Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/3A549A1EB00211F0A3A86535C4F9AE02.roa
File:                     3A549A1EB00211F0A3A86535C4F9AE02.roa (raw, json)
Hash identifier:          OJdnS3s/MrY9IyrrziaB4xWvrqFFC0p4mR7jBhXa9ZI=
Subject key identifier:   51:94:B5:6D:85:78:E4:39:2A:F5:F4:8D:45:4A:FE:BC:D4:6A:2D:C8
Certificate issuer:       /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial:       05B1
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/3A549A1EB00211F0A3A86535C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:36:29 +0000
ROA not before:           Thu 23 Oct 2025 11:20:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4788
IP address blocks:        103.168.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
                          rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
        Validity
            Not Before: Oct 23 11:20:06 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4791d-e705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:16:44:80:03:80:73:d9:2f:c2:6d:60:2d:
                    61:f3:c0:a6:8a:34:a9:0d:06:eb:62:be:95:cc:a2:
                    0f:10:a8:ea:28:9a:1e:dd:35:cb:66:a6:c9:2c:e0:
                    d7:e0:f5:83:46:a5:b7:f8:37:54:06:d7:3a:71:9b:
                    10:71:f6:ba:5c:69:af:54:c1:57:b4:df:56:59:1f:
                    8f:20:5c:f7:6c:ad:b6:86:2e:f1:a8:14:eb:e3:28:
                    37:5f:19:41:c9:11:94:31:db:30:8c:41:6c:a3:32:
                    e3:e6:c4:1d:c7:b9:84:fa:e6:89:12:d3:db:46:38:
                    e5:af:cc:4d:14:f5:cb:0e:1b:64:f8:f3:19:db:d3:
                    4a:0d:49:91:04:64:41:9f:a3:2f:74:7d:18:ea:2d:
                    8a:8e:94:13:91:72:d3:42:24:23:85:67:a6:2b:73:
                    cc:5d:7a:cb:c7:2e:9c:63:22:d9:51:71:bf:fa:d2:
                    7e:d0:91:cb:8b:0d:4b:fc:de:ed:33:78:90:16:ff:
                    de:00:b4:4d:d4:17:d5:bf:b4:5e:fd:9c:2d:ec:52:
                    84:d2:f4:a9:eb:31:a2:4c:c7:6a:f4:66:a8:5d:d0:
                    70:bf:df:e9:99:18:34:7f:06:48:03:cc:a9:29:d3:
                    8f:a1:5b:b8:0e:a5:a6:c2:bb:80:bb:88:7b:8e:d4:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:94:B5:6D:85:78:E4:39:2A:F5:F4:8D:45:4A:FE:BC:D4:6A:2D:C8
            X509v3 Authority Key Identifier:
                keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/3A549A1EB00211F0A3A86535C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:5c:3a:d0:c6:2d:4c:a1:03:37:c3:ba:ce:78:38:d9:6b:8c:
         96:7c:e9:9b:92:47:0e:a2:61:a0:1b:fd:99:db:b5:ed:08:37:
         14:d1:b7:2d:26:06:6f:d1:a5:64:f2:59:12:db:ef:d6:fd:2e:
         76:90:7a:1d:62:44:63:87:41:32:20:ad:ad:3f:b7:1f:28:2a:
         0f:a0:16:3c:2b:8e:3a:13:eb:e4:d2:4a:54:50:79:cc:16:7f:
         d9:0d:3b:09:af:c2:8c:5c:54:06:35:f2:c4:3c:4e:c6:79:20:
         3f:ad:4e:a8:78:3c:26:7e:27:a2:0d:2b:18:bb:66:6b:18:1f:
         ae:84:6d:b2:b7:71:bd:91:8d:75:45:4d:1a:3c:00:66:d7:98:
         de:b1:3c:ae:41:8b:a9:66:ca:c3:d2:57:67:82:7b:0d:f3:0a:
         c9:ab:9f:ba:ef:3f:77:87:7e:5a:67:7d:7c:7c:f8:74:64:d6:
         c9:fa:af:93:31:68:fa:30:9d:d3:14:8a:2d:3c:d7:9f:b4:fc:
         12:16:f2:ba:1a:ab:25:9e:93:a9:6e:48:38:cd:bd:f4:d9:d7:
         d1:32:f1:c9:5f:d8:3a:26:be:01:fe:67:b8:ff:a1:8b:ff:c3:
         bd:7d:a1:f4:10:cc:29:3c:e5:37:34:d4:67:54:81:a5:2b:6c:
         69:08:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:33 2026 by rpki-client