Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/ABCAF01CA86211ED9ED67945C4F9AE02.roa
File:                     ABCAF01CA86211ED9ED67945C4F9AE02.roa (raw, json)
Hash identifier:          47X3nzUp7xPho44mRuuPE33bAAkUfrSc0iB1uHnmv9k=
Subject key identifier:   A1:56:32:47:E6:EA:03:B0:44:6E:A3:20:09:DD:16:EE:FE:94:8E:52
Certificate issuer:       /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Certificate serial:       0247
Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/ABCAF01CA86211ED9ED67945C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:58:18 +0000
ROA not before:           Thu 19 Feb 2026 01:22:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     150718
IP address blocks:        103.67.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl
                          rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
        Validity
            Not Before: Feb 19 01:22:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a437ea-fa60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:70:a2:f8:e8:69:cb:eb:e5:22:22:4e:62:
                    09:30:dd:9b:f4:73:e0:ae:15:a9:76:e3:ba:3d:fe:
                    a4:dd:0f:d1:f2:6e:c8:75:0e:74:20:ea:3b:72:5d:
                    a2:cd:9f:b1:2e:e7:88:e7:a1:16:7d:11:f3:56:b1:
                    2a:de:ab:05:6c:9f:a1:a3:f6:76:c4:27:b7:be:43:
                    a7:4c:5e:dc:55:da:b0:02:12:62:9f:f2:96:16:63:
                    29:06:a0:40:1d:20:d4:65:a8:84:f4:eb:31:55:c2:
                    ae:3d:67:bc:af:a2:c2:88:03:a1:58:49:8f:19:41:
                    00:2b:71:e4:cd:32:c2:77:48:e9:b8:46:15:29:b1:
                    4e:ba:4a:80:58:4d:a1:a1:e4:81:16:ac:35:a0:45:
                    b4:03:80:71:1d:51:b1:f8:b0:cb:eb:e0:22:45:29:
                    39:60:89:bd:4e:f9:85:28:bd:1e:df:41:86:6f:03:
                    13:39:fc:1a:a6:3a:1c:2f:5b:7a:b4:22:52:2c:8a:
                    e0:88:1e:19:3f:2c:f5:7e:b9:43:62:a2:ca:13:73:
                    60:3a:4d:5a:07:6b:5b:56:11:40:d4:2a:1e:d0:2c:
                    87:d3:1a:09:de:26:5e:9e:47:18:a4:c9:c1:3d:f8:
                    61:df:a7:d1:c4:30:67:2c:36:60:94:8f:7d:54:f3:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:56:32:47:E6:EA:03:B0:44:6E:A3:20:09:DD:16:EE:FE:94:8E:52
            X509v3 Authority Key Identifier:
                keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/ABCAF01CA86211ED9ED67945C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:0c:61:28:6b:f7:dd:1b:d5:e5:4b:4f:40:22:34:9b:85:3e:
         06:48:64:e1:fe:a4:14:d9:72:2b:77:d7:75:1e:1b:78:49:6d:
         4f:6d:69:7c:8c:30:d0:d6:72:1e:07:8c:af:1d:13:6f:88:60:
         60:e6:61:aa:da:ca:93:17:f8:10:c1:5b:b0:fc:2c:b5:b7:60:
         38:52:07:4f:5d:7a:d6:5f:73:00:4d:7f:24:82:f9:88:7f:3e:
         62:e6:bc:20:b4:b0:b3:59:6e:8f:cf:3d:df:e2:44:3b:f7:b0:
         40:97:1f:c8:c7:8c:f6:32:b4:bc:8a:cd:1d:b2:ea:48:2b:df:
         75:3c:2d:8e:c9:0e:cb:03:f9:ee:ce:d8:90:91:6c:37:4b:b6:
         b3:75:df:3c:05:1e:66:bb:1a:85:f2:68:e3:35:ce:0a:00:f0:
         8d:84:98:2d:93:14:12:d8:d7:e0:3c:f0:c0:23:26:a4:53:8e:
         08:f2:c0:13:2c:64:a5:95:9b:91:3f:06:34:f0:1e:71:ef:29:
         1a:60:83:d5:a8:3a:9d:e6:a5:a0:d8:c8:4e:bb:a9:9a:28:84:
         82:e5:0c:52:ca:a7:52:c0:92:06:49:e1:7d:9c:69:47:58:5b:
         f5:1f:e6:94:f2:f5:b9:57:89:bb:bd:31:9f:0c:d6:88:16:cc:
         82:14:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:05 2026 by rpki-client