Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/C0D6C00E8E5511EBA9EA9977C4F9AE02.roa
File:                     C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (raw, json)
Hash identifier:          RFr+wY8YjBbEu1OwArA3TAYM2l70BtpGvPxcKHML3E0=
Subject key identifier:   1B:B5:63:A8:DB:ED:47:03:AD:E8:16:09:9D:AC:E6:F6:D2:A1:04:FD
Certificate issuer:       /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167
Certificate serial:       06D8
Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/C0D6C00E8E5511EBA9EA9977C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:46:10 +0000
ROA not before:           Fri 08 Aug 2025 23:04:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     22697
IP address blocks:        103.140.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl
                          rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752 (0x6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167
        Validity
            Not Before: Aug  8 23:04:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40ae2-97d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:de:b8:16:fa:32:fd:3c:15:5b:ed:a4:c1:
                    bb:e5:b3:43:2d:c9:a5:f0:70:22:41:d1:48:e2:7c:
                    04:17:50:14:23:9f:ea:6a:2d:94:59:e0:ab:f2:74:
                    a6:d9:7e:f3:e7:4e:32:57:f0:64:29:29:cb:8e:6a:
                    34:d4:1a:76:2b:fd:ed:8b:44:94:f0:0b:15:d2:8d:
                    76:b8:ec:fa:e1:31:20:70:41:74:f8:81:35:88:76:
                    97:b0:f4:f9:ce:bb:06:33:0e:57:d4:fb:41:14:4d:
                    2e:e5:ae:bf:3a:b8:95:23:de:41:27:3b:ab:51:e3:
                    77:c8:a7:36:35:43:7d:6a:29:ac:80:f9:8b:75:6d:
                    b3:7c:2c:02:52:89:3d:e8:91:b3:99:de:cd:11:22:
                    58:45:46:02:45:f6:8d:75:79:04:20:f2:4f:2d:f7:
                    e3:6e:9d:84:0d:46:40:60:a1:d6:0e:9c:6c:df:77:
                    44:16:f9:ba:76:f7:27:b7:6e:4c:73:d5:40:18:ef:
                    be:3b:13:84:79:c3:55:fd:0a:e3:3f:68:a7:a7:73:
                    82:d6:d7:52:9a:37:ba:44:32:c1:fa:f3:73:e6:f4:
                    f5:76:36:3f:10:ec:44:52:34:19:54:6d:6d:74:35:
                    3b:08:6c:85:ce:6c:d3:22:0e:84:77:7e:56:1d:31:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B5:63:A8:DB:ED:47:03:AD:E8:16:09:9D:AC:E6:F6:D2:A1:04:FD
            X509v3 Authority Key Identifier:
                keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/C0D6C00E8E5511EBA9EA9977C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:e1:2e:35:f1:5c:57:c7:67:94:4c:d5:21:a2:ae:e9:c4:6e:
         09:41:2a:13:13:38:9b:16:fc:c5:c1:c6:9f:30:c1:e0:25:ab:
         ee:92:76:98:3b:c3:4f:c7:f2:9b:c3:bd:bf:b4:e2:71:09:f0:
         b9:f4:23:0d:7f:07:f2:0c:05:12:c8:30:fb:ed:0f:02:b6:4e:
         02:70:2c:ac:1a:9c:dc:f8:a4:3a:26:0f:31:54:28:c1:ba:6b:
         56:2f:b7:e0:4b:3e:4a:01:20:eb:2b:a3:70:00:55:2b:f8:bf:
         2c:d0:37:87:46:4f:04:c1:46:2e:d4:fa:cc:e8:58:e4:7d:73:
         d3:9c:73:33:83:9e:ee:ba:be:03:34:77:4d:0a:32:0c:b6:9f:
         b1:4f:fb:ec:45:6d:27:22:9a:31:b7:02:a7:e3:0d:4e:95:67:
         e3:92:22:38:f2:c1:17:57:a7:94:c3:84:4b:f5:62:9f:6f:87:
         f1:90:e0:e7:36:c6:b9:89:15:ef:0c:a3:32:8f:e0:07:59:07:
         3e:29:d6:58:e2:54:ee:19:5b:c1:55:93:4d:90:33:42:19:c6:
         c5:17:32:50:07:50:26:98:ee:3b:df:44:ab:3f:d2:81:ab:03:
         73:e7:04:f7:aa:da:43:6e:1a:4f:3c:d1:f8:3a:f5:1a:26:ec:
         28:d9:88:18
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZCRDUxMTAvBgNVBAUTKEYwNUJCRDI2RDRERTA4RjY1ODhDQjdGQUZGQjE4MzBG
QUJDMzcxNjcwHhcNMjUwODA4MjMwNDQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGFlMi05N2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxA/euBb6Mv08FVvtpMG75bNDLcml8HAiQdFI4nwEF1AUI5/qai2UWeCr8nSm
2X7z504yV/BkKSnLjmo01Bp2K/3ti0SU8AsV0o12uOz64TEgcEF0+IE1iHaXsPT5
zrsGMw5X1PtBFE0u5a6/OriVI95BJzurUeN3yKc2NUN9aimsgPmLdW2zfCwCUok9
6JGzmd7NESJYRUYCRfaNdXkEIPJPLffjbp2EDUZAYKHWDpxs33dEFvm6dvcnt25M
c9VAGO++OxOEecNV/QrjP2inp3OC1tdSmje6RDLB+vNz5vT1djY/EOxEUjQZVG1t
dDU7CGyFzmzTIg6Ed35WHTEQvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBu1Y6jb
7UcDregWCZ2s5vbSoQT9MB8GA1UdIwQYMBaAFPBbvSbU3gj2WIy3+v+xgw+rw3Fn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJENS8wRDI2RDRBMDhF
NTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQWllqTGY2XzdHREQ2dkRj
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhGdTlKdFRlQ1BaWWpMZjZfN0dERDZ2RGNXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZCRDUvMEQyNkQ0QTA4RTU0MTFFQjkzMzA4QTc1QzRGOUFFMDIvQzBENkMwMEU4
RTU1MTFFQkE5RUE5OTc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4wcMA0GCSqGSIb3DQEBCwUAA4IBAQCV4S418VxXx2eUTNUhoq7p
xG4JQSoTEzibFvzFwcafMMHgJavuknaYO8NPx/Kbw72/tOJxCfC59CMNfwfyDAUS
yDD77Q8Ctk4CcCysGpzc+KQ6Jg8xVCjBumtWL7fgSz5KASDrK6NwAFUr+L8s0DeH
Rk8EwUYu1PrM6FjkfXPTnHMzg57uur4DNHdNCjIMtp+xT/vsRW0nIpoxtwKn4w1O
lWfjkiI48sEXV6eUw4RL9WKfb4fxkODnNsa5iRXvDKMyj+AHWQc+KdZY4lTuGVvB
VZNNkDNCGcbFFzJQB1AmmO4730SrP9KBqwNz5wT3qtpDbhpPPNH4OvUaJuwo2YgY
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:58 2026 by rpki-client