Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/59212E58955D11EC97EC0461C4F9AE02.roa
File:                     59212E58955D11EC97EC0461C4F9AE02.roa (raw, json)
Hash identifier:          fiTho/TerZpO+3DrMondjvawf8v6tA9SLzSvEGlCEZE=
Subject key identifier:   78:BB:6A:21:53:6E:1E:C4:4E:7B:34:A4:DD:A0:30:95:E5:93:C7:2F
Certificate issuer:       /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Certificate serial:       043E
Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/59212E58955D11EC97EC0461C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:50:11 +0000
ROA not before:           Fri 03 Oct 2025 00:55:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135334
IP address blocks:        103.172.214.0/23 maxlen: 23
                          103.172.214.0/24 maxlen: 24
                          103.172.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
                          rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
        Validity
            Not Before: Oct  3 00:55:54 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a43603-7d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:89:02:c9:33:11:56:fc:8f:ff:3e:b7:1e:a8:
                    5e:01:3a:b0:7d:bb:48:ac:68:b0:b4:d3:38:d9:49:
                    43:9e:72:48:8f:a6:32:08:53:ee:ff:c9:f5:d4:e4:
                    73:94:85:ce:eb:99:88:83:e4:bb:a4:54:e2:a0:b2:
                    ab:58:71:60:22:a6:b6:21:92:2c:e0:d9:81:a3:44:
                    b9:49:e1:61:05:e9:36:71:0c:51:4f:27:69:3a:f1:
                    ce:58:61:fd:07:c9:15:29:0b:82:05:25:4e:e3:9f:
                    d4:d5:97:59:a4:7a:c8:ff:68:de:98:c1:30:ad:7c:
                    c2:2c:f8:28:2f:0d:f4:8f:26:52:0b:bb:67:fc:b2:
                    d4:b7:98:dc:99:8b:ce:95:e0:4f:33:98:9a:fe:77:
                    52:79:67:59:71:76:d9:ce:7e:31:5b:bb:29:ed:69:
                    5b:b0:84:03:4a:3e:90:30:9f:36:9a:88:57:da:79:
                    fd:a3:2a:61:0a:4c:0e:3f:19:bd:e4:03:91:a1:41:
                    fa:2c:ff:3c:00:38:fd:39:16:51:3b:9f:51:86:eb:
                    cd:98:e1:9d:a9:94:09:1f:26:7b:80:ff:92:59:d9:
                    90:af:60:6c:bd:18:07:4e:4c:3e:7d:78:35:c1:65:
                    ec:97:a0:86:f6:ca:21:b0:dd:5b:9c:3f:37:1f:5a:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:6A:21:53:6E:1E:C4:4E:7B:34:A4:DD:A0:30:95:E5:93:C7:2F
            X509v3 Authority Key Identifier:
                keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/59212E58955D11EC97EC0461C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:3a:3d:81:0a:90:62:73:a5:34:67:ce:86:38:9c:91:f5:cd:
         6b:c5:c4:47:d4:f1:65:b4:02:69:de:c7:42:d4:f8:5c:8c:c5:
         6d:66:67:64:6e:83:b2:18:37:e2:1a:3a:da:54:8d:a7:65:50:
         8b:f8:8e:ba:4c:e5:30:62:6c:2c:d2:b0:b3:c6:87:9e:65:16:
         bd:16:cb:9e:b1:19:af:7b:d3:be:c4:8f:45:03:b6:f8:80:e6:
         33:a8:7d:bf:1c:3b:2c:15:2b:35:9f:a1:d1:cb:eb:fb:b0:04:
         f3:cc:6f:da:00:af:8b:53:80:98:4a:99:20:5f:cf:90:ea:8e:
         76:bd:8e:84:d5:ee:c7:d5:80:f0:b0:46:33:4b:6a:ca:45:a1:
         f1:8e:89:31:be:61:05:e3:67:f3:83:dd:22:db:bc:93:b8:7c:
         c5:b9:7e:10:e7:83:52:1c:3f:a3:be:4c:25:74:a8:64:cd:8c:
         26:e4:0b:fb:1e:73:7c:7d:b8:86:9a:18:21:a0:77:eb:7b:e4:
         42:3a:18:85:48:69:d9:e7:da:91:58:06:4e:bd:f9:0b:8e:b8:
         e1:d5:cd:34:e5:00:77:94:7f:94:37:3a:41:1e:0d:af:eb:fb:
         b0:89:53:1c:a5:b3:f8:95:80:32:22:5d:c5:65:83:cb:0e:e4:
         8a:7f:68:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:22 2026 by rpki-client