Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa
File:                     30376074EF8811EFABCDFD34C4F9AE02.roa (raw, json)
Hash identifier:          aSsPfmRsz60ZAX1z2tFoWsJYBU4N5vp97y1762/UucI=
Subject key identifier:   73:38:C0:72:97:85:AE:D9:62:27:B0:10:87:B5:AD:F1:65:B4:44:61
Certificate issuer:       /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial:       DB
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:52:04 +0000
ROA not before:           Sat 22 Feb 2025 17:08:11 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     9664
IP address blocks:        163.61.198.0/23 maxlen: 24
                          2401:f1e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
                          rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
        Validity
            Not Before: Feb 22 17:08:11 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a59604-a56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:84:c2:39:88:55:f9:75:76:c5:6b:ec:72:
                    bc:f6:49:72:05:f1:18:94:cd:07:9e:48:2b:a9:b1:
                    3e:4c:bd:99:f1:07:e2:94:09:1f:39:93:3b:36:da:
                    3f:4f:b2:a3:ca:c0:76:dc:07:d2:a3:cb:62:88:07:
                    fa:ce:e5:db:61:40:4c:db:a1:6f:c4:99:07:40:7e:
                    7c:b1:a3:ba:43:a8:41:53:6c:5e:db:c6:37:40:75:
                    1c:8f:6e:17:02:5b:82:e6:6f:a3:d8:e5:b1:03:4d:
                    ad:c8:6d:3e:87:c7:be:92:86:2e:85:ab:f6:23:76:
                    39:66:1f:f8:e9:e9:d6:f6:66:ba:f1:96:ac:0e:75:
                    cb:5d:50:5a:3f:e0:03:4c:30:08:94:2c:3e:7e:38:
                    38:37:9c:d7:75:54:a5:1c:db:5c:3f:21:78:ca:8c:
                    fe:09:fd:c5:19:88:3e:db:05:93:7c:bf:e7:5f:0a:
                    01:4c:06:23:40:38:0b:31:65:4e:21:05:d4:f7:86:
                    e1:4a:e3:98:3a:fb:2c:fc:72:47:0b:b5:7d:c4:0a:
                    3a:ad:2c:6b:70:da:78:6b:54:fa:d6:c4:a6:9f:10:
                    f8:a6:63:f5:ac:cb:5e:02:ae:5a:c8:3e:4a:7d:e8:
                    4f:1f:7c:94:1c:d0:ee:35:71:61:0a:42:bf:47:72:
                    58:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:38:C0:72:97:85:AE:D9:62:27:B0:10:87:B5:AD:F1:65:B4:44:61
            X509v3 Authority Key Identifier:
                keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.198.0/23
                IPv6:
                  2401:f1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:81:05:3b:30:c1:92:dc:6d:56:c8:f2:9c:49:dd:f5:32:28:
         d0:28:25:84:f8:3f:99:8d:30:87:09:84:4e:c6:6d:3a:bf:05:
         16:18:19:c0:60:c0:bf:44:4a:b1:9a:40:94:9b:a7:a9:02:a8:
         b0:cc:da:a5:4d:b6:0f:c1:15:43:86:a6:b2:72:92:01:c5:fd:
         6a:d2:48:6a:76:ad:4b:fc:87:e9:0d:fa:ac:75:0a:4c:98:c6:
         28:14:82:8c:4b:fa:0e:57:fe:ff:4d:d7:5b:ea:bd:90:07:a7:
         5a:03:38:b2:4d:ce:73:d9:af:dc:45:99:4f:10:1b:c0:c1:cb:
         9e:b8:15:22:a1:53:ee:32:4b:a3:ca:e6:da:2c:98:a5:74:ca:
         d5:67:93:36:80:ef:f2:26:8b:42:6f:91:da:54:92:b6:79:8d:
         68:6d:23:76:5f:6b:af:8a:44:f1:54:94:91:12:0b:7c:06:c5:
         3f:39:95:de:16:55:45:1c:f1:6f:93:e6:f9:7f:65:3f:59:e7:
         ed:4c:c0:51:7b:4b:62:59:c1:bf:39:7d:17:cf:2d:9d:e5:0b:
         4c:48:27:6d:6f:85:04:c1:c4:d7:5c:17:21:1c:78:b6:f7:76:
         34:fb:6b:ab:ad:bf:05:c5:ea:1f:ab:00:e0:1f:cd:98:aa:15:
         11:6d:0e:11
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNBMkQxMTAvBgNVBAUTKDJENUI5Qjk1NENEMTczQjczRkYwODdERUE2MTg3OUU0
ODA1MUQyM0IwHhcNMjUwMjIyMTcwODExWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTYwNC1hNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7GEwjmIVfl1dsVr7HK89klyBfEYlM0HnkgrqbE+TL2Z8QfilAkfOZM7Nto/
T7KjysB23AfSo8tiiAf6zuXbYUBM26FvxJkHQH58saO6Q6hBU2xe28Y3QHUcj24X
AluC5m+j2OWxA02tyG0+h8e+koYuhav2I3Y5Zh/46enW9ma68ZasDnXLXVBaP+AD
TDAIlCw+fjg4N5zXdVSlHNtcPyF4yoz+Cf3FGYg+2wWTfL/nXwoBTAYjQDgLMWVO
IQXU94bhSuOYOvss/HJHC7V9xAo6rSxrcNp4a1T61sSmnxD4pmP1rMteAq5ayD5K
fehPH3yUHNDuNXFhCkK/R3JYlwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHM4wHKX
ha7ZYiewEIe1rfFltERhMB8GA1UdIwQYMBaAFC1bm5VM0XO3P/CH3qYYeeSAUdI7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0EyRC8yNTYxODdGMkVG
ODcxMUVGQTdCMUMyMzBDNEY5QUUwMi9MVnVibFV6UmM3Y184SWZlcGhoNTVJQlIw
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xWdWJsVXpSYzdjXzhJZmVwaGg1NUlCUjBqcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkNBMkQvMjU2MTg3RjJFRjg3MTFFRkE3QjFDMjMwQzRGOUFFMDIvMzAzNzYwNzRF
Rjg4MTFFRkFCQ0RGRDM0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBoz3GMA0EAgACMAcDBQAkAfHgMA0GCSqGSIb3DQEBCwUAA4IBAQCc
gQU7MMGS3G1WyPKcSd31MijQKCWE+D+ZjTCHCYROxm06vwUWGBnAYMC/REqxmkCU
m6epAqiwzNqlTbYPwRVDhqaycpIBxf1q0khqdq1L/IfpDfqsdQpMmMYoFIKMS/oO
V/7/Tddb6r2QB6daAziyTc5z2a/cRZlPEBvAwcueuBUioVPuMkujyubaLJildMrV
Z5M2gO/yJotCb5HaVJK2eY1obSN2X2uvikTxVJSREgt8BsU/OZXeFlVFHPFvk+b5
f2U/WeftTMBRe0tiWcG/OX0Xzy2d5QtMSCdtb4UEwcTXXBchHHi293Y0+2urrb8F
xeofqwDgH82YqhURbQ4R
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:11 2026 by rpki-client