Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa
File:                     30376074EF8811EFABCDFD34C4F9AE02.roa (raw, json)
Hash identifier:          dbuZmNGm++g8muXahSZhdDCEu8MGAKIyX1z0wQbDzqg=
Subject key identifier:   AA:EA:86:36:5A:30:88:92:0A:0D:C3:53:6C:9E:44:D7:C6:38:DD:EB
Certificate issuer:       /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial:       FC
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa
Signing time:             Fri 10 Apr 2026 14:51:00 +0000
ROA not before:           Fri 10 Apr 2026 14:51:00 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9664
IP address blocks:        103.165.84.0/23 maxlen: 24
                          163.61.198.0/23 maxlen: 24
                          2401:f1e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
                          rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
        Validity
            Not Before: Apr 10 14:51:00 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d90e53-dc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:18:2e:ae:ee:c1:09:67:86:90:82:54:e5:e2:
                    5d:32:6e:bd:f8:65:ac:32:33:c2:1b:49:3e:e6:cd:
                    31:dd:43:f0:c6:50:ec:17:44:d7:9d:19:02:ac:b2:
                    28:39:e0:bd:09:3e:7d:bc:99:01:81:78:fb:55:14:
                    88:b3:79:17:79:11:e0:07:84:c9:b7:fa:93:46:4b:
                    22:15:15:f5:dc:71:94:c1:70:e8:77:58:3c:41:fb:
                    28:4b:f4:0d:14:6c:66:4c:f9:8c:83:a7:2f:2b:7c:
                    ee:04:79:10:61:67:0e:79:82:2c:5c:70:cc:a0:75:
                    d4:f5:a4:5d:40:19:2b:8f:0f:d3:c9:d9:f9:27:ce:
                    05:9d:a3:ee:41:92:16:66:8a:54:9b:7f:4a:b9:7d:
                    b5:bd:95:a1:d0:f6:54:06:13:d2:b5:e6:ed:fb:ba:
                    2d:70:84:14:68:10:ea:a9:ee:ef:f2:09:f8:28:51:
                    ee:97:d7:fd:87:1a:9e:f4:7f:12:48:96:2c:86:8f:
                    8b:08:eb:37:e5:56:27:40:c1:3d:d2:0f:31:11:ad:
                    14:69:91:88:7a:59:79:14:a3:e4:9e:49:1f:bd:77:
                    90:2b:fa:63:35:3d:c0:4c:61:4a:c6:7c:9e:d0:67:
                    30:84:12:d5:78:f5:fb:b1:b6:e9:7f:ee:52:9f:ba:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EA:86:36:5A:30:88:92:0A:0D:C3:53:6C:9E:44:D7:C6:38:DD:EB
            X509v3 Authority Key Identifier:
                keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.84.0/23
                  163.61.198.0/23
                IPv6:
                  2401:f1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:65:ba:dc:84:77:f6:d3:8a:ac:d6:ff:e6:59:ef:94:fe:7a:
         aa:78:74:42:37:57:24:56:75:f2:af:14:70:5e:1d:2c:06:2e:
         91:f5:3f:69:f0:8a:b8:91:3f:8b:5c:2d:b5:03:26:91:fd:bb:
         32:6f:f1:62:45:a4:41:3e:47:78:d7:9d:4f:c5:94:a3:67:01:
         91:f9:65:9f:a0:9d:dc:13:a2:8c:b5:1b:d1:73:2a:7d:e9:ce:
         f7:ea:e7:a7:6f:4d:a6:ac:5a:64:21:3a:40:a0:3b:19:06:1b:
         6d:50:79:3b:76:03:73:ae:98:d2:77:6c:5c:57:d9:45:66:4b:
         8a:47:f0:0b:52:74:b6:85:e5:0a:f3:ec:49:05:64:e7:42:58:
         1c:b9:f2:f6:4d:ff:88:1d:66:4e:fa:2c:66:f5:1a:6c:70:2a:
         2e:da:b8:fc:a0:5c:f2:d6:de:87:3a:ef:28:f8:d3:b5:c9:e6:
         07:2d:4d:7c:04:ab:b4:a8:21:4f:64:b9:90:b7:2e:4d:06:30:
         62:04:64:c3:20:ec:f0:cf:8e:0d:2e:8f:aa:4d:ee:ca:32:0d:
         40:25:45:fb:94:4f:ea:8c:88:09:90:00:b5:21:1d:46:5d:af:
         1d:18:ad:88:d2:77:26:e6:9f:41:b3:cf:45:70:36:46:97:8e:
         46:0a:c5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:51 2026 by rpki-client