Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/43A8A46EACBC11EBB0651B63C4F9AE02.roa
File:                     43A8A46EACBC11EBB0651B63C4F9AE02.roa (raw, json)
Hash identifier:          H6B6O0MUDuGmdlVs1fFKTz2DyB+jNWGXxwAsMamv3Hw=
Subject key identifier:   24:0B:D5:B5:B5:5B:26:33:EF:0F:90:AD:75:14:B9:FE:62:C1:6F:40
Certificate issuer:       /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial:       08D1
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/43A8A46EACBC11EBB0651B63C4F9AE02.roa
Signing time:             Wed 26 Aug 2026 20:41:31 +0000
ROA not before:           Wed 26 Aug 2026 20:41:31 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137443
IP address blocks:        103.153.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
                          rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257 (0x8d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
        Validity
            Not Before: Aug 26 20:41:31 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8f4f7a-6d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:f4:97:a9:1e:dc:68:69:da:df:36:19:37:
                    81:90:1f:e2:06:1f:0e:b2:d1:2d:aa:30:72:ff:b9:
                    02:0b:b5:7b:6c:f8:95:fd:ff:0e:be:e0:b8:f0:76:
                    c1:06:f6:be:f2:b2:d9:da:56:c4:e4:43:4b:f0:d0:
                    44:73:7a:41:cc:35:ce:7e:de:21:8d:54:2c:7b:ba:
                    ca:44:c5:b3:b8:21:e3:4a:b3:e1:c2:a3:56:0f:2c:
                    bf:fd:38:d8:d0:a8:38:0c:89:7c:f0:a8:e7:b7:93:
                    60:b3:8e:f5:16:44:0c:73:03:80:46:c7:c0:7b:f2:
                    fe:b3:f9:39:46:a3:a0:b5:a2:fd:25:c0:3c:1d:02:
                    37:72:b6:f4:2a:ae:c3:95:fc:c0:ff:4c:a4:2a:75:
                    51:1c:bf:ae:d8:6a:86:dc:07:c7:7e:6e:8d:d3:48:
                    05:dc:c4:b4:d7:88:6e:21:e3:81:df:03:0f:58:d4:
                    38:07:ae:7d:e7:0a:1c:0c:54:7a:23:46:03:d1:bb:
                    41:b0:e4:91:35:de:08:e2:dd:50:e6:dc:d6:70:aa:
                    ce:c7:7e:7d:ad:87:b4:14:22:39:e7:66:ac:08:69:
                    a8:ea:c7:0f:f0:d2:57:c3:64:fa:36:4d:2d:a4:f5:
                    bf:f4:4e:7e:59:09:f5:77:28:84:64:1b:07:54:b8:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0B:D5:B5:B5:5B:26:33:EF:0F:90:AD:75:14:B9:FE:62:C1:6F:40
            X509v3 Authority Key Identifier:
                keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/43A8A46EACBC11EBB0651B63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:21:c7:75:67:be:3a:7b:04:d4:c8:b7:54:a4:f9:b7:0e:98:
         8d:cb:a3:06:7d:94:cb:1a:8c:d4:46:86:af:ee:a1:75:a1:a5:
         8f:9c:7c:50:1d:cb:d7:6f:07:39:19:c4:52:e2:74:c3:17:4b:
         c4:19:8e:7a:5e:5c:17:f4:c3:a6:47:5b:b8:cb:f5:35:dd:9a:
         3a:8d:0d:a6:c1:ad:3e:3d:8c:4d:3e:bb:7a:d8:5b:29:21:dd:
         de:d7:fe:21:44:ef:86:de:db:d3:10:95:28:06:c8:07:58:16:
         8b:92:af:14:24:38:d2:66:55:0b:36:da:89:65:5f:85:1c:5d:
         07:18:a0:3e:ea:27:fc:82:9f:87:67:3b:f2:9e:e6:dc:80:30:
         eb:ff:83:3a:19:d1:f6:64:f4:17:88:65:52:3c:45:f8:16:a2:
         75:2d:86:06:d2:7f:4c:65:78:01:10:73:a6:4e:20:40:3b:b1:
         b0:db:18:07:7d:7a:13:3e:6a:30:dc:be:fe:80:3f:64:8a:b6:
         90:52:e9:c7:5e:a3:fe:fc:9a:a1:52:13:b8:81:b2:98:7f:29:
         9f:57:a9:e0:e1:92:f6:ae:39:fd:fa:a0:6c:81:8a:45:67:d8:
         41:e7:34:6b:4e:7b:63:d2:e3:48:01:86:b0:93:8d:8f:db:59:
         24:09:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:30:59 2026 by rpki-client