Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
File:                     2F43497CA16711EFBB0B733EC4F9AE02.roa (raw, json)
Hash identifier:          d0DrwtBLPlNbHT1ondF9pbn7O3K+iP2daTNxBgfDMdE=
Subject key identifier:   F4:2B:68:C7:2D:45:21:29:E9:AA:0D:6C:91:8A:26:05:0F:84:90:9F
Certificate issuer:       /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial:       028F
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:32:07 +0000
ROA not before:           Fri 05 Jun 2026 02:32:07 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     135060
IP address blocks:        203.34.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
                          rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
        Validity
            Not Before: Jun  5 02:32:07 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a223527-db9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:7d:e5:67:37:b5:f2:85:1d:ce:32:41:a3:
                    fa:f0:6d:a9:33:8f:ce:30:0f:56:b8:69:06:38:90:
                    0a:ed:7b:3b:2e:bd:4b:4f:34:30:bb:75:68:00:bb:
                    94:cd:3d:54:1b:36:b9:87:49:8a:65:60:2d:50:73:
                    bb:39:e3:30:1b:b1:41:de:dc:d3:7c:49:01:59:d3:
                    51:98:77:90:10:f7:9b:fe:78:e5:15:97:01:87:9e:
                    0c:56:6a:b0:a5:39:a2:ee:44:c9:b0:72:95:fe:fe:
                    1a:37:42:0f:ea:d8:bc:1c:d5:fc:89:9e:79:c8:4b:
                    65:64:79:8a:f6:4b:cc:72:0f:27:5a:06:a5:f0:05:
                    8e:85:ad:5c:db:81:9d:9b:f6:90:da:b2:f1:04:ff:
                    2b:b0:ac:b5:8a:fb:19:28:c6:94:b1:1e:50:c6:c8:
                    fb:60:b9:4f:20:e2:3f:d0:65:42:55:b4:e5:5f:bf:
                    6b:98:52:43:32:a7:fa:4e:1b:1e:76:d6:7c:14:9e:
                    cf:39:81:ea:66:17:65:48:de:73:08:30:83:4e:85:
                    a8:35:aa:dc:e8:f4:00:29:15:24:e4:76:96:94:4a:
                    72:6a:0c:96:f1:14:32:92:88:36:5d:b1:7e:ee:24:
                    31:f2:11:f1:b9:04:bf:d1:18:1c:9b:13:19:36:91:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:68:C7:2D:45:21:29:E9:AA:0D:6C:91:8A:26:05:0F:84:90:9F
            X509v3 Authority Key Identifier:
                keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:26:83:8d:e9:51:2f:e7:ab:38:dc:ce:03:5d:40:20:39:
         66:0a:df:d8:7c:fd:56:ad:dc:cf:4d:78:4a:e1:aa:31:c9:f8:
         1e:fd:26:35:01:db:4d:48:69:3c:3e:7a:c0:c8:d2:2f:45:2e:
         46:2a:7a:c2:bf:70:43:30:72:3e:2a:6a:ba:32:b9:70:72:0f:
         67:ae:18:58:1e:21:03:0c:7c:5d:df:ea:ae:27:9d:f2:26:3c:
         33:d2:2b:8e:73:a8:d4:13:34:e9:cc:44:f5:e4:aa:33:11:6a:
         1d:ce:53:5d:c2:8f:25:cd:db:e5:81:ba:87:14:08:77:f2:c9:
         43:d4:86:1a:7a:81:cc:bb:fe:d2:3a:db:ec:d7:74:6d:c9:a4:
         c4:18:02:12:58:87:d3:8e:e5:4f:88:7b:86:49:ee:db:6a:16:
         c7:3f:07:5e:1f:f2:9f:12:ac:58:94:7e:77:19:a4:eb:d4:79:
         70:83:2f:4c:bc:53:30:84:79:a1:ca:3d:7f:f1:e7:17:12:88:
         7b:87:4c:6e:d6:2a:79:b9:e6:e0:23:a4:99:ad:70:bf:30:b5:
         dd:96:63:50:fd:a5:82:bf:ed:52:df:7e:88:3c:01:21:b0:3d:
         c7:6a:31:fd:b1:20:37:47:04:f8:3a:60:37:8f:81:4e:2d:3c:
         23:d8:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:46:14 2026 by rpki-client