd:ce:41:a2:14:ae:8f:82:67:f8:d3:8a:37:
                    e5:48:92:05:4c:af:33:c7:f9:17:57:c1:e6:fa:49:
                    6e:bf:88:54:e8:d3:27:97:0d:79:1f:98:2e:90:63:
                    0d:7f:3c:70:b8:77:a3:26:ab:23:00:6d:9d:4e:e2:
                    0c:81:a3:e9:2f:c8:04:8a:86:eb:09:87:a4:cf:2b:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:08:C6:98:BB:CF:BC:7F:8B:91:D2:8D:92:EC:D3:55:9D:DD:AB:03
            X509v3 Authority Key Identifier:
                keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/3E0A6ED49E7B11EFBD44280AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.179.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:80:0f:53:eb:94:7e:5f:8c:81:8b:ea:66:f2:7f:93:6c:43:
         ff:5c:b5:58:14:29:28:a6:4b:ef:59:1d:8a:43:3e:c1:1d:52:
         68:10:1a:24:36:6d:93:48:48:46:a8:0b:a9:94:a3:f7:f5:c7:
         77:56:b8:dc:3e:eb:81:82:0a:c9:0f:fa:36:9a:f9:ea:f0:c9:
         b3:bd:74:e3:42:ad:2b:6d:80:66:39:71:1c:f6:99:0d:ed:5b:
         07:6c:aa:4e:0c:2a:2e:95:c9:60:21:7f:c1:24:3e:14:3b:d3:
         96:d2:95:a6:58:89:f1:70:46:af:bb:38:93:3c:d6:1e:53:15:
         79:86:92:20:d1:14:80:83:6b:dd:ce:a4:e1:88:bc:cc:85:dc:
         45:1f:5f:54:33:43:d3:a8:40:ed:25:e4:a2:23:03:c2:71:15:
         a0:44:ea:c0:86:26:69:70:09:e6:e1:dc:70:c0:87:4f:f8:b8:
         04:86:75:9c:39:78:a5:f0:83:30:4e:72:7d:64:c7:11:43:68:
         6f:b7:f6:1b:2d:59:a3:39:c8:d1:8b:97:7e:a0:58:92:c2:08:
         e2:b6:8b:82:f0:78:d8:3c:c9:fc:1a:d8:8e:82:2a:ea:aa:ca:
         84:bb:9a:a4:23:e0:39:d8:ea:c6:21:05:fb:9d:1b:8f:b2:0e:
         97:15:a6:a8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1MjMxMTAvBgNVBAUTKDhBNjgxREQwQzQzNzMxRDBGNDc2M0E0REJERDVENEND
MDFGRDY0QzIwHhcNMjUwODI4MTYwMjM5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWFlYi1jMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbBBfzFEZaFGL/JjlF4XAmupfCWSkmBz0GbCQ8XNP86t0/9I4ic4MaFQbZDP
0GAgKmyVWbNEESxqqJx/21NWaO5DIwujhwpzEDgs3QgaJpUzJBRXn+D12Ej3k5is
dhGajelNiWRRXTogYU0K3QQI5CgRxlL7LhZpzpbiaYeUV9LWLKk7e5lmUgul7jvb
pu44GE9gXSNLtADhlHtAdJfOSOdd9riogGTsdU2xVLoXWIOi5GF7H/3OQaIUro+C
Z/jTijflSJIFTK8zx/kXV8Hm+kluv4hU6NMnlw15H5gukGMNfzxwuHejJqsjAG2d
TuIMgaPpL8gEiobrCYekzyuZCwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL4Ixpi7
z7x/i5HSjZLs01Wd3asDMB8GA1UdIwQYMBaAFIpoHdDENzHQ9HY6Tb3V1MwB/WTC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzUyMy8xMkI5OTdFODlB
RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01kRDBkanBOdmRYVXpBSDla
TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ltZ2QwTVEzTWREMGRqcE52ZFhVekFIOVpNSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1MjMvMTJCOTk3RTg5QUUzMTFFM0E1QTI1N0E3NTkxMUVBMzIvM0UwQTZFRDQ5
RTdCMTFFRkJENDQyODBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdrMNMA0GCSqGSIb3DQEBCwUAA4IBAQC7gA9T65R+X4yBi+pm8n+T
bEP/XLVYFCkopkvvWR2KQz7BHVJoEBokNm2TSEhGqAuplKP39cd3VrjcPuuBggrJ
D/o2mvnq8MmzvXTjQq0rbYBmOXEc9pkN7VsHbKpODCoulclgIX/BJD4UO9OW0pWm
WInxcEavuziTPNYeUxV5hpIg0RSAg2vdzqThiLzMhdxFH19UM0PTqEDtJeSiIwPC
cRWgROrAhiZpcAnm4dxwwIdP+LgEhnWcOXil8IMwTnJ9ZMcRQ2hvt/YbLVmjOcjR
i5d+oFiSwgjitouC8HjYPMn8GtiOgirqqsqEu5qkI+A52OrGIQX7nRuPsg6XFaao
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:51:46 2026 by rpki-client