Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/9D979510990811F08B636355C4F9AE02.roa
File:                     9D979510990811F08B636355C4F9AE02.roa (raw, json)
Hash identifier:          DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=
Subject key identifier:   BB:9E:9D:29:1B:51:EB:80:AB:8A:52:8D:8D:2C:35:7A:74:A6:E5:9B
Certificate issuer:       /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial:       0164
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/9D979510990811F08B636355C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:15:54 +0000
ROA not before:           Tue 17 Feb 2026 04:24:22 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.44.109.0/24 maxlen: 24
                          203.28.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
                          rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
        Validity
            Not Before: Feb 17 04:24:22 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4744a-0cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:73:00:91:22:a2:e3:e3:02:0f:62:c1:3d:
                    ee:d7:99:a8:a5:51:4e:2b:90:38:be:2f:17:27:cc:
                    2e:d7:14:c5:ec:4e:31:9e:a2:dd:63:5b:f0:bb:20:
                    10:ca:74:81:8a:4b:e3:97:72:3e:35:86:bb:7c:b0:
                    3e:24:75:2e:9f:74:b8:40:3d:55:17:c9:2f:56:80:
                    e8:53:58:97:f8:18:f9:f2:d7:54:eb:a5:0e:0c:28:
                    ac:0e:7e:45:e1:b9:51:83:82:88:c9:12:15:ce:47:
                    e7:aa:e0:c4:a2:f7:c5:55:a4:41:bb:18:74:ee:62:
                    f8:87:b5:67:91:44:f8:6a:9c:a4:c9:61:54:a0:37:
                    cb:e1:2f:19:0c:d7:6e:6e:97:e2:3a:8d:56:d7:7a:
                    0e:ea:f9:8c:50:30:05:7e:d5:f8:fa:8b:78:c5:e3:
                    a8:ea:48:8a:7d:cb:03:8f:e6:93:62:c6:f8:8d:af:
                    82:6a:3f:ea:97:62:02:35:f5:5c:39:81:78:e1:3f:
                    c7:f5:8e:e5:c3:86:0d:87:ea:5f:ed:f7:21:db:6a:
                    0b:ea:59:da:1b:e4:29:6e:98:ee:6d:a4:88:d0:17:
                    1b:a6:53:43:f5:8d:08:35:66:46:ee:15:79:91:fb:
                    c3:46:19:b6:22:92:ef:e7:90:c8:70:d8:31:77:b8:
                    65:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9E:9D:29:1B:51:EB:80:AB:8A:52:8D:8D:2C:35:7A:74:A6:E5:9B
            X509v3 Authority Key Identifier:
                keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/9D979510990811F08B636355C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.109.0/24
                  203.28.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:4e:06:51:e0:95:70:65:cd:89:5d:4e:73:9d:7d:61:89:
         b7:8a:91:84:ef:e4:bb:0f:03:95:c9:84:67:3e:b0:c6:3b:79:
         d4:f9:68:05:98:48:5d:88:15:aa:b6:e3:8f:f4:9b:fc:2c:99:
         22:cf:27:4c:c3:a3:53:3a:04:a5:3a:69:2f:fc:e1:c4:e6:6b:
         9f:65:91:6d:0e:07:46:24:f8:e0:78:45:6f:d7:9a:a1:ec:da:
         2e:44:97:a0:06:23:6b:05:2e:3e:a1:18:6b:30:3a:98:fe:26:
         66:8b:ce:b9:f6:d5:39:35:8c:e6:3f:78:ca:c7:64:29:9d:02:
         18:48:2b:89:38:09:c0:ec:72:b3:16:e9:c8:16:07:e6:c1:91:
         c4:d9:62:a7:52:e1:e2:bf:bc:52:cb:74:0f:58:de:34:a6:66:
         d3:1f:63:87:65:dc:79:3d:85:4d:a8:c3:5c:01:9e:91:0c:5f:
         2a:50:b4:b9:f7:d1:47:29:9c:09:81:6c:54:07:c4:5e:1c:b3:
         93:01:fd:1b:1a:8c:1e:75:ab:0a:00:6b:d7:a5:e7:60:81:6d:
         59:ad:b9:3e:78:70:27:5b:04:ba:10:e7:71:16:66:2c:6d:03:
         e1:6b:c2:52:9f:f6:9e:19:4f:a9:0f:a6:b7:d2:d9:df:94:97:
         a5:9e:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:54 2026 by rpki-client