Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/2012E112712611EB8BCB2B84C4F9AE02.roa
File:                     2012E112712611EB8BCB2B84C4F9AE02.roa (raw, json)
Hash identifier:          n7fP3pLJmaEqQfXLTPU4EWpKBPZOXZFY26Hn4DvO7dw=
Subject key identifier:   E2:30:B6:D0:08:11:4B:16:7F:CC:16:CE:79:D2:C4:A3:18:53:F1:46
Certificate issuer:       /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial:       0F46
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/2012E112712611EB8BCB2B84C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:09:12 +0000
ROA not before:           Fri 20 Feb 2026 18:15:13 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     58955
IP address blocks:        116.206.124.0/22 maxlen: 22
                          116.206.124.0/24 maxlen: 24
                          116.206.125.0/24 maxlen: 24
                          116.206.126.0/24 maxlen: 24
                          116.206.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
                          rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3910 (0xf46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
        Validity
            Not Before: Feb 20 18:15:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a472b7-d428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:42:b9:84:3e:84:6b:d7:b3:ae:11:db:59:
                    9b:d7:5a:12:67:8a:10:56:92:67:fc:ca:20:2d:7c:
                    39:2b:b8:50:2b:55:94:75:14:10:4d:d2:fa:76:25:
                    bb:5c:e5:ce:82:58:7e:15:73:8a:66:63:2d:79:c4:
                    b8:db:6e:f9:32:2f:63:94:d8:9c:7c:4f:9e:2a:bd:
                    dd:f4:94:ab:30:33:75:55:ae:a6:3a:db:4d:d6:5d:
                    02:69:7c:98:d3:33:5d:37:ea:00:db:e2:ef:75:f2:
                    37:9c:24:a1:ea:d4:18:8c:9b:47:86:d0:bd:f2:3e:
                    3d:be:78:c3:49:87:ba:86:ba:f4:10:a4:6b:fa:16:
                    d9:7e:d1:aa:d2:64:2d:8a:80:99:4e:4d:34:51:6f:
                    87:b4:d7:82:c2:78:c6:8e:35:15:b7:3f:89:fb:de:
                    b7:d3:79:2a:17:68:b2:94:1f:9a:79:1e:76:c9:d3:
                    59:37:b1:06:30:ac:05:80:d9:e9:b2:f4:6c:f7:21:
                    ef:20:91:2b:3f:5a:fc:05:42:6a:9d:ca:e5:69:17:
                    e4:e4:ba:fb:f7:d2:39:87:98:a4:ea:f0:2b:f1:06:
                    34:79:97:9b:ee:59:c7:09:bf:c0:4d:a8:61:80:f4:
                    4e:d9:08:17:05:58:49:4c:10:a1:1f:0b:bf:ee:3a:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:30:B6:D0:08:11:4B:16:7F:CC:16:CE:79:D2:C4:A3:18:53:F1:46
            X509v3 Authority Key Identifier:
                keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/2012E112712611EB8BCB2B84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:0c:92:de:00:01:11:92:61:63:37:3f:3b:63:04:3a:5b:9b:
         a4:8f:3d:e8:d1:3e:5c:00:b6:50:97:b8:9f:21:3c:bd:16:ea:
         1f:fe:a6:fe:9b:7f:0e:a1:2b:a7:e2:c0:a3:36:a6:86:b0:25:
         7e:a6:4c:08:6a:3f:b0:ab:d5:62:03:e6:64:9e:77:87:70:35:
         39:80:64:23:c2:a3:5b:f1:3c:8a:f0:22:90:b4:e2:26:7e:31:
         34:e2:6b:d5:b5:3b:64:e3:01:36:85:62:9f:73:7f:80:ff:08:
         37:05:f7:a8:da:98:93:2d:b3:42:90:67:fa:55:bb:8b:3e:25:
         b1:b1:47:a3:e5:d0:0f:cc:84:6c:53:e4:a9:67:9b:b5:a5:a3:
         b9:1a:33:39:94:bb:6c:d0:5c:eb:28:f9:d3:cb:81:e3:8d:b5:
         b6:a2:1c:af:0a:39:7d:53:bf:08:b7:34:62:37:4e:fe:16:68:
         f4:87:22:34:42:11:34:85:d1:74:7b:1e:9c:c6:01:94:85:ad:
         41:11:4b:fc:60:b5:20:c1:f7:68:5e:3c:09:62:aa:59:8e:06:
         d2:ca:30:18:10:24:79:0d:24:64:f4:9d:97:91:86:90:13:de:
         cc:e8:66:b3:39:32:b2:98:cf:c6:c7:b7:ab:12:29:4c:0a:bb:
         56:12:b1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:33 2026 by rpki-client