Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/F40EE60A9B5C11EFAF221C2AC4F9AE02.roa
File:                     F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (raw, json)
Hash identifier:          wMJcy9/RZ84DRy4ocrFd613aXU3WIp1EJ/+o6ekr43M=
Subject key identifier:   5F:77:8C:D4:B1:F4:9A:7C:80:D6:16:F0:B2:23:5A:90:6F:6F:1C:44
Certificate issuer:       /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Certificate serial:       0265
Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/F40EE60A9B5C11EFAF221C2AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:56:45 +0000
ROA not before:           Fri 05 Dec 2025 00:40:16 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     17810
IP address blocks:        203.212.67.0/24 maxlen: 24
                          203.212.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
                          rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
        Validity
            Not Before: Dec  5 00:40:16 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4378d-b41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:f9:f2:3c:49:e7:77:21:29:dc:59:e9:60:
                    30:77:64:31:08:df:82:6b:67:5f:7f:9b:9a:f8:4c:
                    8f:e6:2d:69:c6:17:89:45:01:f5:f6:d0:56:e6:7f:
                    df:f8:8f:54:ce:ec:5e:b9:0f:f2:03:2e:dc:d3:43:
                    f3:6f:4d:b7:69:56:c0:88:2c:ce:ac:a8:ec:23:ae:
                    6e:95:57:69:34:1b:42:a7:e1:f7:29:6f:05:09:2c:
                    d0:ef:76:5f:12:37:fb:3f:59:a7:c1:63:16:df:42:
                    cc:13:6c:79:ea:3a:7a:78:de:72:c1:68:e0:5c:4c:
                    a2:3f:1e:2e:4f:68:f5:48:e6:05:5e:da:07:95:81:
                    ec:3a:fb:c6:69:30:a4:bd:94:00:1d:d6:50:9b:57:
                    11:e4:b2:60:a3:82:06:ee:d3:af:92:00:0a:06:99:
                    ba:fa:fc:4e:7b:cb:4c:8a:10:b8:47:62:19:eb:35:
                    75:b6:91:bd:ad:10:b4:23:6e:12:24:51:5e:ac:8c:
                    64:2b:d0:4a:e4:4d:06:ec:a0:4b:c7:4b:ef:20:c6:
                    13:75:c6:26:10:12:e4:3d:d5:50:e0:c8:4a:cf:73:
                    77:2f:cf:b2:65:3b:bb:8d:01:cf:9b:66:56:90:d0:
                    1b:fd:14:1b:d8:b3:87:84:e7:e8:cc:bc:07:44:8c:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:77:8C:D4:B1:F4:9A:7C:80:D6:16:F0:B2:23:5A:90:6F:6F:1C:44
            X509v3 Authority Key Identifier:
                keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/F40EE60A9B5C11EFAF221C2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.212.67.0/24
                  203.212.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:58:c8:82:f8:0e:85:44:06:dc:8c:10:01:06:0f:6c:c8:
         d4:f2:7e:36:7b:33:24:0b:32:38:72:5f:2f:d9:e4:85:ca:30:
         0e:78:97:81:d6:38:9e:33:b5:ce:b8:11:ae:3c:6c:71:da:89:
         ea:18:3b:32:78:7f:87:51:9c:2b:4c:cc:db:88:22:43:4d:23:
         28:31:9e:b4:8a:91:44:c6:72:f9:fa:d9:5c:ec:25:e3:e5:54:
         4e:e9:6d:6a:9b:24:54:32:ad:1d:0e:33:74:44:04:ec:6d:43:
         36:15:8d:58:38:24:4f:86:c5:32:7b:b5:64:25:e4:8d:72:82:
         ff:c1:c6:62:78:ee:af:a8:6a:3e:ec:ac:01:9c:ef:65:8d:4a:
         15:53:29:a2:9f:90:71:e9:68:42:de:8d:2f:c2:bd:6e:3b:c7:
         cd:bf:c8:ed:4c:ca:7a:10:46:4b:6b:78:eb:e3:1f:3b:e3:fb:
         72:06:36:af:6e:de:da:14:aa:f1:e9:93:fb:c0:7a:15:71:b1:
         21:b1:53:72:00:4f:45:45:65:75:54:8f:ab:7b:65:91:58:38:
         98:3a:23:24:09:db:49:14:80:b8:fe:49:84:ae:86:df:4c:46:
         f6:8e:80:fd:1b:d7:08:c8:97:3f:b4:cb:2e:c5:5d:5c:9a:55:
         a7:47:77:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:53 2026 by rpki-client