Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/3DA866FACE8E11F0B0195B54C4F9AE02.roa
File:                     3DA866FACE8E11F0B0195B54C4F9AE02.roa (raw, json)
Hash identifier:          LaDSP0AuIcyunEBlwxJd5PmOZKzoI39LoY5pqockQJQ=
Subject key identifier:   83:E1:1B:85:F4:93:98:57:F2:4F:0C:4E:7D:73:A7:85:83:66:A0:A3
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       55
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/3DA866FACE8E11F0B0195B54C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:17:41 +0000
ROA not before:           Fri 23 Jan 2026 07:35:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132883
IP address blocks:        103.147.12.0/24 maxlen: 24
                          103.147.13.0/24 maxlen: 24
                          2402:3320:3320::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Jan 23 07:35:31 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3da05-33b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7c:27:5e:dc:81:75:f0:85:65:67:bd:33:ef:
                    92:48:7b:80:c9:0e:ac:9b:b1:71:c5:cf:57:cc:63:
                    1e:83:64:c0:cc:f9:0e:46:29:a6:58:0e:01:72:93:
                    e9:8e:01:e3:b5:d7:10:d4:c7:02:4c:d4:f7:a8:dc:
                    88:64:c2:4a:ce:c4:d2:1c:a1:da:2d:12:9a:e2:45:
                    1c:23:a3:81:b3:47:9a:f3:ec:c0:8f:37:2a:f9:89:
                    29:21:c7:54:66:46:fe:bf:48:2d:c4:b1:9d:b0:52:
                    e2:83:66:4d:e3:c1:a5:05:0d:05:3a:ea:99:5c:e9:
                    a1:a3:93:60:bb:fe:b2:06:7d:b0:20:b3:43:91:05:
                    27:5a:75:4b:92:1e:ef:d0:8a:a3:00:29:71:8c:34:
                    a4:a2:28:63:d2:12:0d:eb:03:9d:45:4c:76:08:14:
                    d6:cb:86:a0:ab:b1:89:d0:87:47:0c:44:c1:bd:f9:
                    a7:cd:24:de:3d:f8:74:33:bf:c9:07:49:45:40:b5:
                    4b:cc:02:e0:99:a6:73:f3:38:f7:86:80:8f:3b:5f:
                    97:ab:b7:3b:f4:c8:7f:ac:5c:fa:8c:01:3b:bc:1f:
                    b0:ea:a0:5d:1f:59:c7:42:d7:e7:81:24:80:37:12:
                    c6:12:60:b3:b0:a7:17:d0:cc:b2:40:3c:6a:94:e0:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E1:1B:85:F4:93:98:57:F2:4F:0C:4E:7D:73:A7:85:83:66:A0:A3
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/3DA866FACE8E11F0B0195B54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.12.0/23
                IPv6:
                  2402:3320:3320::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:04:62:9b:97:f5:4e:28:83:d9:d2:3c:e3:b7:77:a4:e1:e0:
         b8:e2:4b:e9:04:ab:f8:ef:8c:d4:53:4c:07:60:f2:d8:70:8d:
         ba:2e:34:da:07:ab:0b:a1:25:89:9a:c8:b6:d9:f0:ac:35:d8:
         ae:22:83:72:1c:0b:3d:de:9a:35:bc:61:34:98:3c:e3:df:c3:
         66:13:f1:c7:80:4f:d0:36:73:e6:2a:3e:9a:a4:34:6c:c0:85:
         2c:43:2c:6e:f4:96:ed:d9:c1:c2:9b:ed:7b:ef:28:ce:b9:bf:
         a8:b0:06:ca:92:cb:0b:12:7d:f4:2a:e1:78:ed:a4:95:e9:17:
         cf:56:f9:7b:4b:39:36:84:26:76:b2:9d:6e:8a:50:0c:23:ce:
         b0:9b:31:62:be:12:5f:d4:c9:32:74:f6:ef:fc:07:49:a0:72:
         01:71:57:36:49:bd:fe:80:bf:7c:c4:87:f2:81:aa:97:b1:0a:
         b9:09:0f:a9:c1:c0:c5:17:1d:60:df:73:9f:63:f3:09:9c:a0:
         fc:03:22:9b:14:31:61:14:67:27:08:7b:0b:fc:50:c2:00:0f:
         70:17:7c:5c:bb:54:b2:6a:65:55:0f:f0:ce:f9:cc:6a:65:c0:
         5c:f2:1c:4f:c7:de:25:6b:fc:0b:3a:31:cd:e1:61:b2:70:c0:
         74:62:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:17 2026 by rpki-client