Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/3DC507001C8F11E9990F665CC4F9AE02.roa
File:                     3DC507001C8F11E9990F665CC4F9AE02.roa (raw, json)
Hash identifier:          LqZilz3sRH43unXJ9onZj0KId84TFQfbYE3+ugFCTrQ=
Subject key identifier:   85:A2:C2:A1:60:AB:5A:A5:D5:2D:85:B2:AA:1C:F1:B5:3C:E8:0A:B4
Certificate issuer:       /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial:       191C
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/3DC507001C8F11E9990F665CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:43:05 +0000
ROA not before:           Tue 04 Feb 2025 16:54:20 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     395734
IP address blocks:        103.83.88.0/24 maxlen: 24
                          103.83.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
                          rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6428 (0x191c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
        Validity
            Not Before: Feb  4 16:54:20 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a44268-9136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:89:64:1a:a9:9b:7d:12:ed:35:3f:09:4a:
                    19:28:9a:9b:63:ae:84:29:59:b2:d5:f0:f0:71:e7:
                    b3:58:89:f4:63:2d:04:68:ed:1c:3e:fc:10:3d:09:
                    6b:e1:8c:d3:6f:7d:bb:bc:49:01:42:e6:2c:5c:34:
                    e6:89:cf:f2:fa:b9:f7:07:79:81:1c:81:73:b4:26:
                    a2:2c:ae:31:23:c0:7e:4b:4d:14:a1:cc:8a:fe:a2:
                    20:ae:df:68:14:29:02:3e:d7:8b:6c:36:ae:26:15:
                    b3:17:8a:82:01:c1:71:db:c4:fa:4e:61:f1:cb:53:
                    5a:6a:c1:de:dd:2f:63:4b:21:a0:a6:ac:88:5d:a4:
                    08:82:77:de:b0:2f:59:51:46:d5:40:55:f9:89:12:
                    ce:63:c4:67:de:d7:e0:0c:d4:35:6c:a7:77:9a:59:
                    42:9c:d9:7a:a9:61:48:9a:c3:f1:ba:7e:88:83:f9:
                    6f:76:59:b8:56:5f:7c:19:6c:8d:c5:ae:9b:3b:39:
                    7a:4c:68:f2:3a:49:65:a7:fe:f2:2a:7c:8b:72:2d:
                    8d:6c:62:cf:21:e5:c4:bb:c3:75:56:3f:50:ef:18:
                    a8:16:18:2c:b2:82:ca:24:45:ac:15:be:80:46:2e:
                    52:8c:ce:17:e1:6e:a4:08:49:fa:91:4a:61:69:93:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A2:C2:A1:60:AB:5A:A5:D5:2D:85:B2:AA:1C:F1:B5:3C:E8:0A:B4
            X509v3 Authority Key Identifier:
                keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/3DC507001C8F11E9990F665CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.88.0/24
                  103.83.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:68:06:62:ee:ea:b4:8a:43:16:c5:27:cc:b1:63:b2:ad:
         04:84:d7:c7:7e:ef:39:1a:ed:39:81:f5:bc:74:7e:ce:ca:a6:
         ef:04:73:f8:d6:83:5f:6f:98:8a:9a:46:73:95:97:42:b0:68:
         32:19:96:27:47:0a:9b:ed:3f:f3:97:1e:28:f8:6b:cb:71:e8:
         0e:4f:36:6d:17:e1:67:b5:89:83:12:d9:98:e1:63:7d:d8:8d:
         b7:73:c9:81:79:c8:70:b1:b4:13:b0:27:0f:47:1b:07:9c:98:
         74:dd:0d:73:e5:5d:cd:66:d7:4d:20:d6:e3:88:cc:12:36:40:
         10:34:48:47:0f:2f:10:e4:01:95:a9:2f:d6:06:25:58:d0:ca:
         c7:60:f6:6b:12:9c:ba:f1:d2:63:38:97:c7:78:b6:ea:56:19:
         c0:a4:91:32:f1:79:ec:f7:d9:95:f4:6d:69:dd:0e:a6:e6:b2:
         c4:51:32:c1:83:63:5b:b8:c0:9d:cb:65:fe:90:fc:79:15:94:
         82:60:8f:5c:1d:f0:59:8a:06:29:d4:c3:1d:31:f3:0a:87:c3:
         d3:15:e3:11:52:e7:e2:0f:f3:eb:5e:23:05:9e:12:9a:c9:28:
         02:90:ae:e4:7c:15:1b:1f:63:89:a3:20:38:d0:7a:90:d2:07:
         e1:1e:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:31 2026 by rpki-client