Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
File:                     2DC89280AB5E11F087B3A63DC4F9AE02.roa (raw, json)
Hash identifier:          OWRTx8KpVw3aAexIAQhAzl19KW5AxihgsszlMUbzCIw=
Subject key identifier:   9F:8D:80:64:5E:09:8C:25:DE:1D:DE:2D:84:AB:EE:44:91:19:36:FD
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       53
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:17:39 +0000
ROA not before:           Fri 17 Oct 2025 13:35:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38186
IP address blocks:        103.147.12.0/24 maxlen: 24
                          103.147.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Oct 17 13:35:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3da02-6509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:ba:98:20:69:1f:73:a0:97:9e:6d:5f:c0:
                    f2:b8:3a:9d:5f:dc:85:dc:7e:38:bc:e3:97:91:07:
                    77:7a:14:06:a9:7b:15:b7:23:fe:06:03:88:b2:2b:
                    5b:7c:c1:6c:67:ce:75:c8:69:d5:b1:72:48:da:20:
                    50:e1:03:c3:a9:8f:a4:f2:cf:58:95:a1:fe:57:b3:
                    af:ab:38:ab:4b:aa:94:10:62:80:29:d2:bb:fe:b3:
                    d3:3c:f4:81:07:d0:46:89:3b:3e:27:3a:0c:05:43:
                    f5:64:05:22:fa:0a:79:bb:a4:ad:d5:1b:a0:72:d9:
                    6c:8a:5f:e5:af:b9:f9:ed:b8:f3:ee:58:39:e1:ed:
                    99:33:0c:75:85:ed:66:11:9b:a1:24:d8:09:7d:fe:
                    5e:22:60:98:1e:f4:95:04:2d:b1:88:44:3f:7a:24:
                    a9:ec:7f:87:6d:cb:9f:37:b0:73:b8:e6:1b:b2:d8:
                    d4:77:0f:f0:de:7a:75:b0:7d:a7:49:8d:cc:05:fa:
                    e6:2f:1f:11:ec:54:48:83:d1:28:1d:8d:ae:07:f4:
                    7e:b7:34:ee:2d:05:57:b8:f6:27:ca:4b:e5:9f:5d:
                    a6:10:1c:2a:53:19:fe:39:38:c6:55:4e:82:80:c3:
                    29:3c:06:b3:23:53:94:93:9b:d1:82:27:8c:e5:25:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8D:80:64:5E:09:8C:25:DE:1D:DE:2D:84:AB:EE:44:91:19:36:FD
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:8b:ee:18:9d:9c:54:97:ca:29:3c:88:51:24:44:a4:c4:45:
         58:7a:b4:d0:4c:b0:d0:2e:dd:54:f9:64:c0:d3:ab:fc:4b:0f:
         be:48:43:04:8d:26:83:42:4a:78:62:76:c6:40:6c:cc:62:02:
         d5:e5:71:13:8c:80:88:d6:71:58:8f:7d:cc:b9:03:a4:86:ac:
         c8:c3:e9:4f:26:41:64:a7:c8:1c:c3:a5:79:0d:14:bc:18:0c:
         5b:c3:e0:fd:9e:7a:37:ff:ae:db:c8:80:c1:14:06:27:be:17:
         a3:71:82:7f:2d:54:b8:55:8d:d4:a0:46:69:60:ae:ba:07:f7:
         5e:78:98:f0:17:28:93:69:29:66:cc:1f:e6:b5:4c:58:21:0b:
         7a:bc:f6:b0:c9:26:9a:65:17:73:f9:e2:a2:21:00:cf:90:83:
         1e:a8:4f:66:32:87:26:b1:e3:8a:f2:bd:d9:10:93:5d:e0:9e:
         af:7c:0e:d3:c1:d2:41:9c:2c:ad:17:ec:09:3e:68:17:a2:05:
         b1:a9:53:11:a9:48:aa:5e:b9:1d:57:b5:3c:2c:b8:6b:b0:21:
         47:23:7b:8e:f1:64:a7:b7:14:89:9e:66:f1:d7:69:16:7a:37:
         2c:33:ad:9e:47:f3:da:24:be:0e:de:07:94:cd:23:d6:8d:41:
         20:67:74:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:20 2026 by rpki-client