Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/4729B9CC10B011F19AF5FC353C3D8C67.roa
File:                     4729B9CC10B011F19AF5FC353C3D8C67.roa (raw, json)
Hash identifier:          fCPVpuxfSGaPQsYgH+Uf0Xz9c2c0zgNlkJBTvRiffqY=
Subject key identifier:   4C:E8:62:B4:5A:9D:12:F8:DC:FE:97:57:CD:70:28:06:AF:09:04:01
Certificate issuer:       /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial:       0A75
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/4729B9CC10B011F19AF5FC353C3D8C67.roa
Signing time:             Fri 21 Aug 2026 05:54:33 +0000
ROA not before:           Sat 28 Feb 2026 21:17:42 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     147182
IP address blocks:        103.96.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
                          rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2677 (0xa75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
        Validity
            Not Before: Feb 28 21:17:42 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a87e819-04e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:c8:a5:75:04:24:e7:90:55:b9:0f:22:a0:
                    2e:61:70:a6:ec:f1:77:7f:43:24:d5:56:92:fd:7a:
                    91:e1:24:ec:6f:67:dd:fe:e8:86:4f:ca:bf:66:80:
                    50:8a:29:ff:67:79:00:3d:51:1e:fc:48:3b:02:11:
                    6c:e0:3d:f7:0c:62:41:a6:3f:fd:89:78:34:bb:1a:
                    8f:21:b7:a8:28:7c:f4:87:0a:a7:f0:c0:0a:3c:47:
                    40:e5:d9:3e:67:5c:0f:69:14:b8:d9:97:23:64:4d:
                    27:01:26:5b:d8:d5:85:27:b2:69:ab:b1:2f:bb:8c:
                    62:3c:b1:a0:1d:4b:ed:ea:c5:65:33:47:52:2a:e3:
                    35:d8:7b:94:90:81:4a:c8:51:1d:5d:a4:dd:6d:74:
                    de:a3:6c:ba:b7:a3:d7:3d:32:41:6c:aa:df:ee:d9:
                    ef:8e:c8:61:f5:8b:88:52:1e:6d:1c:4f:f6:e3:59:
                    52:5a:ad:79:9c:f2:bc:ca:0a:46:9c:e3:88:b7:77:
                    14:9c:66:e7:5e:0a:ad:5d:a7:97:14:9d:70:ba:f5:
                    43:fe:0b:73:2a:ef:cc:58:d3:b7:27:fa:ab:2c:49:
                    91:57:4c:b6:25:e9:ac:d1:63:8c:a0:f0:f1:fe:d5:
                    cc:33:5f:51:63:35:6b:13:92:be:69:27:6c:b5:3a:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E8:62:B4:5A:9D:12:F8:DC:FE:97:57:CD:70:28:06:AF:09:04:01
            X509v3 Authority Key Identifier:
                keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/4729B9CC10B011F19AF5FC353C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:0b:5f:9a:d7:0c:cf:86:fb:0c:41:13:71:44:d7:0d:a2:
         fc:f3:b5:cb:05:dd:d2:95:37:59:4b:79:a2:8a:d2:01:c8:e8:
         43:62:b5:6d:21:ac:76:42:26:ad:b3:a5:ad:1c:12:e8:aa:1a:
         a8:93:7d:6e:a7:84:2d:34:06:7d:f7:f5:3b:8e:07:b2:a3:e7:
         11:f9:cc:e6:46:c8:5d:a8:69:47:b7:23:90:5a:40:3b:77:91:
         4f:58:e3:2f:6f:aa:7a:0c:f4:c3:97:77:5c:aa:60:0b:10:e5:
         ec:3d:b5:db:4a:f5:3b:3a:45:e1:3c:22:2b:7b:61:4c:c6:c0:
         17:5c:cf:da:3f:35:e6:6c:a8:47:0f:d2:d6:83:44:41:56:e5:
         6a:5b:43:25:76:f6:c2:3d:a1:41:b5:c8:1d:2f:52:dd:7f:3b:
         f0:12:23:eb:99:b3:93:c2:58:19:f3:36:a0:e8:09:19:bf:c5:
         90:78:85:43:98:c5:df:e8:30:0b:4e:00:b1:19:40:7b:ee:7f:
         5e:c5:43:8d:d2:75:24:15:f4:01:24:6a:2c:32:eb:21:18:1d:
         53:6b:1a:d5:67:31:ab:19:77:a7:bb:3c:34:23:37:88:e1:06:
         56:89:ce:27:03:a9:19:28:3b:c3:8b:a2:03:2e:72:84:7c:fd:
         3e:89:0e:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3
QTI2REJEMjUwHhcNMjYwMjI4MjExNzQyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3ZTgxOS0wNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv2/IpXUEJOeQVbkPIqAuYXCm7PF3f0Mk1VaS/XqR4STsb2fd/uiGT8q/ZoBQ
iin/Z3kAPVEe/Eg7AhFs4D33DGJBpj/9iXg0uxqPIbeoKHz0hwqn8MAKPEdA5dk+
Z1wPaRS42ZcjZE0nASZb2NWFJ7Jpq7Evu4xiPLGgHUvt6sVlM0dSKuM12HuUkIFK
yFEdXaTdbXTeo2y6t6PXPTJBbKrf7tnvjshh9YuIUh5tHE/241lSWq15nPK8ygpG
nOOIt3cUnGbnXgqtXaeXFJ1wuvVD/gtzKu/MWNO3J/qrLEmRV0y2Jems0WOMoPDx
/tXMM19RYzVrE5K+aSdstTrtcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEzoYrRa
nRL43P6XV81wKAavCQQBMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC
OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFGQTQvQjY3ODYyRkFBQjk1MTFFQUIyNTU5QzVCQzRGOUFFMDIvNDcyOUI5Q0Mx
MEIwMTFGMTlBRjVGQzM1M0MzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ2AaMA0GCSqGSIb3DQEBCwUAA4IBAQAtYQtfmtcMz4b7DEETcUTX
DaL887XLBd3SlTdZS3miitIByOhDYrVtIax2Qiats6WtHBLoqhqok31up4QtNAZ9
9/U7jgeyo+cR+czmRshdqGlHtyOQWkA7d5FPWOMvb6p6DPTDl3dcqmALEOXsPbXb
SvU7OkXhPCIre2FMxsAXXM/aPzXmbKhHD9LWg0RBVuVqW0MldvbCPaFBtcgdL1Ld
fzvwEiPrmbOTwlgZ8zag6AkZv8WQeIVDmMXf6DALTgCxGUB77n9exUON0nUkFfQB
JGosMushGB1TaxrVZzGrGXenuzw0IzeI4QZWic4nA6kZKDvDi6IDLnKEfP0+iQ4U
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:46:39 2026 by rpki-client