Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/0188487C15AA11E685F66C3CC4F9AE02.roa
File:                     0188487C15AA11E685F66C3CC4F9AE02.roa (raw, json)
Hash identifier:          iWSJFLIeKe7hugY4ZJti1OftvD87R1nmtGDBBmbzeUA=
Subject key identifier:   F5:13:C4:BF:7B:38:39:A6:4E:FE:17:E8:42:26:4D:DE:89:6D:2F:53
Certificate issuer:       /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Certificate serial:       3571
Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/0188487C15AA11E685F66C3CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:59:56 +0000
ROA not before:           Thu 26 Jun 2025 15:51:06 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     23688
IP address blocks:        43.225.204.0/24 maxlen: 24
                          103.44.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
                          rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13681 (0x3571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
        Validity
            Not Before: Jun 26 15:51:06 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47e9c-4f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a1:ac:e9:c3:be:6f:09:8c:97:f5:57:9c:12:
                    c5:51:69:fe:b7:9b:a3:27:ac:15:3b:a7:bb:50:f5:
                    9f:76:93:3d:7f:3e:8b:15:10:5b:31:88:04:a1:ff:
                    f5:8d:9f:fb:90:e3:81:8f:8f:b9:5d:55:eb:46:22:
                    5d:e5:19:c2:c2:ef:76:b6:07:bc:0c:63:be:f1:52:
                    d2:6e:14:d0:aa:17:27:73:80:d1:cc:91:43:02:ed:
                    3d:7b:ec:44:bc:50:b4:a7:4a:84:a3:16:ec:40:c8:
                    17:29:e3:05:dc:0c:5c:c5:c9:93:42:56:5f:41:18:
                    8b:98:a1:86:9d:c0:05:23:b9:54:e0:15:c2:58:07:
                    54:65:09:d2:f1:0f:5a:04:86:19:25:9f:06:3f:90:
                    32:63:75:f7:bb:b9:ae:58:4b:db:59:82:97:94:2c:
                    70:d6:ba:05:3f:0e:aa:27:83:53:9b:2a:1b:da:03:
                    ea:d6:93:56:4d:58:25:16:b1:ad:ac:e6:f1:15:13:
                    f5:6b:f7:23:d0:6a:41:60:19:f1:47:79:f5:7c:09:
                    4f:97:61:29:b6:92:3f:70:78:d8:eb:24:d5:bc:1e:
                    3a:ab:e6:e3:7a:7d:85:a2:0f:64:6a:b2:3b:64:5d:
                    54:3f:e6:be:5e:be:0e:f2:20:51:91:3f:d7:2a:d1:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:13:C4:BF:7B:38:39:A6:4E:FE:17:E8:42:26:4D:DE:89:6D:2F:53
            X509v3 Authority Key Identifier:
                keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/0188487C15AA11E685F66C3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.204.0/24
                  103.44.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d5:32:f3:59:8c:aa:64:86:e3:0a:00:c4:25:f5:a3:79:14:
         1b:db:8d:ba:c1:98:45:ea:8d:4f:68:1b:a0:60:b2:95:20:1e:
         ad:8e:c6:21:d1:4b:c3:83:01:32:55:d0:61:53:78:42:ac:3d:
         2a:55:0d:fc:0f:3b:34:58:d6:0d:0a:37:3d:be:5d:b3:b5:84:
         30:94:4f:8d:a0:c7:58:5f:8d:db:42:2d:22:1d:23:70:1d:d1:
         2e:7a:05:d3:27:df:8d:fb:6e:8a:89:fa:1b:fa:57:e9:de:02:
         b4:2d:39:3f:66:8b:31:93:fb:b7:25:75:13:6f:e1:c8:2b:06:
         70:79:df:ca:69:8e:d3:fa:81:56:8e:49:36:71:ad:e9:91:68:
         7b:ba:9e:55:30:8b:90:ad:71:84:4f:55:62:d1:e8:45:9b:fc:
         7b:5e:97:b3:9d:e1:63:10:48:d8:04:b9:ec:6f:f3:e3:2e:e7:
         3b:e2:9a:54:21:3e:49:ee:41:e4:19:09:42:d7:a2:96:2e:be:
         12:4c:6a:db:2a:ab:d6:29:52:81:df:b1:6e:9a:64:a7:ee:0b:
         9c:be:4d:5e:54:45:26:3c:e0:de:3b:66:6d:49:f9:9f:04:7b:
         3f:5d:11:73:b7:12:01:68:30:a6:6e:eb:29:d2:9c:31:82:7b:
         fd:f1:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:38 2026 by rpki-client